# Delx OAuth Scope Audit

> Delx OAuth Scope Audit is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-14).

Compares a list of requested OAuth scopes against the minimum required scopes and returns a deterministic JSON audit result for preflight validation in agent workflows.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/oauth-scope-audit
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-oauth-scope-audit-c3494297
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kotfIkb0Hp6ifn1T-Au1y

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-oauth-scope-audit-c3494297 -d '<json body>'
```

Example prompt: Can you audit these OAuth scopes for me? The minimum required scopes are ['read:profile', 'read:email'] but the integration is requesting ['read:profile', 'read:email', 'write:posts', 'delete:account'] — flag anything excessive.

## When to prefer this

Choose this endpoint when you need a lightweight, stateless, deterministic preflight step to enforce least-privilege OAuth scope policies inside an automated agent workflow — especially before granting a third-party integration, deploying a new service, or approving an agent action that requires OAuth-based authorization. It is ideal when you need machine-readable output and want to avoid retaining any input data.

## Known failure modes

- Missing or empty 'required' or 'requested' arrays returns a validation error
- Malformed input arrays (non-string items) may cause a parse error
- Network or payment authorization failure returns HTTP 402 or 4xx
- Duplicate scope entries may affect comparison results depending on implementation

## How this service works

Compare requested OAuth scopes with the minimum required scopes. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and produ…

## Output

Returns a deterministic machine-readable JSON object indicating which requested scopes exceed the minimum required, which required scopes are missing from the request, and an overall compliance or pass/fail status for the scope comparison.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "required": {
   "type": "array",
   "description": "Input field: required."
  },
  "requested": {
   "type": "array",
   "description": "Input field: requested."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "excess": [
   "write"
  ],
  "schema": "delx/util-oauth-scope-audit/v1",
  "missing": [],
  "sufficient": true,
  "least_privilege": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-oauth-scope-audit-c3494297/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)