# HirePulse x402/MCP Merchant Security & Anti-Poisoning Scanner

> HirePulse x402/MCP Merchant Security & Anti-Poisoning Scanner is a paid API for AI agents from gethirepulse.xyz, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-22).

Scans a public x402 API endpoint for security risks, merchant trust signals, and MCP prompt-injection/anti-poisoning issues before authorizing payment

## Facts

- Endpoint: POST https://gethirepulse.xyz/v1/verify-merchant?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hirepulse-x402-mcp-merchant-security-anti-poisoning-scanner-0ce86c0b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_poZ7uUtzIh49m2NXmT3AG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hirepulse-x402-mcp-merchant-security-anti-poisoning-scanner-0ce86c0b -d '<json body>'
```

Example prompt: Before I authorize payment to this x402 endpoint at https://someapi.example.com/v1/data, can you run a HirePulse security and anti-poisoning scan on it to make sure it's trustworthy and not injecting malicious instructions?

## When to prefer this

Use this endpoint when an AI agent is about to authorize a payment to an unknown or third-party x402 API and needs a pre-flight security check. It is especially valuable in agentic pipelines where the agent autonomously selects and pays for external APIs, and where prompt-injection or merchant impersonation via MCP could cause financial or data harm. Prefer this over generic URL scanners because it is specifically designed for x402 payment flows and MCP anti-poisoning scenarios.

## Known failure modes

- Target URL is not a valid HTTPS x402 endpoint — scan cannot proceed
- Endpoint unreachable or returns non-x402 response
- Malformed or missing target_url input
- Rate limit exceeded beyond 5 free daily calls without payment
- Target URL exceeds 2048 character limit

## How this service works

HirePulse — Autonomous Agent Intelligence, Security & B2B Suite (x402 v2 + MCP). Live Web-to-Markdown ($0.002), x402/MCP Merchant Security & Anti-Poisoning Scanner ($0.002), Blind Privacy Proxy ($0.02 single / $0.04 bundle), B2B Contact & MX Verifier ($0.01), Tech Stack ($0.005), Hiring Intent & Active Google Ads ($0.01), Pre-Purchase Merchant Trust Check ($0.005), Checkout Promo Code Finder ($0.01), Product URL-to-JSON ($0.002), Vendor Stability Evaluator ($0.10), Agentic Store Readiness Auditor ($0.01), Conversion-Leak Lead Finder ($0.05), Shelf Schema Comparator ($0.02), Verified Merchant Badge ($0.005). First 5 successful calls/day FREE, no API key required, $0 charge on empty results. Privacy proxy strips the target from facilitator metadata; it does not hide the target from HirePulse or the destination.

## Output

Returns a structured security assessment of the target x402 API endpoint, including merchant trust signals, detected security risks, MCP prompt-injection or anti-poisoning flags, and a recommendation on whether to proceed with payment authorization. Returns no charge on empty or inconclusive results.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "target_url": {
   "type": "string",
   "maxLength": 2048,
   "minLength": 1,
   "description": "Public HTTPS x402 API endpoint to inspect before signing a payment authorization; this scan does not authorize payment."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hirepulse-x402-mcp-merchant-security-anti-poisoning-scanner-0ce86c0b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from gethirepulse.xyz](https://www.zero.xyz/host/gethirepulse.xyz/llms.txt)