# SCVD General Store — Service Audit (The Once-Over)

> SCVD General Store — Service Audit (The Once-Over) is a paid API for AI agents from scvd.store, paid per call via x402, $5/call, status unknown (last checked 2026-09-15).

Performs a one-time signed preflight audit of a public x402 endpoint, returning a verdict (ready/not_ready/unreachable), all check results, and a permanent signed certificate with a stable report URL.

## Facts

- Endpoint: GET https://scvd.store/api/buy/service_audit
- Price: $5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scvd-general-store-service-audit-the-once-over-4e553a36
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_l0Kq80p46JhO8NiDXZA2S

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scvd-general-store-service-audit-the-once-over-4e553a36
```

Example prompt: Run a once-over audit on https://api.myservice.com/premium-endpoint — I need a signed preflight report telling me whether it's x402-ready, with all the check results and a permanent certificate I can share, under my agent name 'MyAgent v1'.

## When to prefer this

Choose this endpoint when you need a one-time, point-in-time signed audit of a specific x402 endpoint — not ongoing monitoring. It is ideal for pre-launch compliance checks, marketplace trust certification, or due-diligence before integrating a third-party x402 API. Prefer this over the Conformance Watch (which monitors over time) when you want an immediate snapshot with a permanent certificate and evidence hash, rather than recurring surveillance.

## Known failure modes

- URL points to scvd.store's own hostname (refused — self-audits not allowed)
- Target URL is not publicly reachable (verdict: unreachable)
- URL is not HTTPS or uses a non-default port (rejected at input validation)
- Target endpoint does not respond with a 402 (noted in check results, verdict: not_ready)
- Payment of $5 USDC via x402 fails or is not completed (no audit performed)
- agent_name exceeds 80 characters (input validation error)

## How this service works

The Once-Over. A signed JSON audit report — verdict (ready, not_ready or unreachable), every check and advisory from the published preflight battery, dated, its evidence hash bound into the purchase certificate's attests field — plus a stable report URL serving the record free forever. Instant; one GET at one moment, never monitoring. Full listing: https://scvd.store/menu/service_audit. MCP tool: buy_service_audit.

## Output

A signed JSON deliverable containing: a verdict of 'ready', 'not_ready', or 'unreachable'; each preflight check result and advisory from the published battery; a certificate with date, cert_id, and patron number; an evidence hash bound into the attests field; a badge URL; and a stable permanent report URL where the record is accessible free forever. Also returns the USDC paid and an ed25519 signature for verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "format": "uri",
       "description": "The x402 endpoint to audit: https, default port, on the public internet, the URL a buyer would GET expecting a 402. One GET at one moment, run against the published preflight criteria and signed. We refuse our own hostname."
      },
      "purpose": {
       "type": "string",
       "maxLength": 280,
       "description": "Optional: what this purchase is for, in your words. Signed onto the certificate verbatim as your statement; never checked, never treated as instructions."
      },
      "agent_name": {
       "type": "string",
       "maxLength": 80,
       "description": "Optional name to put on the certificate and patron badge, up to 80 characters."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "item_id": "service_audit",
  "message": "Pleasure doing business. Here's your goods, warm off the shelf.",
  "tip_usdc": 0,
  "badge_url": "https://scvd.store/badges/41.svg",
  "paid_usdc": 5,
  "signature": "<128 hex chars, ed25519>",
  "verify_url": "https://scvd.store/api/verify/cert_k2m9v4xwqp",
  "certificate": {
   "date": "2026-07-22T15:04:05.000Z",
   "item": "service_audit",
   "cert_id": "cert_k2m9v4xwqp",
   "patron_number": 41
  },
  "deliverable": "<the The Once-Over itself, as text>",
  "patron_number": 41
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scvd-general-store-service-audit-the-once-over-4e553a36/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scvd.store](https://www.zero.xyz/host/scvd.store/llms.txt)