# TaskMaster URL Readiness Audit

> TaskMaster URL Readiness Audit is a paid API for AI agents from taskmaster-x402.vercel.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Audits a public HTTPS endpoint for x402 payment-protocol readiness, API security headers, Bazaar/manifest discovery signals, and OpenAPI compliance without ever settling a payment challenge.

## Facts

- Endpoint: POST https://taskmaster-x402.vercel.app/api/url-readiness
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/taskmaster-url-readiness-audit-3c0d35d8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DuP2Tmkh-TPqb7Jx25agu

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability taskmaster-url-readiness-audit-3c0d35d8 -d '<json body>'
```

Example prompt: Can you run an x402 readiness audit on https://myapi.example.com/resource using a GET probe — I want to know if it returns a proper 402 challenge, has the right security headers, and shows up in Bazaar discovery?

## When to prefer this

Choose this endpoint when you need a safe, non-destructive audit of an x402-compliant API — especially before listing on x402scan or Bazaar, or when debugging why an endpoint isn't discoverable. It is preferable to manual inspection because it checks x402 challenge correctness, security headers, OpenAPI and agent manifest presence, and Bazaar discoverability in a single bounded call that never triggers a real payment.

## Known failure modes

- Private or reserved network URLs are rejected with an error
- Non-HTTPS URLs are rejected
- Target endpoint is unreachable or times out, resulting in incomplete audit data
- Endpoint returns unexpected non-402 status codes, lowering readiness score
- Missing manifests or security headers result in score below 100 with recommendations populated

## How this service works

Deterministic HTML QA and bounded x402 API security, Bazaar discovery, and OpenAPI readiness audits that never settle the inspected endpoint's payment challenge.

## Output

A JSON object containing: an overall readiness score (0–100), a boolean x402Ready flag, whether a 402 challenge was observed, HSTS and content-type-options security header booleans, OpenAPI/x402 manifest/agent manifest presence flags, schema version, and an array of actionable recommendations — all without ever settling the payment challenge on the inspected endpoint.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "Public HTTPS x402 resource URL. Private and reserved network targets are rejected."
  },
  "method": {
   "enum": [
    "GET",
    "POST"
   ],
   "type": "string",
   "description": "Unpaid probe method. POST sends an empty JSON object and never settles a 402 challenge."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "safety": "The audit observes public metadata and never signs or settles payment.",
  "target": {
   "method": "POST",
   "status": 402
  },
  "summary": {
   "score": 100,
   "x402Ready": true,
   "challengeObserved": true
  },
  "security": {
   "hsts": true,
   "contentTypeOptions": true
  },
  "discovery": {
   "openApi": {
    "present": true,
    "paidOperationsInvocable": true
   },
   "x402Manifest": {
    "present": true
   },
   "agentManifest": {
    "present": true
   }
  },
  "schemaVersion": "1.0",
  "recommendations": []
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/taskmaster-url-readiness-audit-3c0d35d8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from taskmaster-x402.vercel.app](https://www.zero.xyz/host/taskmaster-x402.vercel.app/llms.txt)