{ "schema_version": "1.0", "name": "Agent Commerce Safety AI Buyer Catalog", "description": "Machine-readable buyer guide for AI agents choosing which paid x402 resource to buy and why.", "origin": "https://base-agent-preflight.bytoken2023.workers.dev", "x402scan_server": "https://www.x402scan.com/server/b0ce6f4e-73e9-431d-b23c-814ac89cc77b", "openapi_url": "https://base-agent-preflight.bytoken2023.workers.dev/openapi.json", "agent_card_url": "https://base-agent-preflight.bytoken2023.workers.dev/.well-known/agent-card.json", "service_manifest_url": "https://base-agent-preflight.bytoken2023.workers.dev/.well-known/service.json", "product_families": 36, "paid_operations_observed_on_x402scan": 38, "paid_operations_note": "x402scan counts paid OpenAPI operations. Product families count GET products; the extra paid operations are Payment Guard JSON evaluation and policy creation.", "groups": [ { "id": "kyt-wallet-risk", "name": "KYT wallet and contract risk", "buyer_goal": "Decide whether an AI agent, wallet, VASP, or backend should interact with a Base address, token, contract, or counterparty.", "products": [ "base-address-preflight", "base-token-preflight", "base-wallet-activity-delta", "base-approval-risk", "base-contract-verification", "base-wallet-counterparty", "base-event-log-monitor", "evm-transaction-intent" ] }, { "id": "x402-payment-safety", "name": "x402 payment safety", "buyer_goal": "Let an autonomous buyer verify x402 merchants, payment requirements, proof of payment, and seller reputation before or after spending.", "products": [ "x402-merchant-trust", "base-payment-proof", "base-usdc-receipt", "base-gas-fee-quote", "base-nonce-readiness", "base-stablecoin-balance", "x402-endpoint-preflight", "agent-payment-guard", "x402-server-trust" ] }, { "id": "trading-bot-alpha-risk", "name": "Trading bot alpha and risk", "buyer_goal": "Give bots low-cost pre-trade filters for Base wallets, tokens, pools, liquidity, and copytrade decisions.", "products": [ "base-dex-market-monitor", "base-alpha-risk-context", "base-token-alpha-snapshot", "base-wallet-copytrade-risk", "base-new-pool-risk" ] }, { "id": "agent-api-supply-chain", "name": "Agent and API supply-chain preflight", "buyer_goal": "Check tools, packages, domains, OpenAPI specs, feeds, and agent cards before an AI runtime depends on them.", "products": [ "npm-package-preflight", "github-repository-health", "url-change-fingerprint", "feed-snapshot", "a2a-agent-card-preflight", "openapi-spec-preflight", "domain-trust-preflight", "pypi-package-preflight" ] }, { "id": "blockchainsecurity-data", "name": "BlockchainSecurity data wrappers", "buyer_goal": "Buy address labels and asset registry data through x402 without exposing the upstream BlockchainSecurity API key.", "products": [ "bcs-address-labels", "bcs-assets", "bcs-chains", "bcs-token-registry", "bcs-asset-resolve" ] }, { "id": "market-context", "name": "Market context", "buyer_goal": "Fetch compact public market context when an agent needs a paid signal inside a workflow.", "products": [ "prediction-market-snapshot" ] } ], "recommended_workflows": [ { "id": "ai-buyer-before-paying-x402-api", "goal": "Let an autonomous agent decide whether to pay an unknown x402 API.", "sequence": [ "x402-endpoint-preflight", "x402-server-trust", "x402-merchant-trust", "agent-payment-guard" ], "escalation": "Use human review when endpoint metadata is malformed, seller activity is concentrated, or Payment Guard returns REVIEW/BLOCK." }, { "id": "wallet-or-token-kyt-preflight", "goal": "Screen an address or token before payment, onboarding, copytrading, or contract interaction.", "sequence": [ "base-address-preflight", "bcs-address-labels", "base-wallet-counterparty", "evm-transaction-intent" ], "escalation": "Buy the label/counterparty steps only when the first preflight returns medium/high risk or the value at risk is material." }, { "id": "trading-bot-fast-filter", "goal": "Keep bot checks cheap while preserving a path to deeper review.", "sequence": [ "base-alpha-risk-context", "base-token-alpha-snapshot", "base-new-pool-risk", "base-dex-market-monitor" ], "escalation": "Stop at the 0.003 USDC filter for low-value candidates; continue only for high-alpha or suspicious tokens." }, { "id": "agent-tool-supply-chain", "goal": "Preflight a tool, API, dependency, or agent before an AI runtime imports or delegates to it.", "sequence": [ "domain-trust-preflight", "openapi-spec-preflight", "a2a-agent-card-preflight", "npm-package-preflight", "pypi-package-preflight", "github-repository-health" ], "escalation": "Block or require review when package vulnerabilities, stale repos, unsafe domains, or mismatched agent endpoints appear." } ], "products": [ { "id": "base-address-preflight", "title": "Base Address Preflight", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/address-preflight", "price_usdc": "$0.02", "ai_should_buy_when": "Before paying, onboarding, allowlisting, or routing a Base address into an automated workflow.", "returns": "Risk score, risk level, identity type, scam/reputation flags, verification status, recent transfer summary, and decision hint.", "price_reason": "Higher-priced KYT-style check because it combines address profile, counters, transfer signals, and action guidance.", "description": "Inspect a Base address before an autonomous payment or contract interaction.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/address-preflight?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-token-preflight", "title": "Base Token Preflight", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/token-preflight", "price_usdc": "$0.02", "ai_should_buy_when": "Before a bot buys a Base token or an agent approves/interacts with a token contract.", "returns": "Token identity, public reputation, holder and transfer context, DEX liquidity/activity, risk flags, and decision hint.", "price_reason": "Higher-priced token preflight because it joins contract and market-risk context.", "description": "Inspect a Base token contract, public reputation, holder count, and DEX liquidity before trading.", "required_inputs": [ "token" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/token-preflight?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "x402-merchant-trust", "title": "X402 Merchant Trust", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/merchant-trust", "price_usdc": "$0.03", "ai_should_buy_when": "Before trusting a paid API merchant or comparing sellers on x402 marketplaces.", "returns": "USDC receipt history, payer concentration, public activity, merchant trust score, and review guidance.", "price_reason": "Premium merchant intelligence call because it summarizes payment history and concentration, not just one transaction.", "description": "Summarize a Base merchant's public USDC receipt history and payer concentration.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/merchant-trust?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-payment-proof", "title": "Base Payment Proof", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/payment-proof", "price_usdc": "$0.01", "ai_should_buy_when": "After an agent claims it paid, or before delivery when a seller needs to verify the exact Base USDC transaction.", "returns": "Canonical USDC payment match, recipient/amount verification, finality, transaction evidence, and failure reasons.", "price_reason": "Mid-priced verification because it prevents delivery disputes and payment spoofing.", "description": "Verify a Base transaction contains the expected canonical USDC payment.", "required_inputs": [ "tx", "recipient", "amount" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/payment-proof?tx=0xb2d1308a0df026083e5793106af4ed2342d4b517d42935e05c1fb2f91544707f&recipient=0x94F751f04b98507D31b500b7Ed50bE68A1514873&amount=0.02", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-wallet-activity-delta", "title": "Base Wallet Activity Delta", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/wallet-activity-delta", "price_usdc": "$0.01", "ai_should_buy_when": "When an agent needs recent wallet movement since a known timestamp for monitoring or KYT refresh.", "returns": "Recent ERC-20 activity, direction, token metadata, timestamps, and risk-oriented deltas.", "price_reason": "Mid-priced monitoring call for incremental activity rather than a static lookup.", "description": "Return recent Base ERC-20 activity for a wallet after a caller-supplied timestamp.", "required_inputs": [ "address", "since" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-activity-delta?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873&since=2026-06-21T00%3A00%3A00Z", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-approval-risk", "title": "Base Approval Risk", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/approval-risk", "price_usdc": "$0.005", "ai_should_buy_when": "Before signing or keeping an ERC-20 approval, especially for autonomous trading or spending agents.", "returns": "Live allowance, unlimited/large approval flags, owner/spender/token context, and decision hint.", "price_reason": "Low-cost focused check for a single approval risk question.", "description": "Read a live ERC-20 allowance on Base and flag unlimited or unusually large approvals.", "required_inputs": [ "token", "owner", "spender" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/approval-risk?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&owner=0x94F751f04b98507D31b500b7Ed50bE68A1514873&spender=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-contract-verification", "title": "Base Contract Verification", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/contract-verification", "price_usdc": "$0.005", "ai_should_buy_when": "Before an agent calls a Base contract, routes funds to it, or treats it as a trusted integration.", "returns": "Source verification, compiler metadata, proxy type, implementation resolution, and risk notes.", "price_reason": "Low-cost contract hygiene check using public explorer metadata.", "description": "Inspect Base source verification, compiler metadata, proxy type, and resolved implementations.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/contract-verification?address=0x4200000000000000000000000000000000000006", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-usdc-receipt", "title": "Base Usdc Receipt", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/usdc-receipt", "price_usdc": "$0.003", "ai_should_buy_when": "When a seller or agent only needs to extract USDC transfer evidence from one Base transaction.", "returns": "Canonical USDC transfers, sender/recipient/amount, block status, and transaction finality.", "price_reason": "Very low-cost receipt extractor for high-frequency post-payment checks.", "description": "Extract canonical Base USDC transfers and transaction finality from a transaction hash.", "required_inputs": [ "tx" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/usdc-receipt?tx=0xb2d1308a0df026083e5793106af4ed2342d4b517d42935e05c1fb2f91544707f", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-wallet-counterparty", "title": "Base Wallet Counterparty", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/wallet-counterparty", "price_usdc": "$0.005", "ai_should_buy_when": "When a risk agent needs to know who a wallet has recently interacted with before a higher-cost enrichment.", "returns": "Ranked counterparties, interaction counts, transfer context, and concentration signals.", "price_reason": "Low-cost counterparty summary that can trigger deeper review only when needed.", "description": "Rank counterparties in a Base wallet's recent transactions and ERC-20 transfers.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-counterparty?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-event-log-monitor", "title": "Base Event Log Monitor", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/event-log-monitor", "price_usdc": "$0.003", "ai_should_buy_when": "When an agent monitors a contract or address for new events after a known Base block.", "returns": "Recent decoded logs, topics, block numbers, transaction hashes, and monitoring metadata.", "price_reason": "Very low-cost event feed slice for repeated polling.", "description": "Return recent decoded Base event logs at or after a caller-supplied block.", "required_inputs": [ "address", "from_block" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/event-log-monitor?address=0x4200000000000000000000000000000000000006&from_block=47600000", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-gas-fee-quote", "title": "Base Gas Fee Quote", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/gas-fee-quote", "price_usdc": "$0.003", "ai_should_buy_when": "Before an agent signs or prices a Base transaction and needs current gas cost context.", "returns": "Live gas fee data and estimated transaction cost for a caller-supplied gas limit.", "price_reason": "Very low-cost utility call designed for frequent autonomous transaction checks.", "description": "Return live Base gas fees and an estimated transaction cost for a caller-supplied gas limit.", "required_inputs": [ "gas_limit" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/gas-fee-quote?gas_limit=21000", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-nonce-readiness", "title": "Base Nonce Readiness", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/nonce-readiness", "price_usdc": "$0.003", "ai_should_buy_when": "Before an agent submits a Base transaction and needs to avoid nonce collision or pending-transaction confusion.", "returns": "Confirmed nonce, pending nonce, readiness state, and transaction submission guidance.", "price_reason": "Very low-cost transaction hygiene call.", "description": "Compare confirmed and pending Base nonces before an autonomous transaction is signed.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/nonce-readiness?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-stablecoin-balance", "title": "Base Stablecoin Balance", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/base/stablecoin-balance", "price_usdc": "$0.003", "ai_should_buy_when": "Before an agent decides whether a wallet has enough stablecoin liquidity for a task.", "returns": "USDC, USDT, DAI balances, token metadata, and public USD reference context.", "price_reason": "Very low-cost balance check for high-frequency payment readiness.", "description": "Return live Base USDC, USDT, and DAI balances with public USD reference rates.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/stablecoin-balance?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-dex-market-monitor", "title": "Base Dex Market Monitor", "group": "trading-bot-alpha-risk", "method": "GET", "path": "/v1/x402/base/dex-market-monitor", "price_usdc": "$0.005", "ai_should_buy_when": "Before a bot trades a Base token or when an agent needs live DEX liquidity and activity context.", "returns": "DEX pair, price, liquidity, volume, buys/sells, and market-risk signals.", "price_reason": "Low-cost market snapshot for repeated token monitoring.", "description": "Monitor Base DEX price, liquidity, volume, and trade activity for a token.", "required_inputs": [ "token" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/dex-market-monitor?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "prediction-market-snapshot", "title": "Prediction Market Snapshot", "group": "market-context", "method": "GET", "path": "/v1/x402/prediction/market-snapshot", "price_usdc": "$0.005", "ai_should_buy_when": "When an agent needs compact public Kalshi market context inside a decision workflow.", "returns": "Quote, volume, open interest, orderbook snapshot, and market metadata.", "price_reason": "Low-cost external market signal rather than a full trading analytics product.", "description": "Return a public Kalshi prediction-market quote, volume, open interest, and orderbook snapshot.", "required_inputs": [ "ticker" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/prediction/market-snapshot?ticker=KXWCFIRSTGOAL-26JUN21ESPKSA-ESPLYAMAL10", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "x402-endpoint-preflight", "title": "X402 Endpoint Preflight", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/web/endpoint-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before paying an unknown x402 endpoint, especially when the buyer is an autonomous agent.", "returns": "Decoded payment requirements, payTo, network, amount, metadata validity, and malformed/unsafe flags.", "price_reason": "Low-cost marketplace hygiene check that can prevent paying broken or suspicious resources.", "description": "Inspect an unpaid x402 endpoint, decode its payment requirements, and flag unsafe or malformed commerce metadata.", "required_inputs": [ "url" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/endpoint-preflight?url=https%3A%2F%2Fx402.twit.sh%2Ftweets%2Fby%2Fid%3Fid%3D1110302988", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "npm-package-preflight", "title": "Npm Package Preflight", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/software/npm-package-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before a coding agent installs or recommends an npm package.", "returns": "Package metadata, maintenance signals, license, dependencies, deprecation, and OSV vulnerability summary.", "price_reason": "Low-cost software supply-chain preflight using public registries and vulnerability data.", "description": "Check npm package metadata, maintenance signals, deprecation, license, dependencies, and OSV vulnerabilities.", "required_inputs": [ "package" ], "optional_inputs": [ "version" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight?package=express&version=4.18.2", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "github-repository-health", "title": "Github Repository Health", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/software/github-repository-health", "price_usdc": "$0.005", "ai_should_buy_when": "Before an agent depends on a GitHub repository, library, template, or integration.", "returns": "Maintenance, release, archive, license, issue, popularity, and repository health signals.", "price_reason": "Low-cost repository diligence for code agents.", "description": "Score a public GitHub repository using maintenance, release, license, archive, issue, and popularity signals.", "required_inputs": [ "owner", "repo" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/github-repository-health?owner=cloudflare&repo=workers-sdk", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "url-change-fingerprint", "title": "Url Change Fingerprint", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/web/url-change-fingerprint", "price_usdc": "$0.003", "ai_should_buy_when": "When an agent monitors a URL for content or redirect changes without downloading a full archive.", "returns": "Redirects, metadata, cache validators, SHA-256 content fingerprint, and fetch evidence.", "price_reason": "Very low-cost high-frequency web monitoring primitive.", "description": "Fetch a public URL and return redirect, metadata, cache validators, and a SHA-256 content fingerprint.", "required_inputs": [ "url" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/url-change-fingerprint?url=https%3A%2F%2Fwww.cloudflare.com%2F", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "feed-snapshot", "title": "Feed Snapshot", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/web/feed-snapshot", "price_usdc": "$0.003", "ai_should_buy_when": "When an agent needs the latest normalized entries from an RSS or Atom feed.", "returns": "Recent items, stable fingerprints, titles, links, dates, and feed metadata.", "price_reason": "Very low-cost polling primitive for alerting and research agents.", "description": "Normalize the latest entries from a public RSS or Atom feed with stable item fingerprints.", "required_inputs": [ "url" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/feed-snapshot?url=https%3A%2F%2Fgithub.com%2Fcloudflare%2Fworkers-sdk%2Freleases.atom", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "evm-transaction-intent", "title": "Evm Transaction Intent", "group": "kyt-wallet-risk", "method": "GET", "path": "/v1/x402/base/transaction-intent", "price_usdc": "$0.005", "ai_should_buy_when": "Before an agent signs EVM calldata, approves a spender, or submits an unknown transaction.", "returns": "Decoded selector, token transfer/approval intent, unlimited-spend flags, unknown selector warnings, and decision hint.", "price_reason": "Low-cost pre-signing safety check for autonomous wallets.", "description": "Decode Base transaction calldata before signing and flag token transfers, approvals, unlimited spending, and unknown selectors.", "required_inputs": [ "to", "data" ], "optional_inputs": [ "value" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/transaction-intent?to=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&data=0x095ea7b300000000000000000000000094f751f04b98507d31b500b7ed50be68a1514873ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff&value=0", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "a2a-agent-card-preflight", "title": "A2a Agent Card Preflight", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/agent/a2a-card-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before one agent delegates work to another public A2A agent.", "returns": "Agent Card discovery, skill/provider/authentication details, endpoint consistency, and unsafe URL flags.", "price_reason": "Low-cost trust preflight for inter-agent delegation.", "description": "Discover and validate a public A2A Agent Card, its skills, provider, authentication, endpoint consistency, and unsafe URLs.", "required_inputs": [ "url" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/agent/a2a-card-preflight?url=https%3A%2F%2Fbase-agent-preflight.bytoken2023.workers.dev", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "openapi-spec-preflight", "title": "Openapi Spec Preflight", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/web/openapi-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before an AI runtime imports, calls, or pays for a public API described by OpenAPI.", "returns": "OpenAPI validity, server URLs, authentication declarations, operation coverage, content fingerprint, and warnings.", "price_reason": "Low-cost API diligence check for tool discovery.", "description": "Validate a public OpenAPI JSON or YAML document, server URLs, authentication declarations, operation coverage, and content fingerprint.", "required_inputs": [ "url" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/openapi-preflight?url=https%3A%2F%2Fbase-agent-preflight.bytoken2023.workers.dev%2Fopenapi.json", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "domain-trust-preflight", "title": "Domain Trust Preflight", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/web/domain-trust-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before an agent trusts a domain, follows a hosted API, or sends users to a web destination.", "returns": "DNS, DNSSEC, mail, CNAME, RDAP registration age/expiration, and trust signals.", "price_reason": "Low-cost domain trust check for web and API workflows.", "description": "Inspect public DNS, DNSSEC, mail, CNAME resolution, RDAP registration age, expiration, and domain trust signals.", "required_inputs": [ "domain" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/domain-trust-preflight?domain=github.com", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "pypi-package-preflight", "title": "Pypi Package Preflight", "group": "agent-api-supply-chain", "method": "GET", "path": "/v1/x402/software/pypi-package-preflight", "price_usdc": "$0.005", "ai_should_buy_when": "Before a coding agent installs or recommends a PyPI package.", "returns": "PyPI metadata, release age, yanked status, Python requirements, dependencies, license, and OSV vulnerabilities.", "price_reason": "Low-cost Python supply-chain preflight using public registries and vulnerability data.", "description": "Check PyPI package metadata, release age, yanked status, Python requirements, dependencies, license, and OSV vulnerabilities.", "required_inputs": [ "package" ], "optional_inputs": [ "version" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/pypi-package-preflight?package=requests&version=latest", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "agent-payment-guard", "title": "Agent Payment Guard", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/payment-guard/evaluate", "price_usdc": "$0.01", "ai_should_buy_when": "Before an autonomous agent spends through x402 and needs a policy decision, budget enforcement, and audit trail.", "returns": "ALLOW/REVIEW/BLOCK decision, risk score, policy/budget state, reasons, evidence, signed decision token, and reservation metadata.", "price_reason": "Mid-priced core product because it combines payment policy, risk, replay protection, simulation, and auditable evidence.", "description": "AI agent x402 payment firewall: enforce budgets and mandates, simulate transactions, score merchant and domain risk, prevent replay, require human approval, and audit delivery before autonomous spending.", "required_inputs": [ "url", "session_id", "request_id" ], "optional_inputs": [ "max_single_usdc", "session_budget_usdc", "daily_budget_usdc", "allow_pay_to", "block_pay_to", "to", "data", "value" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/payment-guard/evaluate?url=https%3A%2F%2Fx402.twit.sh%2Ftweets%2Fby%2Fid%3Fid%3D1110302988&session_id=demo-session&request_id=demo-request-1&max_single_usdc=0.10&session_budget_usdc=1.00&daily_budget_usdc=5.00", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-alpha-risk-context", "title": "Base Alpha Risk Context", "group": "trading-bot-alpha-risk", "method": "GET", "path": "/v1/x402/base/alpha-risk", "price_usdc": "$0.003", "ai_should_buy_when": "As a cheap first-pass screen before copying, buying, or interacting with a Base wallet or token.", "returns": "Risk score, alpha score, trade bias, wallet/token context, machine tags, and next action.", "price_reason": "Very low-cost bot filter intended for repeated pre-trade calls.", "description": "High-frequency Base wallet or token risk and alpha context for trading bots before copying, buying, or interacting.", "required_inputs": [ "subject" ], "optional_inputs": [ "kind" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/alpha-risk?subject=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&kind=auto", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-token-alpha-snapshot", "title": "Base Token Alpha Snapshot", "group": "trading-bot-alpha-risk", "method": "GET", "path": "/v1/x402/base/token-alpha-snapshot", "price_usdc": "$0.003", "ai_should_buy_when": "Before a bot decides whether a Base token has enough liquidity/activity to continue analysis.", "returns": "Liquidity, volume, buy/sell imbalance, risk flags, and trade bias.", "price_reason": "Very low-cost token alpha snapshot for high-frequency filtering.", "description": "Fast Base token alpha snapshot for trading bots: liquidity, volume, buy/sell imbalance, risk flags, and bot-ready trade bias.", "required_inputs": [ "token" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/token-alpha-snapshot?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-wallet-copytrade-risk", "title": "Base Wallet Copytrade Risk", "group": "trading-bot-alpha-risk", "method": "GET", "path": "/v1/x402/base/wallet-copytrade-risk", "price_usdc": "$0.003", "ai_should_buy_when": "Before a copytrading bot follows a Base wallet or assigns it to a watchlist.", "returns": "Public risk, activity, counterparty quality, and follow/monitor/avoid recommendation.", "price_reason": "Very low-cost wallet suitability filter.", "description": "Copytrade risk snapshot for a Base wallet: public risk, activity, counterparty quality, and whether a bot should follow, monitor, or avoid.", "required_inputs": [ "address" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-copytrade-risk?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "base-new-pool-risk", "title": "Base New Pool Risk", "group": "trading-bot-alpha-risk", "method": "GET", "path": "/v1/x402/base/new-pool-risk", "price_usdc": "$0.003", "ai_should_buy_when": "Before buying a newly launched Base pool or letting a bot chase launch-stage liquidity.", "returns": "Pair age, liquidity, activity imbalance, contract flags, launch-stage risk score, and next action.", "price_reason": "Very low-cost new-pool risk screen for fast bot decisions.", "description": "New Base pool risk snapshot for bots: pair age, liquidity, activity imbalance, contract flags, and launch-stage risk score.", "required_inputs": [ "token" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/new-pool-risk?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "x402-server-trust", "title": "X402 Server Trust", "group": "x402-payment-safety", "method": "GET", "path": "/v1/x402/x402/server-trust", "price_usdc": "$0.01", "ai_should_buy_when": "When an AI buyer is comparing x402 API servers or deciding whether marketplace activity looks credible.", "returns": "Server trust score, buyer concentration risk, micro-payment/ranking risk, freshness, chain coverage, seller enrichment, and decision hint.", "price_reason": "Mid-priced marketplace trust product that scores the seller/server, not just one endpoint.", "description": "Score an x402 API server using public payment volume, transaction count, buyer concentration, seller address, freshness, and chain coverage.", "required_inputs": [ "server_url" ], "optional_inputs": [ "seller", "volume_usdc", "txns", "buyers", "latest_seen_hours", "chains" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/x402/server-trust?server_url=https%3A%2F%2Fbase-agent-preflight.bytoken2023.workers.dev&seller=0x94F751f04b98507D31b500b7Ed50bE68A1514873&volume_usdc=109300&txns=9500000&buyers=626&latest_seen_hours=2&chains=base", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Uses public data and deterministic heuristics; it is not a guarantee of safety.", "High-risk or high-value actions should still use human review or a stricter policy." ] }, { "id": "bcs-address-labels", "title": "Bcs Address Labels", "group": "blockchainsecurity-data", "method": "GET", "path": "/v1/x402/bcs/labels", "price_usdc": "$0.02", "ai_should_buy_when": "When an agent needs an address label or entity hint from BlockchainSecurity/MistTrack-backed data.", "returns": "Upstream BlockchainSecurity label response, request id, credit headers, provenance, and upstream envelope.", "price_reason": "Higher-priced wrapper because the upstream label lookup consumes paid BlockchainSecurity credits.", "description": "Proxy BlockchainSecurity address labels for AI agents using a paid x402 call and a server-side API key.", "required_inputs": [ "chain", "address" ], "optional_inputs": [ "sources", "refresh" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/bcs/labels?chain=ethereum&address=0x28c6c06298d514db089934071355e5743bf21d60&sources=all", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Upstream BlockchainSecurity availability and license terms still apply.", "The hosted Worker keeps the upstream API key server-side; agents receive only the paid response." ] }, { "id": "bcs-assets", "title": "Bcs Assets", "group": "blockchainsecurity-data", "method": "GET", "path": "/v1/x402/bcs/assets", "price_usdc": "$0.003", "ai_should_buy_when": "When an agent needs asset specs for one BlockchainSecurity-supported chain.", "returns": "Chain asset list/specs from BlockchainSecurity with provenance.", "price_reason": "Very low-cost registry lookup with minimal upstream risk.", "description": "Return BlockchainSecurity asset specs for a chain through an x402-paid AI-friendly wrapper.", "required_inputs": [ "chain" ], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/bcs/assets?chain=ethereum", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Upstream BlockchainSecurity availability and license terms still apply.", "The hosted Worker keeps the upstream API key server-side; agents receive only the paid response." ] }, { "id": "bcs-chains", "title": "Bcs Chains", "group": "blockchainsecurity-data", "method": "GET", "path": "/v1/x402/bcs/chains", "price_usdc": "$0.003", "ai_should_buy_when": "When an agent needs the list of BlockchainSecurity-supported chains and native/token entries.", "returns": "Supported chains and chain-level token entries.", "price_reason": "Very low-cost discovery lookup.", "description": "Return BlockchainSecurity supported chains and native/token entries for AI agents.", "required_inputs": [], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/bcs/chains?", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Upstream BlockchainSecurity availability and license terms still apply.", "The hosted Worker keeps the upstream API key server-side; agents receive only the paid response." ] }, { "id": "bcs-token-registry", "title": "Bcs Token Registry", "group": "blockchainsecurity-data", "method": "GET", "path": "/v1/x402/bcs/registry", "price_usdc": "$0.005", "ai_should_buy_when": "When an agent needs the full BlockchainSecurity token registry for symbol/chain normalization.", "returns": "Full token registry with symbols, chains, addresses, decimals, and provenance.", "price_reason": "Low-cost broad registry lookup.", "description": "Return the BlockchainSecurity token registry through an x402 paid resource.", "required_inputs": [], "optional_inputs": [], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/bcs/registry?", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Upstream BlockchainSecurity availability and license terms still apply.", "The hosted Worker keeps the upstream API key server-side; agents receive only the paid response." ] }, { "id": "bcs-asset-resolve", "title": "Bcs Asset Resolve", "group": "blockchainsecurity-data", "method": "GET", "path": "/v1/x402/bcs/resolve", "price_usdc": "$0.005", "ai_should_buy_when": "When an agent needs to resolve symbols or contracts into canonical BlockchainSecurity asset specs.", "returns": "Resolved assets, contract/symbol matches, decimals, stablecoin mode, and upstream provenance.", "price_reason": "Low-cost resolver that prevents wrong-token mistakes before downstream calls.", "description": "Resolve BlockchainSecurity asset symbols or contracts into asset specs through an x402 paid wrapper.", "required_inputs": [ "blockchain" ], "optional_inputs": [ "symbols", "contracts" ], "example_url": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/bcs/resolve?blockchain=ethereum&symbols=usdt%2Cweth", "payment": { "protocol": "x402", "network": "eip155:8453", "pay_to": "0x94F751f04b98507D31b500b7Ed50bE68A1514873" }, "limitations": [ "Upstream BlockchainSecurity availability and license terms still apply.", "The hosted Worker keeps the upstream API key server-side; agents receive only the paid response." ] } ] }