Back to Browse
Synthex Forge x402 Authorized Red Team Scan
x402
Synthex Forge x402 Authorized Red Team Scan is a paid API for AI agents from x402.synthexforge.com, paid per call via x402, $0.25/call, status unknown (last checked 2026-10-23).
Executes a paid, authorized red team security scan against a target URL, returning a signed attestation of findings with Ed25519 + SHA-256 proof.
Price / call$0.25
Success—
StatusUnknown
How this service works
Synthex Forge x402 Receive: 41 paid verification, attestation and governance endpoints (Ed25519 + SHA-256 signed artifacts) plus free verify/public-key/standard sibling routes. Paid routes answer HTTP 402 with an x402 v2 `payment-required` envelope (atomic USDC on Base mainnet, chain ID 8453). Free routes are declared with `security: []` per the x402scan discovery spec.
Output
Returns a JSON object with an 'ok' boolean confirming the scan was accepted, along with a signed attestation artifact (Ed25519 + SHA-256) documenting the authorized scan execution, findings summary, and scope confirmation suitable for governance and compliance records.
Example use cases
Compliance-ready pentest attestation
“I need to run an authorized security scan on https://staging.acmecorp.com covering authentication bypass and CSRF tests, scoped to the user account management module. We have a signed authorization document — can you run the scan and get back a cryptographically signed artifact I can use for our SOC2 audit?”
Pre-launch red team verification
“Before we go live on Friday, scan https://beta.launchapp.io for XSS and injection vulnerabilities — the scope is the public-facing API endpoints only, and I've got written authorization from the CISO as evidence.”
Governance artifact for third-party audit
“Our external auditors need proof that we ran an authorized red team assessment on https://portal.fintech-client.com. Run a scan covering privilege escalation and insecure direct object reference tests, scoped to the admin dashboard, and return a signed governance record we can hand over.”
Technical details
Endpoint
POSThttps://x402.synthexforge.com/v1/security/redteam/authorized-scan?utm_source=zero.xyzWhen to prefer
Choose this endpoint when you need not just a security scan but a cryptographically signed, attestable record of an authorized red team engagement — especially for compliance, SOC2, or governance requirements where proof of authorization and Ed25519-signed artifacts are mandatory. Prefer this over generic scanning tools when the auditability and blockchain-payment provenance of the engagement matter.
Side effects
- Missing or invalid authorization_evidence causes rejection of the request
- target_url not reachable or out of scope returns an error
- Insufficient USDC balance or payment failure results in HTTP 402 with payment-required envelope
- Invalid authorized_tests values not recognized by the scan engine
- Scope description too vague causes scan to be rejected for governance reasons
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| target_url | string | |
| authorized_tests | array | |
| scope_description | string | |
| authorization_evidence | array |
Output
Schema · Response
{
"type": "json",
"example": {
"ok": true
}
}Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"