x402 Trust Index

Once a day, x402 Doctor checks every resource listed in the CDP Bazaar (x402) and in the MPP directory (Stripe + Tempo) the way a paying agent would, and stops at the 402 challenge. Would a payment settle today, and how often did it over the last 30 days?

Can an AI agent pay?

Loading today's scan…

Paid and delivered?

Loading the latest spot-buy…

Reading the 402 shows that a payment would settle, not what comes back for it. So every Sunday x402 Doctor buys a random sample of up to 30 endpoints that are "go" here (one per seller, at most $0.05 each, x402 in USDC on Base, from a dedicated wallet), sends the example input the seller declares in its listing, and measures on-chain whether money left the wallet. A small sample: read it as a signal, not a score. Data: /api/trust/spot · every run.

What goes wrong

Reasons in the latest scan. A service can have more than one; "works, with warnings" services count here too.

Show as a table

Reason	Code	Services

What is behind the endpoints

Sellers with the most endpoints

Seller	Endpoints	Distinct services

A seller often lists the same API many times (once per coin, city or ticker). Payable endpoints of one seller with nearly the same description count as one service; the kind of service is judged by TypeSafe Jev (a keyword guess until Jev has seen it).

Possible bait

Loading…

Look up a resource

Look up

What the scan checks

• The endpoint answers 402 with a valid x402 challenge.
• At least one payment option would settle: valid payTo and amount, the fee payer or EIP-712 domain, and for Solana a USDC token account at the payout wallet.
• The price matches what its OpenAPI advertises, it is served over HTTPS, and it charges in a known USDC contract.
• Its payout address (the x402 payTo or the MPP recipient) is not on the OFAC SDN sanctions list. Screened since 13 Oct 2026 against presign-guard's open copy of the US Treasury list; a listed address is no-go.

Agents get this track record in every pre-payment check (GET /api/v1/preflight, $0.001): a seller that was payable on fewer than half of its scanned days gets a caution.

For sellers

All seller tools on one page: x402 Doctor for sellers.

• The scan sends one request (GET, or POST when you declared POST) per resource per day, plus one /openapi.json per origin, with at most two requests to your host at a time. It never pays and never sends a payment header.
• User-Agent: x402-doctor-trust-scan/1.0 (+https://x402-doctor.fizzl.eu/trust; …)
• Get a badge for your README or site: look up your endpoint above and copy the snippet. It shows your track record (e.g. ) and links back here. For a whole domain use /badge.svg?url=https://your.domain.
• Found a problem? Diagnose your endpoint for free on the web page, and see every check with a fix hint.
• Paid, and want to see the transaction behind it? The payment proof check reads the PAYMENT-RESPONSE header.
• Want your origin left out of the scan? Open an issue.

by · all tools and live demos at fizzl.eu