# ProfitCollector Service Trust Report

> ProfitCollector Service Trust Report is a paid API for AI agents from api.bakhour.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Evaluates an x402-protected endpoint for TLS health, x402 challenge structure validity, payment history, and overall trustworthiness, returning a scored due-diligence report.

## Facts

- Endpoint: POST https://api.bakhour.ca/x402/service-trust-report
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/profitcollector-service-trust-report-e65d9f22
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_QG6wrB0y8yaZ09E7gV4s9

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability profitcollector-service-trust-report-e65d9f22 -d '<json body>'
```

Example prompt: Before my agent pays into it, run a trust report on https://api.example.com/x402/some-endpoint using a GET request — I want to see the trust score, TLS status, and whether its 402 challenge is well-formed.

## When to prefer this

Use this endpoint when an AI agent or automated workflow needs to vet an x402-protected API before committing funds or integrating it into a pipeline. It is specifically designed for the x402 micropayment protocol context, providing structured trust scoring, TLS validation, and payment history checks in a single call — making it the right choice over generic TLS checkers or uptime monitors when the question is 'is this x402 endpoint safe and legitimate to pay?'

## Known failure modes

- target_url is unreachable or returns non-402 status — report may show challenge_status other than 402 and reduced trust score
- TLS certificate is expired or invalid — TLS available field will be false and trust score lowered
- Malformed x402 challenge structure — findings array will contain specific structural errors
- Unknown or unregistered target_url with no payment history — payto_history.available will be false
- Invalid URL format supplied — request will likely return a 4xx validation error

## How this service works

Decision-grade security/due-diligence outcome reports ($20-$100) plus deterministic paid utilities ($0.001+) for software agents and automated workflows.

## Output

A JSON object containing: TLS availability and certificate expiry, a trust_score (0–100) with severity label (e.g. 'trustworthy') and a list of findings, the HTTP challenge_status (expected 402), a challenge_structure object indicating whether the x402 payment challenge is well-formed and on the correct network, and a payto_history object showing the endpoint's balance and historical payment availability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "target_url": {
   "type": "string",
   "description": "The full https:// URL of the x402-protected endpoint to evaluate."
  },
  "target_method": {
   "enum": [
    "GET",
    "POST"
   ],
   "type": "string",
   "description": "HTTP method to request target_url with (no request body/payment is sent either way). Defaults to GET; use POST for action-style endpoints that only 402-challenge on POST."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tls": {
   "available": true,
   "not_after": "Nov 27 12:39:21 2026 GMT"
  },
  "score": {
   "findings": [],
   "severity": "trustworthy",
   "trust_score": 100
  },
  "target_url": "https://api.bakhour.ca/security/repo-risk-report/standard",
  "payto_history": {
   "balance": 2.171,
   "available": true,
   "raw_balance": 2171000
  },
  "challenge_status": 402,
  "challenge_structure": {
   "fields": {
    "scheme": "exact",
    "network": "eip155:8453"
   },
   "findings": [],
   "well_formed": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/profitcollector-service-trust-report-e65d9f22/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.bakhour.ca](https://www.zero.xyz/host/api.bakhour.ca/llms.txt)