www.getbags.app

5 x402 endpoints assessed · worst score 80/100 · generated 2026-09-22T20:26:11.976Z

Some endpoints are safe to pay

Verdicts

pay 5 · caution 0 · avoid 0

Findings across this host

evaluation-traffic — 5 endpoints
missing-trust-surface — 5 endpoints
no-www-authenticate — 5 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://www.getbags.app/api/agent/link/pl-5f9ac407-7cb6-45b9-b4eb-8beb4f22aad3`	pay	80	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://www.getbags.app/api/agent/link/pl-85f28558-0f86-40bd-9a8a-1b485ca8f7fa`	pay	80	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://www.getbags.app/api/agent/link/pl-90ce47d5-ccb1-48c3-8388-379b07517b5c`	pay	80	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://www.getbags.app/api/agent/link/pl-ae375337-11f1-418b-9c0e-a53b90fe4a73`	pay	80	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://www.getbags.app/api/v1`	pay	80	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"www.getbags.app"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.