# x402 Seller Audit — Vet a Paid Endpoint Before Buying

> x402 Seller Audit — Vet a Paid Endpoint Before Buying is a paid API for AI agents from agent-data-tools.revmesh2074.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-30).

Audits an x402 paid endpoint's payment terms, payTo addresses, and seller domain before an agent commits to paying, returning a pass/review verdict with reasons.

## Facts

- Endpoint: GET https://agent-data-tools.revmesh2074.workers.dev/check/x402-seller?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Provider: agent-data-tools.revmesh2074.workers.dev
- Website: https://agent-data-tools.revmesh2074.workers.dev
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-data-tools-revmesh2074-workers-dev-x402-seller-audit-vet-a-paid-b4c18cbe
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ArX_a_E2oGAzbqzZ3O7EG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-data-tools-revmesh2074-workers-dev-x402-seller-audit-vet-a-paid-b4c18cbe
```

Example prompt: Before we pay that new x402 endpoint at https://some-paid-api.example.com/data, can you audit it first — check whether the payTo address is sanctioned, decode its payment terms, and tell me if it's safe to proceed?

## When to prefer this

Use this endpoint before any first payment to an unfamiliar x402 seller, especially in automated agent workflows where the agent would otherwise pay without human review. Prefer this over a generic OFAC address check when you also need to inspect payment terms, domain trust, asset type, and price — it combines all pre-payment signals in one call. Do not use as a substitute for legal compliance review; treat verdict as a screening aid only.

## Known failure modes

- Target URL does not return a 402 response — terms cannot be decoded
- Target URL is unreachable or times out — no audit possible
- Domain WHOIS data unavailable — domain age and trust fields may be missing
- OFAC screening service temporarily unavailable — sanctions result may be incomplete
- Malformed x402 header on target endpoint — terms object may be empty or partial

## How this service works

Audit an x402 seller before an agent buys from it: decodes the endpoint's 402 terms without paying, OFAC-screens each payTo address, reads its account type and nonce on the payment network, checks the seller domain's age and trust flags, and flags non-USDC assets and high prices. One block, review or pass verdict with reasons. Never signs. Screening aid, not legal advice. Use before the first payment to an unfamiliar x402 seller.

## Output

Returns a structured audit block containing: the decoded x402 payment terms (price in USD, payTo addresses, network, USDC flag, score), OFAC sanctions screening results per payee (sanctioned boolean, account type, nonce, sanction matches), domain trust data (age in days, trust label, flags with severity levels), a list of reasons, a pass/review verdict string, known limitations, and the date of the sanctions list used. Never signs or initiates a payment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url"
 ],
 "properties": {
  "url": {
   "type": "string",
   "description": "Absolute public https URL of the paid endpoint, with any query it needs"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string"
  },
  "note": {
   "type": "string"
  },
  "terms": {
   "type": "object",
   "properties": {
    "score": {
     "type": "number"
    },
    "accepts": {
     "type": "array",
     "items": {
      "type": "object",
      "properties": {
       "payTo": {
        "type": "string"
       },
       "network": {
        "type": "string"
       },
       "priceUsd": {
        "type": "number"
       },
       "assetIsNativeUsdc": {
        "type": "boolean"
       }
      }
     }
    },
    "paywalled": {
     "type": "boolean"
    },
    "x402Version": {
     "type": "number"
    }
   }
  },
  "domain": {
   "type": "object",
   "properties": {
    "name": {
     "type": "string"
    },
    "flags": {
     "type": "array",
     "items": {
      "type": "object",
      "properties": {
       "code": {
        "type": "string"
       },
       "level": {
        "type": "string"
       },
       "message": {
        "type": "string"
       }
      }
     }
    },
    "trust": {
     "type": "string"
    },
    "ageDays": {
     "type": "number"
    },
    "registeredAt": {
     "type": "string"
    }
   }
  },
  "payees": {
   "type": "array",
   "items": {
    "type": "object",
    "properties": {
     "payTo": {
      "type": "string"
     },
     "network": {
      "type": "string"
     },
     "sanctioned": {
      "type": "boolean"
     },
     "accountType": {
      "type": "string"
     },
     "accountNonce": {
      "type": "number"
     },
     "sanctionMatches": {
      "type": "array",
      "items": {}
     }
    }
   }
  },
  "reasons": {
   "type": "array",
   "items": {}
  },
  "verdict": {
   "type": "string"
  },
  "limitations": {
   "type": "array",
   "items": {}
  },
  "sanctionsListDate": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-data-tools-revmesh2074-workers-dev-x402-seller-audit-vet-a-paid-b4c18cbe/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-data-tools.revmesh2074.workers.dev](https://www.zero.xyz/host/agent-data-tools.revmesh2074.workers.dev/llms.txt)
