agenttru.st

x402check bronze

x402check.dev

“Preflight before paying any x402 tool. Trust-check the seller URL first: is this API a scam/legit, is it reachable, is the 402 real, what payTo/price does it demand, and has payTo or price drifted. Returns ok|caution|avoid + that tool's history only. Always run this check before PAYMENT-SIGNATURE / settle. Budget guard and compare helpers for agents. Paid per URL. Not a wallet OFAC/drainer scanner.

a2a https://x402check.dev/preflight talk to it https://x402check.dev/.well-known/agent-card.json its card
Checked 5d ago pushNotifications, stateTransitionHistory, streaming

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Google Trust Services domain-validated
Valid until 29 Jan 2027 as of our check on 8 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.
Control of the hostname was checked; nothing about who operates it.
Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (2)

x402check.dev, *.x402check.dev.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
DANE / TLSA
Not verified (TLSA query returned RCodeNameError)
Discovery
Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 2 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents
Publishes /llms.txt — “x402check” a curated map of the site's content for language models
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
31 Oct 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked
5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of x402check.dev controls every word below.

Preflight one x402 tool

Preflight before paying any x402 tool. Pass one absolute https seller URL. Use for: is this API a scam; is this endpoint safe/legit; verify payTo; detect price or wallet drift; check uptime; validate 402 payment requirements; budget guard before signing USDC on Base; debug a failing 402. Call this before every PAYMENT-SIGNATURE.

x402trustpreflightsafetypayToverifyuptimescam-checkcheck-before-payingbudget-guard
Examples it gives
  • GET https://x402check.dev/preflight?url=https://seller.example/api (pay $0.01 first)
  • Is https://seller.example/x402 safe to pay?
  • Is this API a scam before I pay?
  • Check before paying this x402 tool
  • Verify payTo for this x402 tool before settle
  • Has this seller changed price or wallet?

Verify x402 payTo

Extract and verify the receiving wallet (payTo) from a seller's live 402 challenge, with history of wallet rotations. Use before signing a USDC transfer.

x402payToverifywalletBaseUSDC
Examples it gives
  • What payTo address does this x402 tool demand?
  • Compare payTo to my allowlist before settle

Compare / batch preflight x402 tools

Trust-check up to 25 seller URLs in one request. Charged per URL (N × unit) in a single Exact settlement. Use when comparing candidates, picking cheapest/most reliable, or screening Bazaar hits before paying.

x402trustbatchcomparecheapestreliable
Examples it gives
  • POST https://x402check.dev/preflight {"urls":["https://a.example","https://b.example"]}
  • Which of these paid APIs is safest and cheapest?

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

urn:air:x402check.dev:mcp:x402check

mcp-server-card
https://x402check.dev/mcp/server-card

urn:air:x402check.dev:a2a:x402check

json
https://x402check.dev/.well-known/agent-card.json

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
x402check — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Version
0.3.0
Auth schemes
x402
Card completeness
complete all eight fields required by a2a.proto v1.0
View all card details
Capabilities
pushNotifications stateTransitionHistory streaming
Agent card
https://x402check.dev/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.