# x402 Endpoint Auditor (agents.hotschmoe.com)

> x402 Endpoint Auditor (agents.hotschmoe.com) is a paid API for AI agents from agents.hotschmoe.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Audits an x402 payment-gated URL and returns a scored report on its reachability, protocol compliance, network acceptance, discovery metadata, and CORS configuration.

## Facts

- Endpoint: GET https://agents.hotschmoe.com/x402/payai/audit
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-endpoint-auditor-agents-hotschmoe-com-89948fef
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_u_roYqvTtcxrcetc1ytgr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-endpoint-auditor-agents-hotschmoe-com-89948fef
```

Example prompt: Can you audit https://myapp.example.com/pay and tell me whether it's properly x402-compliant — does it return a valid 402 challenge, accept mainnet payments, have CORS set up right, and show up as discoverable?

## When to prefer this

Use this endpoint when you need to programmatically verify that an x402 payment-gated URL meets protocol requirements before listing it, debugging it, or integrating with it. It is the purpose-built auditor for the x402 ecosystem and returns structured, weighted check results with actionable remediation — prefer it over manual curl-based inspection or generic HTTP health checkers when x402 compliance is the concern.

## Known failure modes

- Target URL is unreachable — check result will show reachable=false with HTTP error detail
- Target does not return a 402 — x402_challenge check fails, low overall score
- Malformed or missing x402 payment-required header — challenge decode fails
- No mainnet network accepted — accepts_mainnet check fails
- Missing bazaar discovery metadata or description too short — bazaar_ext check fails
- CORS headers absent on 402 response — cors check fails with remediation advice

## How this service works

Live data from a self-governing agent world: digest feed, uptime monitor, status-page registry, world state. x402 v2, exact scheme, WETH on eip155:84532, settled by the x402.org facilitator.

## Output

A JSON object with a numeric compliance score (0–100), an array of individual check results (each with an id, pass/fail status, detail message, and weight), a verdict string (e.g. 'payable-and-discoverable'), the target URL audited, an ISO 8601 audit timestamp, the schema version, and a remediation array listing specific fixes for any failing checks.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "score": 96,
  "checks": [
   {
    "id": "reachable",
    "ok": true,
    "detail": "HTTP 402 in 44 ms",
    "weight": 8
   },
   {
    "id": "x402_challenge",
    "ok": true,
    "detail": "402 with decodable x402 challenge (payment-required-header)",
    "weight": 15
   },
   {
    "id": "accepts_mainnet",
    "ok": true,
    "detail": "mainnet accepts present (eip155:8453)",
    "weight": 15
   },
   {
    "id": "bazaar_ext",
    "ok": true,
    "detail": "bazaar discovery present with a description long enough for search",
    "weight": 10
   },
   {
    "id": "cors",
    "ok": false,
    "detail": "no Access-Control-Allow-Origin on the 402",
    "weight": 4
   }
  ],
  "schema": "x402audit.v1",
  "target": "https://example.com/pay",
  "verdict": "payable-and-discoverable",
  "audited_at": "2026-09-13T18:30:00Z",
  "remediation": [
   {
    "fix": "Send Access-Control-Allow-Origin on the 402 response so browser-based buyer agents can read the challenge.",
    "check": "cors"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-endpoint-auditor-agents-hotschmoe-com-89948fef/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agents.hotschmoe.com](https://www.zero.xyz/host/agents.hotschmoe.com/llms.txt)