# Andromalius x402 Security Analysis

> Andromalius x402 Security Analysis is a paid API for AI agents from api.andromalius.io, paid per call via x402, $0.01/call, status down (last checked 2026-09-15).

Audits and scores an x402 payment challenge object, verifying policy compliance, payment parameters, and settlement evidence integrity

## Facts

- Endpoint: POST https://api.andromalius.io/v1/audit/challenge
- Price: $0.01/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/andromalius-x402-security-analysis-11003cbd
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vva2cyFhU-LOj3DoHfQ_z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability andromalius-x402-security-analysis-11003cbd -d '<json body>'
```

Example prompt: Audit this x402 payment-required header for me — expected asset USDC, payTo address 0xAbCd1234..., network eip155:8453, maxAmountAtomic 1000000 — and tell me the compliance score and any security findings.

## When to prefer this

Choose this endpoint when you need an independent, policy-controlled security audit of an x402 payment challenge before your AI agent accepts or processes a payment. It is specifically designed for the x402 protocol and provides a structured compliance score with detailed findings, making it superior to generic HTTP inspection or manual parameter checking. Prefer it over rolling your own validation when operating in adversarial or multi-party environments where payment-required objects may be spoofed or misconfigured.

## Known failure modes

- Malformed or non-base64 paymentRequiredHeader causes a 400 validation error
- Mismatch between expected and actual payment parameters returns findings with failed checks
- Missing required fields in the expected object causes schema validation failure
- Network identifier not recognized (e.g. unsupported chain) may result in findings or errors
- Expired or tampered payment-required objects will produce findings and a failed result

## How this service works

Audit an x402 v2 payment challenge. Use when: Before signing a new or changed x402 payment requirement. Preview: https://api.andromalius.io/examples/challenge-audit. Buy: https://andromalius.io/buy. Safe client: https://andromalius.io/integrate/safe-client. Workflow: https://andromalius.io/workflows/agent-prepayment-policy. No arbitrary fetching or input retention. US business users 18+ only. Terms: https://andromalius.io/terms.

## Output

Returns a JSON object with a numeric compliance score (0–100), a boolean passed flag, a human-readable summary, a version number, a list of security findings (empty if clean), and an observations map. A score of 100 with an empty findings array indicates the challenge is fully compliant with the expected policy.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "expected": {
   "type": "object",
   "properties": {
    "asset": {
     "type": "string"
    },
    "payTo": {
     "type": "string",
     "pattern": "^0x[0-9a-fA-F]{40}$"
    },
    "scheme": {
     "type": "string"
    },
    "network": {
     "type": "string",
     "example": "eip155:8453"
    },
    "resourceUrl": {
     "type": "string",
     "format": "uri",
     "maxLength": 2048
    },
    "maxAmountAtomic": {
     "type": "string",
     "pattern": "^(0|[1-9][0-9]*)$"
    },
    "maxTimeoutSeconds": {
     "type": "integer",
     "maximum": 86400,
     "minimum": 30
    }
   },
   "additionalProperties": false
  },
  "paymentRequired": {
   "type": "object",
   "description": "Decoded x402 v2 PAYMENT-REQUIRED object",
   "additionalProperties": true
  },
  "paymentRequiredHeader": {
   "type": "string",
   "maxLength": 131072,
   "minLength": 1,
   "description": "Base64 or base64url-encoded x402 v2 PAYMENT-REQUIRED value"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "kind": "challenge-audit",
  "score": 100,
  "passed": true,
  "seller": {
   "brand": "Andromalius",
   "contacts": {
    "legal": "legal@andromalius.io",
    "privacy": "privacy@andromalius.io",
    "support": "support@andromalius.io",
    "security": "security@andromalius.io"
   },
   "policies": {
    "terms": "https://andromalius.io/terms",
    "privacy": "https://andromalius.io/privacy",
    "refunds": "https://andromalius.io/refunds",
    "acceptableUse": "https://andromalius.io/acceptable-use"
   },
   "legalForm": "New York sole proprietor",
   "legalName": "Richard Kowalczyk",
   "eligibility": "United States business users age 18 or older",
   "jurisdiction": "New York, United States"
  },
  "summary": "No findings",
  "version": 1,
  "findings": [],
  "observations": {},
  "scorePolicyVersion": "1.0.0",
  "findingCodeRegistryVersion": "1.0.0"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/andromalius-x402-security-analysis-11003cbd/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.andromalius.io](https://www.zero.xyz/host/api.andromalius.io/llms.txt)