census / audit
9 x402 endpoints assessed · worst score 20/100 · generated 2026-09-22T20:24:11.340Z
Some endpoints are safe to pay
pay 7 · caution 0 · avoid 2
missing-trust-surface — 9 endpointsno-www-authenticate — 9 endpointsthin-listing — 7 endpointsevaluation-traffic — 4 endpointsstale — 3 endpointsno-x402-header — 2 endpointsnot-402 — 2 endpointsunlisted — 2 endpoints| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://skim402.com/api/v1/read | avoid | 20 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://skim402.com/api/v1/read/js | avoid | 20 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://skim402.com/api/v2/feeds/x402/latest | pay | 75 | missing-trust-surface no-www-authenticate thin-listing stale evaluation-traffic |
GET | https://skim402.com/api/v2/read | pay | 75 | missing-trust-surface no-www-authenticate thin-listing stale evaluation-traffic |
GET | https://skim402.com/api/v2/read/js | pay | 75 | missing-trust-surface no-www-authenticate thin-listing stale evaluation-traffic |
GET | https://skim402.com/api/v2/signal/ai-news/latest | pay | 80 | missing-trust-surface no-www-authenticate thin-listing evaluation-traffic |
GET | https://skim402.com/api/v2/signal/entity-formations/latest | pay | 90 | missing-trust-surface no-www-authenticate thin-listing |
GET | https://skim402.com/api/v2/signal/film-incentives/latest | pay | 90 | missing-trust-surface no-www-authenticate thin-listing |
GET | https://skim402.com/api/v2/signal/studio-jobs/latest | pay | 90 | missing-trust-surface no-www-authenticate thin-listing |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"skim402.com"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.