# minia2a x402 Integration White-Box Security Audit

> minia2a x402 Integration White-Box Security Audit is a paid API for AI agents from minia2a.uk, paid per call via x402, $50/call, status unknown (last checked 2026-09-15).

Performs a white-box security audit of x402 payment integration source code (JS/Python/Go) against the x402 Payment Security Checklist v2, checking for vulnerabilities in payment verification, replay attacks, delivery races, allowance handling, custody, and denial vectors.

## Facts

- Endpoint: GET https://minia2a.uk/x402/integration-audit
- Price: $50/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/minia2a-x402-integration-white-box-security-audit-3d485c3d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_bN3c7IfrgbZw3sPl1jGpR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability minia2a-x402-integration-white-box-security-audit-3d485c3d
```

Example prompt: Can you run a white-box security audit on my JavaScript x402 payment integration code and check it against the x402 Payment Security Checklist v2 — I'm specifically worried about replay attacks and delivery race conditions?

## When to prefer this

Choose this endpoint when you have access to x402 payment integration source code (JS, Python, or Go) and need a structured, checklist-driven white-box audit rather than a black-box behavioral test. It is specifically designed for the x402 payment protocol security checklist v2, covering replay, delivery races, allowance, custody, and denial — making it more targeted than a generic smart contract scanner.

## Known failure modes

- Invalid or missing source code input — returns error or empty findings
- Unsupported language (not JS, Python, or Go) — may return unsupported language error
- Malformed input schema — returns validation error
- Source code too large or complex — may time out or return incomplete audit
- Network or payment verification failure — may return 402 or service unavailable

## How this service works

AI white-box audit of your x402 payment integration source (JS/Py/Go) against the x402 Payment Security Checklist v2 — payment verification, replay, delivery races, allowance, custody, denial. status=needs-confirmation findings.

## Output

Returns a structured security audit report with findings categorized by severity and status (e.g. needs-confirmation), covering payment verification, replay attack surface, delivery race conditions, allowance handling, custody risks, and denial vectors — each mapped to the x402 Payment Security Checklist v2 line items.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "method": {
     "type": "string"
    },
    "bodyType": {
     "type": "string"
    },
    "queryParams": {
     "type": "object"
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/minia2a-x402-integration-white-box-security-audit-3d485c3d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from minia2a.uk](https://www.zero.xyz/host/minia2a.uk/llms.txt)