census / audit
11 x402 endpoints assessed · worst score 40/100 · generated 2026-09-22T20:23:36.647Z
Some endpoints are safe to pay
pay 5 · caution 6 · avoid 0
missing-trust-surface — 11 endpointsno-www-authenticate — 11 endpointsstale — 6 endpointsevaluation-traffic — 4 endpointsbazaar-unavailable — 2 endpoints| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://readx.sh/api/:name/following | caution | 40 | missing-trust-surface no-www-authenticate bazaar-unavailable |
GET | https://readx.sh/api/search | caution | 40 | missing-trust-surface no-www-authenticate bazaar-unavailable |
GET | https://readx.sh/api/:name/info | caution | 65 | missing-trust-surface no-www-authenticate stale evaluation-traffic |
GET | https://readx.sh/api/articles/:id | caution | 65 | missing-trust-surface no-www-authenticate stale evaluation-traffic |
GET | https://readx.sh/api/hashtag/:hash | caution | 65 | missing-trust-surface no-www-authenticate stale evaluation-traffic |
GET | https://readx.sh/api/trends | caution | 65 | missing-trust-surface no-www-authenticate stale evaluation-traffic |
GET | https://readx.sh/api/:name/mentions | pay | 75 | missing-trust-surface no-www-authenticate stale |
GET | https://readx.sh/api/:name/with_replies | pay | 75 | missing-trust-surface no-www-authenticate stale |
GET | https://readx.sh/api/:name | pay | 80 | missing-trust-surface no-www-authenticate |
GET | https://readx.sh/api/:name/affiliates | pay | 80 | missing-trust-surface no-www-authenticate |
GET | https://readx.sh/api/search/tweets | pay | 80 | missing-trust-surface no-www-authenticate |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"readx.sh"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.