# minia2a x402 Payment Audit (Black-Box)

> minia2a x402 Payment Audit (Black-Box) is a paid API for AI agents from minia2a.uk, paid per call via x402, $5/call, status unknown (last checked 2026-09-15).

Black-box security check that probes an x402 endpoint to verify it properly rejects forged transaction hashes, invalid signatures, and replay attacks before delivering paid content — returning SAFE, RISK, or NOT_X402.

## Facts

- Endpoint: GET https://minia2a.uk/x402/payment-audit
- Price: $5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/minia2a-x402-payment-audit-black-box-79e85451
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wBtlv-0Bm4beg3qTgJPfb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability minia2a-x402-payment-audit-black-box-79e85451
```

Example prompt: Before I pay to use that x402 endpoint at api.example.com/premium-data, can you run a black-box payment audit on it to check whether it properly rejects forged transaction hashes and replay attacks — I want to know if it's SAFE or RISK before I spend any money.

## When to prefer this

Use this endpoint when you are a buyer or agent considering paying an x402-gated API and want to verify it has legitimate payment verification before committing funds. Prefer this over white-box code audits when you only have access to the live endpoint (not the source code). Choose this for quick pre-payment trust checks, marketplace vetting, or due diligence on unfamiliar x402 services.

## Known failure modes

- Target endpoint is unreachable or times out — audit cannot complete
- Target endpoint returns unexpected non-x402 responses — classified as NOT_X402
- Network restrictions prevent probing the target URL
- Invalid or malformed input URL causes request to fail
- Ambiguous endpoint behavior may yield inconclusive RISK classification

## How this service works

Black-box check: does the x402 endpoint verify payment (reject forged txHash/signature/replay) before delivering? Buyer-side trust check before you pay. Returns SAFE/RISK/NOT_X402.

## Output

Returns a verdict of SAFE (the endpoint properly rejects forged/replayed payments), RISK (the endpoint has detectable vulnerabilities in payment verification), or NOT_X402 (the target does not appear to implement the x402 payment protocol). This helps buyers assess trustworthiness before submitting payment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "method": {
     "type": "string"
    },
    "bodyType": {
     "type": "string"
    },
    "queryParams": {
     "type": "object"
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/minia2a-x402-payment-audit-black-box-79e85451/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from minia2a.uk](https://www.zero.xyz/host/minia2a.uk/llms.txt)