{ "x402Version": 2, "id": 27860, "slug": "27860", "resource": "https://agent402.tools/api/action-gate", "description": "Deterministic preflight check for a proposed AI agent action - a tool call, payment, fetch, or write - before it executes. Evaluates up to four independent checks (prompt-injection scan on action text/untrusted text, URL/hostname validation, a bounded JSON-schema check on a payload, and a spend proposal against a spend mandate) and returns ALLOW, REVIEW, or BLOCK with stable reason codes plus a SHA-256 request/receipt hash pair.", "type": "http", "serviceName": "AI agent action preflight", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1787497819/bazaar-icons/478aced8e219894c.png", "resourceType": "Travel", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:137", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:42161", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:143", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603", "amount": "10000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:43114", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E", "amount": "10000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:1329", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0xe15fC38F6D8c56aF07bbCBe3BAf5708A2Bf42392", "amount": "10000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:10", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85", "amount": "11000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:4663", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168", "amount": "10000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:42220", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C", "amount": "10000", "maxTimeoutSeconds": 300 }, { "scheme": "upto", "network": "eip155:8453", "payTo": "0xaBF4FAbd7c416fB67202E5f9002389Fc75e2a9D0", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", "payTo": "J7aN3PLJnTCF5qpEnvJHJsnCjcGuqC2rYtEM8Gv3xwg", "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "stellar:pubnet", "payTo": "GDNJXCKW7ZM7GEEVP674TWPU26YJNBQ2FI4ZIPRKTPTNUEJMDHFJWWRL", "asset": "CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75", "amount": "100000", "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=", "payTo": "C7IIHG7SPLPZ5H7ZT6HW3UV2OQMQQE6Y2HBNGZXSLRJULE42BEE2OY2XIE", "asset": "31566704", "amount": "10000", "maxTimeoutSeconds": 300 } ], "outputSchema": { "properties": { "example": { "properties": { "checks": { "properties": { "payload": { "type": "object" }, "prompt": { "type": "object" }, "spend": { "type": "object" }, "url": { "type": "object" } }, "type": "object" }, "decision": { "type": "string" }, "limitation": { "type": "string" }, "reason_codes": { "type": "array" }, "receipt_sha256": { "type": "string" }, "request_sha256": { "type": "string" } }, "required": [ "decision", "reason_codes", "checks", "request_sha256", "receipt_sha256", "limitation" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "body": { "action": { "description": "Fetch a vendor risk report and store the validated JSON response.", "effect": "payment", "name": "submit_paid_api_request" }, "payload": { "account_id": "acct_123", "include_signals": true }, "schema": { "additionalProperties": false, "properties": { "account_id": { "type": "string" }, "include_signals": { "type": "boolean" } }, "required": [ "account_id", "include_signals" ], "type": "object" }, "spend": { "mandate": { "allowed_assets": [ "USDC" ], "allowed_counterparties": [ "0x1111111111111111111111111111111111111111" ], "expires_at": "2030-01-01T00:00:00.000Z", "max_per_tx_atomic": "25000", "max_period_atomic": "100000", "spent_period_atomic": "20000" }, "proposal": { "amount_atomic": "10000", "asset": "USDC", "counterparty": "0x1111111111111111111111111111111111111111" } }, "untrusted_text": "Vendor request: return the current account risk score.", "url": "https://example.com/risk-report" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "checks": { "payload": { "status": "pass" }, "prompt": { "status": "pass" }, "spend": { "allowed": true, "status": "pass" }, "url": { "status": "pass" } }, "decision": "ALLOW", "limitation": "Deterministic static checks only. ALLOW does not guarantee safety, authorization, or successful execution.", "reason_codes": [], "receipt_sha256": "…", "request_sha256": "…" }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "action": { "description": "{name, description, effect} - describes the proposed action; description is scanned for prompt-injection signals", "type": "object" }, "payload": { "description": "Data the action would send, if any", "type": "object" }, "schema": { "description": "Bounded JSON-schema (type/required/properties/additionalProperties) to validate payload against", "type": "object" }, "spend": { "description": "{proposal:{amount_atomic,asset,counterparty}, mandate:{...}, now?} - checked with BigInt, no floats", "type": "object" }, "untrusted_text": { "description": "Any additional untrusted text to scan for prompt-injection signals", "type": "string" }, "url": { "description": "URL the action would fetch/call, if any", "type": "string" } }, "required": [] }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "checks": { "properties": { "payload": { "type": "object" }, "prompt": { "type": "object" }, "spend": { "type": "object" }, "url": { "type": "object" } }, "type": "object" }, "decision": { "type": "string" }, "limitation": { "type": "string" }, "reason_codes": { "type": "array" }, "receipt_sha256": { "type": "string" }, "request_sha256": { "type": "string" } }, "required": [ "decision", "reason_codes", "checks", "request_sha256", "receipt_sha256", "limitation" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } }, "builder-code": { "info": { "a": "bc_b4aw4uzd" }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "additionalProperties": false, "properties": { "a": { "description": "App builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "s": { "description": "Service builder codes", "items": { "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "maxItems": 11, "type": "array" }, "w": { "description": "Wallet builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" } }, "type": "object" } }, "payment-identifier": { "info": { "required": false }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "id": { "maxLength": 128, "minLength": 16, "pattern": "^[a-zA-Z0-9_-]+$", "type": "string" }, "required": { "type": "boolean" } }, "required": [ "required" ], "type": "object" } } }, "tags": [ "agent", "safety", "security", "preflight", "prompt-injection", "bazaar", "builder-code", "payment-identifier" ], "sourceHost": "agent402.tools", "lastUpdated": "2026-10-08T06:12:53.686Z", "quality": { "calls30d": 5, "uniquePayers30d": 4, "lastCalledAt": "2026-10-08T06:12:53.49Z" }, "metadata": { "serviceName": "AI agent action preflight", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1787497819/bazaar-icons/478aced8e219894c.png", "extensions": { "bazaar": { "info": { "input": { "body": { "action": { "description": "Fetch a vendor risk report and store the validated JSON response.", "effect": "payment", "name": "submit_paid_api_request" }, "payload": { "account_id": "acct_123", "include_signals": true }, "schema": { "additionalProperties": false, "properties": { "account_id": { "type": "string" }, "include_signals": { "type": "boolean" } }, "required": [ "account_id", "include_signals" ], "type": "object" }, "spend": { "mandate": { "allowed_assets": [ "USDC" ], "allowed_counterparties": [ "0x1111111111111111111111111111111111111111" ], "expires_at": "2030-01-01T00:00:00.000Z", "max_per_tx_atomic": "25000", "max_period_atomic": "100000", "spent_period_atomic": "20000" }, "proposal": { "amount_atomic": "10000", "asset": "USDC", "counterparty": "0x1111111111111111111111111111111111111111" } }, "untrusted_text": "Vendor request: return the current account risk score.", "url": "https://example.com/risk-report" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "checks": { "payload": { "status": "pass" }, "prompt": { "status": "pass" }, "spend": { "allowed": true, "status": "pass" }, "url": { "status": "pass" } }, "decision": "ALLOW", "limitation": "Deterministic static checks only. ALLOW does not guarantee safety, authorization, or successful execution.", "reason_codes": [], "receipt_sha256": "…", "request_sha256": "…" }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "action": { "description": "{name, description, effect} - describes the proposed action; description is scanned for prompt-injection signals", "type": "object" }, "payload": { "description": "Data the action would send, if any", "type": "object" }, "schema": { "description": "Bounded JSON-schema (type/required/properties/additionalProperties) to validate payload against", "type": "object" }, "spend": { "description": "{proposal:{amount_atomic,asset,counterparty}, mandate:{...}, now?} - checked with BigInt, no floats", "type": "object" }, "untrusted_text": { "description": "Any additional untrusted text to scan for prompt-injection signals", "type": "string" }, "url": { "description": "URL the action would fetch/call, if any", "type": "string" } }, "required": [] }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "checks": { "properties": { "payload": { "type": "object" }, "prompt": { "type": "object" }, "spend": { "type": "object" }, "url": { "type": "object" } }, "type": "object" }, "decision": { "type": "string" }, "limitation": { "type": "string" }, "reason_codes": { "type": "array" }, "receipt_sha256": { "type": "string" }, "request_sha256": { "type": "string" } }, "required": [ "decision", "reason_codes", "checks", "request_sha256", "receipt_sha256", "limitation" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } }, "builder-code": { "info": { "a": "bc_b4aw4uzd" }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "additionalProperties": false, "properties": { "a": { "description": "App builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "s": { "description": "Service builder codes", "items": { "pattern": "^[a-z0-9_]{1,32}$", "type": "string" }, "maxItems": 11, "type": "array" }, "w": { "description": "Wallet builder code", "pattern": "^[a-z0-9_]{1,32}$", "type": "string" } }, "type": "object" } }, "payment-identifier": { "info": { "required": false }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "id": { "maxLength": 128, "minLength": 16, "pattern": "^[a-zA-Z0-9_-]+$", "type": "string" }, "required": { "type": "boolean" } }, "required": [ "required" ], "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "agent402.tools", "manifest_name": "agent402.tools", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "example": { "checks": { "payload": {}, "prompt": {}, "spend": {}, "url": {} }, "decision": "string", "limitation": "string", "reason_codes": [ "value" ], "receipt_sha256": "string", "request_sha256": "string" }, "type": "string" } }