census / audit
11 x402 endpoints assessed · worst score 45/100 · generated 2026-09-22T20:25:08.201Z
Some endpoints are safe to pay
pay 1 · caution 10 · avoid 0
missing-trust-surface — 11 endpointsno-www-authenticate — 11 endpointsunlisted — 10 endpointsevaluation-traffic — 1 endpoint| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://x402-mcp.onrender.com/agent/property-due-diligence | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/mn/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/swarm/products/d22bbf5f3c4b4666a6f80980c7bc7c50/purchase | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/tasks/us-rental-diligence | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/chi/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/den/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/mn/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/moco/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/nyc/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/us/sea/property-check | caution | 45 | missing-trust-surface no-www-authenticate unlisted |
GET | https://x402-mcp.onrender.com/base/tx-decision | pay | 75 | missing-trust-surface no-www-authenticate evaluation-traffic |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"x402-mcp.onrender.com"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.