# Andromalius Audit Discovery

> Andromalius Audit Discovery is a paid API for AI agents from api.andromalius.io, paid per call via x402, $0.02/call, status down (last checked 2026-09-15).

Audits an OpenAPI 3.0/3.1 document for x402 payment compliance and security best practices, returning a scored findings report

## Facts

- Endpoint: POST https://api.andromalius.io/v1/audit/discovery
- Price: $0.02/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/andromalius-audit-discovery-274b3915
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WjoveSRwAeC52K__hQ0JT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability andromalius-audit-discovery-274b3915 -d '<json body>'
```

Example prompt: Can you audit my OpenAPI spec for x402 payment compliance and tell me if there are any security findings or policy issues?

## When to prefer this

Choose this endpoint when you need an automated, independently scored security and compliance audit of an OpenAPI specification specifically for x402 payment infrastructure. It is ideal for CI/CD pipeline integration, pre-launch API validation, or vetting third-party x402-enabled APIs. Prefer it over generic linting tools when x402 policy controls, settlement evidence, and payment security semantics are the primary concern.

## Known failure modes

- Invalid or malformed OpenAPI document returns a validation error
- Missing required 'openapi' field in request body results in a 400-level error
- Non-x402-aware specs may return low scores with many findings rather than a hard error
- Network or service unavailability returns a 5xx error
- Payment failure (insufficient USDC balance) blocks the request before processing

## How this service works

Preview free synthetic x402 security reports, then buy machine-readable challenge and discovery audits from $0.01 in Base USDC.

## Output

Returns a JSON object with a numeric compliance score (0-100), a boolean passed flag, a plain-text summary, a version field, an array of findings (each describing a specific issue), and an observations map. A clean audit returns score 100, passed: true, and an empty findings array.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "openapi": {
   "type": "object",
   "description": "OpenAPI 3.0 or 3.1 JSON document to audit",
   "additionalProperties": true
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "kind": "discovery-audit",
  "score": 100,
  "passed": true,
  "seller": {
   "brand": "Andromalius",
   "contacts": {
    "legal": "legal@andromalius.io",
    "privacy": "privacy@andromalius.io",
    "support": "support@andromalius.io",
    "security": "security@andromalius.io"
   },
   "policies": {
    "terms": "https://andromalius.io/terms",
    "privacy": "https://andromalius.io/privacy",
    "refunds": "https://andromalius.io/refunds",
    "acceptableUse": "https://andromalius.io/acceptable-use"
   },
   "legalForm": "New York sole proprietor",
   "legalName": "Richard Kowalczyk",
   "eligibility": "United States business users age 18 or older",
   "jurisdiction": "New York, United States"
  },
  "summary": "No findings",
  "version": 1,
  "findings": [],
  "observations": {},
  "scorePolicyVersion": "1.0.0",
  "findingCodeRegistryVersion": "1.0.0"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/andromalius-audit-discovery-274b3915/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.andromalius.io](https://www.zero.xyz/host/api.andromalius.io/llms.txt)