x402-api-catalog.onrender.com
6 resources listed under x402-api-catalog.onrender.com.
Source: https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources · last updated 2026-09-18
Resources
npm package trust check / risk score / security audit: registry age, w
npm package trust check / risk score / security audit: registry age, weekly downloads, GitHub org/stars, OSV.dev vulnerabilities, typosquat detection.
MCP server safety audit: completes a real initialize+tools/list handsh
MCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-poisoning), prompt-injection-style phrasing, and tools that quietly combine multiple high-privilege capabilities (network+filesystem+exec+credential access). If a GitHub repo is supplied, folds in a real software-supply-chain signal too.
EVM token contract safety check: honeypot detection, mint/blacklist/pa
EVM token contract safety check: honeypot detection, mint/blacklist/pausable/self-destruct capability, ownership renouncement, transfer tax, and a real token-impersonation check (does the symbol claim to be USDC/WETH/DAI/cbBTC at the wrong address — the token equivalent of npm typosquatting).
Domain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT re
Domain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT records), whether mail routing exists, HTTP reachability.
GitHub repo health check / audit / verify: stars, forks, open issues,
GitHub repo health check / audit / verify: stars, forks, open issues, last commit age, archived status, license.
Audits another x402 service for the exact failure modes that cause agg
Audits another x402 service for the exact failure modes that cause aggregators (agent-tools.cloud, x402scan, Bazaar) to mark it 'down' or make its 402 challenge unreadable: missing/invalid /.well-known/x402 descriptor, an unpaid request returning 500/404 instead of a clean 402, a malformed or missing payment-required challenge, and drift between the descriptor's advertised terms and the live challenge. Returns a concrete diagnosis and fix for each failing check, not just pass/fail.
Machine-readable
All resources from this provider: /discovery/merchant (by payment address) or filter /discovery/resources.