census / audit
12 x402 endpoints assessed · worst score 10/100 · generated 2026-09-22T20:22:48.476Z
No endpoint here is currently safe to pay
pay 0 · caution 0 · avoid 12
missing-trust-surface — 12 endpointsno-www-authenticate — 12 endpointsno-x402-header — 12 endpointsnot-402 — 12 endpointsunlisted — 12 endpoints| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://simfuse.app/x402/plans/search | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtd83v4knf88ryhmnh6jwk | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtd890pj8xe33wyr1djcat | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtd8akcc65w825ekzv50af | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtd8nmt5bvxhze6qan12km | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtd8y8a1zbp8pbqjkc795b | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdanvn3zqcmdmdxd2mm32 | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdb8pnrtd897vwkxht597 | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdbhapb1ymvp089vqja16 | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdbwa5xk7h0k7p6t6t927 | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdbybqar2qewyaf9wzf1k | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://simfuse.app/x402/purchase/01kvmtdc25axef9bh0f1639nkj | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"simfuse.app"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.