# x402 Bazaar Rank – Threat Intelligence

> x402 Bazaar Rank – Threat Intelligence is a paid API for AI agents from x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev, paid per call via x402, $0.032/call, status unknown (last checked 2026-10-21).

Returns ranked x402 services tagged 'threat-intelligence', sorted by 30-day unique paying wallets and call volume, with snapshot provenance.

## Facts

- Endpoint: GET https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/in-threat-intelligence?utm_source=zero.xyz
- Price: $0.032/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-bazaar-rank-threat-intelligence-9d4cccfa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_OP3BP0c_VG0PXLQJqKaP6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-bazaar-rank-threat-intelligence-9d4cccfa
```

Example prompt: Show me the top threat intelligence services on the x402 marketplace, ranked by how many paying wallets used them in the last 30 days.

## When to prefer this

Use this endpoint when you specifically need to discover threat intelligence services available on the x402 pay-per-call network, ranked by real-world usage signals (paying wallets, call volume) rather than self-reported claims. Prefer it over generic API directories when you need on-chain usage provenance, snapshot auditability, or when evaluating which threat-intel feeds have actual traction among paying agents.

## Known failure modes

- No services indexed under 'threat-intelligence' tag returns count:0 with empty services array
- Stale snapshot if the indexer has not refreshed recently, indicated by an older generatedAt timestamp
- Network or worker downtime returns HTTP 5xx with no payload
- Malformed response if the upstream ranking service is under maintenance

## How this service works

An open index of the machine-to-machine (agent) economy. x402 routes: ranked discovery over the live x402 service market, every indexed service scored by real 30-day calls and paying-wallet bounds, with a receipt naming the snapshot hash and scoring revision. /economy routes, for Tempo MPP, Virtuals ACP, Olas, Masumi, ERC-8004 agent registries, Solana agent registries, Base agent contracts and MCP servers (Official MCP Registry): each protocol's published figures (agent or server counts, transactions or payment events; payers and USD volume only where the source publishes them: payers for x402 and Tempo MPP, USD volume for x402 and Virtuals ACP), each with its unit, window and source; units differ, so totals are not summed. L402 and per-service MPP listings are not covered.

## Output

A JSON object containing: the number of results returned, the query parameters used (tag, ranking op, limit), the total count of matched services, and an array of ranked services each with name, blockchain network, 30-day call count, 30-day unique paying wallets, price in USD, and resource URL. Also includes a 'declaredBy' field, snapshot generation timestamp, and a receipt identifying the snapshot hash and scoring revision for auditability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "count": 25,
  "query": {
   "by": "payers",
   "op": "top",
   "limit": 25,
   "where": {
    "tag": "threat-intelligence"
   }
  },
  "route": "/in-threat-intelligence",
  "matched": 359,
  "services": [
   {
    "name": "forecast api",
    "network": "eip155:8453",
    "calls30d": 310,
    "priceUsd": 0.01,
    "resource": "https://api.example.com/forecast",
    "payers30d": 42
   }
  ],
  "declaredBy": "agent",
  "generatedAt": "2026-09-17T12:00:00.000Z"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-bazaar-rank-threat-intelligence-9d4cccfa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev](https://www.zero.xyz/host/x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/llms.txt)