vaaya.ai

25 x402 endpoints assessed · worst score 15/100 · generated 2026-09-22T20:24:46.846Z

No endpoint here is currently safe to pay

Verdicts

pay 0 · caution 0 · avoid 25

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
no-x402-header — 25 endpoints
not-402 — 25 endpoints
unlisted — 25 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://vaaya.ai/api/run/browserbase/create_session`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/contactout/linkedin-contacts`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/crw/scrape`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/exa/contents`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/exa/search`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/fal/generate`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/fal/upload`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/files/upload_from_url`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/firecrawl/scrape`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/icypeas/email-search`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/icypeas/result`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/kadec0/fetch`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/linkup/search`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/modal/sandbox-create`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/modal/sandbox-exec`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/openwebninja/jsearch`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/signalbase/companies`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/tavily/extract`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/tavily/search`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/theirstack/buying-intents`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/theirstack/jobs`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/theirstack/tech-catalog`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/theirstack/technographics`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/tikhub/fetch`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://vaaya.ai/api/run/tomba/linkedin-finder`	avoid	15	`not-402` `no-x402-header` `missing-trust-surface` `no-www-authenticate` `unlisted`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"vaaya.ai"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.