# x402 Server Security Score

> x402 Server Security Score is a paid API for AI agents from x402-secure-api.t54.ai, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-13).

Returns a comprehensive security assessment (0-100 score, risk level, sub-scores, and scam indicators) for any x402 API server URL.

## Facts

- Endpoint: POST https://x402-secure-api.t54.ai/x402/tools/get_overall_score?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-secure-api-t54-ai-9dfa9f99
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nXN-Mdpl1u4gyROWRMPdR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-secure-api-t54-ai-9dfa9f99 -d '<json body>'
```

Example prompt: Before I pay to use this API, can you run a full security check on https://mesh.heurist.xyz and tell me its trust score, risk level, and whether it's flagged as a scam?

## When to prefer this

Use this endpoint when an AI agent needs to validate an x402 server before initiating a payment or tool call, especially in automated agentic workflows where trust cannot be manually verified. Prefer this over generic URL scanners because it is specifically designed for the x402 protocol ecosystem and aggregates API health, onchain payment address history, webpage phishing signals, and social sentiment into a single composite score.

## Known failure modes

- Invalid or unreachable URL returns unknown risk_level and null scores
- URL not indexed returns null overall_score and empty scam_indicators
- Payment not processed (x402 protocol failure) results in 402 response
- Malformed URL input returns validation error
- Rate limiting or server unavailability returns 5xx error

## How this service works

Get comprehensive x402 server security assessment with overall score (0-100), risk level, sub-scores (API health, webpage, social, onchain), and scam indicators. Ideal for pre-transaction safety validation. Price: $0.01 USDC

## Output

Returns a JSON object with the server URL, a boolean is_scam flag, a risk_level enum (low/medium/high/critical/unknown), an overall_score (0-100), sub-scores for API reachability, onchain trust, webpage quality, and social sentiment, a list of scam_indicators, server_name, last_updated timestamp, and optional scoring_details.

## Example request

```json
{
 "url": "https://mesh.heurist.xyz"
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url"
 ],
 "properties": {
  "url": {
   "type": "string",
   "description": "The resource URL to evaluate"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "url": "string",
 "is_scam": "boolean",
 "risk_level": {
  "enum": [
   "low",
   "medium",
   "high",
   "critical",
   "unknown"
  ],
  "type": "string"
 },
 "sub_scores": {
  "type": "object",
  "properties": {
   "reachability": "number|null",
   "onchain_trust": "number|null",
   "webpage_quality": "number|null",
   "social_sentiment": "number|null"
  }
 },
 "server_name": "string",
 "last_updated": "string|null",
 "overall_score": "number|null",
 "scam_indicators": "array",
 "scoring_details": "object|null"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-secure-api-t54-ai-9dfa9f99/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-secure-api.t54.ai](https://www.zero.xyz/host/x402-secure-api.t54.ai/llms.txt)