# Blockchain Money Map x402 Cache Leakage Guard

> Blockchain Money Map x402 Cache Leakage Guard is a paid API for AI agents from api.blockchainmoneymap.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-19).

Audits an x402-gated API route for cache misconfiguration that could allow paid content to leak to unpaid users via CDN or HTTP caching.

## Facts

- Endpoint: POST https://api.blockchainmoneymap.com/api/x402/x402-cache-leakage-guard?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/blockchain-money-map-x402-cache-leakage-guard-6cac5bb8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_3SDbkYT6l2TXRLwF8Sdl0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability blockchain-money-map-x402-cache-leakage-guard-6cac5bb8 -d '<json body>'
```

Example prompt: Run a cache leakage audit on my x402 route '/api/reports/premium' — it returned status 200, the cache-control is 'public, max-age=3600', payment_required is false, and the CDN cache is present with paid content already cached. Compare it against a reference where cache-control was 'no-store' and paid content was not cached.

## When to prefer this

Use this endpoint when you need to specifically audit x402-monetized API routes for HTTP/CDN cache misconfiguration that could allow paid content to be served without payment. It is purpose-built for the x402 payment protocol context, making it more targeted than generic HTTP header validators or security scanners when the concern is cache leakage on blockchain-payment-gated endpoints.

## Known failure modes

- Missing required fields (route_path, status_code, cache_control, payment_required_present) returns validation error
- Invalid mode value (not 'audit') returns schema rejection
- Conflicting facts (e.g. free_route_present and paid_content_cached_present both true) may produce ambiguous audit output
- Payment failure via x402 protocol returns 402 with payment details
- Malformed headers object exceeding maxProperties returns schema error

## How this service works

Checks caller-supplied HTTP 402 cache and paid-route facts for leakage risk.

## Output

Returns a JSON audit result indicating whether the specified x402 route has cache misconfiguration that could expose paid content to unpaid users, including comparison against a reference configuration, specific policy violations detected, and an overall compliance verdict.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "mode": {
   "enum": [
    "audit"
   ]
  },
  "facts": {
   "type": "object",
   "required": [
    "route_path",
    "status_code",
    "cache_control",
    "payment_required_present"
   ],
   "properties": {
    "headers": {
     "type": "object",
     "properties": {
      "x-version": {
       "type": "string",
       "maxLength": 80
      },
      "x-provider": {
       "type": "string",
       "maxLength": 120
      },
      "content_type": {
       "type": "string",
       "maxLength": 120
      },
      "x-request-id": {
       "type": "string",
       "maxLength": 160
      },
      "cache-control": {
       "type": "string",
       "maxLength": 160
      },
      "content-length": {
       "type": "string",
       "maxLength": 40
      }
     },
     "maxProperties": 10,
     "additionalProperties": false
    },
    "route_path": {
     "type": "string",
     "maxLength": 500
    },
    "status_code": {
     "type": "number"
    },
    "cache_control": {
     "type": "string",
     "maxLength": 500
    },
    "resource_label": {
     "type": "string",
     "maxLength": 500
    },
    "cdn_cache_present": {
     "type": "boolean"
    },
    "free_route_present": {
     "type": "boolean"
    },
    "payment_required_present": {
     "type": "boolean"
    },
    "paid_content_cached_present": {
     "type": "boolean"
    }
   },
   "additionalProperties": false
  },
  "policy": {
   "type": "object",
   "additionalProperties": true
  },
  "reference_facts": {
   "type": "object",
   "required": [
    "route_path",
    "status_code",
    "cache_control",
    "payment_required_present"
   ],
   "properties": {
    "headers": {
     "type": "object",
     "properties": {
      "x-version": {
       "type": "string",
       "maxLength": 80
      },
      "x-provider": {
       "type": "string",
       "maxLength": 120
      },
      "content_type": {
       "type": "string",
       "maxLength": 120
      },
      "x-request-id": {
       "type": "string",
       "maxLength": 160
      },
      "cache-control": {
       "type": "string",
       "maxLength": 160
      },
      "content-length": {
       "type": "string",
       "maxLength": 40
      }
     },
     "maxProperties": 10,
     "additionalProperties": false
    },
    "route_path": {
     "type": "string",
     "maxLength": 500
    },
    "status_code": {
     "type": "number"
    },
    "cache_control": {
     "type": "string",
     "maxLength": 500
   
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/blockchain-money-map-x402-cache-leakage-guard-6cac5bb8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.blockchainmoneymap.com](https://www.zero.xyz/host/api.blockchainmoneymap.com/llms.txt)