# Delx Tool Permission Audit

> Delx Tool Permission Audit is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Compare a list of requested agent tools against an explicit least-privilege allowlist and return a deterministic JSON audit report of permitted and denied tools.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/tool-permission-audit
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-tool-permission-audit-aa62ef06
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XtaJE7fEgdBiO43xunFgQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-tool-permission-audit-aa62ef06 -d '<json body>'
```

Example prompt: Before we run this agent workflow, audit its tool permissions — the allowed tools are ['read_file','send_email','query_db'] and the agent has requested ['read_file','send_email','delete_record','execute_code'] — tell me which ones are outside the approved list.

## When to prefer this

Use this endpoint when you need a fast, stateless, deterministic preflight check to enforce least-privilege tool access for an AI agent before it reaches production. Prefer it over custom authorization logic when you want a cheap, consistent, machine-readable audit result that can be embedded as a bounded step inside a larger agent workflow without side effects or data retention.

## Known failure modes

- Missing or empty 'allowed' array — may return an error or deny all requested tools
- Missing or empty 'requested' array — may return an empty result or vacuous pass
- Malformed array input — returns a validation or schema error
- Network or payment failure — x402 payment on Base may fail if wallet is underfunded or network is congested

## How this service works

Compare requested agent tools with an explicit least-privilege allowlist. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…

## Output

A deterministic machine-readable JSON object indicating which of the requested tools are permitted (present in the allowlist) and which are denied (not in the allowlist), along with a summary of the audit outcome. Results are advisory and stateless — no data is retained.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "allowed": {
   "type": "array",
   "description": "Input field: allowed."
  },
  "requested": {
   "type": "array",
   "description": "Input field: requested."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "denied": [
   "deploy"
  ],
  "schema": "delx/util-tool-permission-audit/v1",
  "permitted": false,
  "requested_count": 2,
  "allowed_requested": [
   "read"
  ],
  "least_privilege_advisory": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-tool-permission-audit-aa62ef06/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)