x402 v2 · Base mainnet

Know why your 402 fails.

A machine-readable production audit for payment endpoints. Catch malformed challenges, unsafe caching, missing CORS, broken EIP-712 domains, and invisible Bazaar metadata before agents do.

Read the API contract Discovery manifest

$0.05 USDC endpoint audit · $20 USDC full launch report · no account or API key

POST /v1/audit

{
  "score": 92,
  "ready": true,
  "summary": "Protocol-ready with 2 recommendations.",
  "checks": [
    { "id": "status-402", "passed": true },
    { "id": "header-decodes", "passed": true },
    { "id": "protocol-v2", "passed": true },
    { "id": "bazaar-metadata", "passed": false }
  ]
}

2 tiersendpoint or origin audit

12shard request timeout

0 keysaccountless access

USDCdirect Base settlement

One call. A deployable answer.

01 / PROTOCOL

Challenge integrity

Validates status, headers, base64 JSON, v2 structure, schemes, amounts, CAIP-2 networks, assets, and recipients.

02 / DISCOVERY

Agent visibility

Checks resource metadata and Bazaar input/output declarations so marketplaces can actually index the service.

03 / HARDENING

Browser-safe delivery

Flags cacheable payment challenges, hidden response headers, invalid content types, oversized bodies, and weak EVM domains.