# x402 Trust Scan

> x402 Trust Scan is a paid API for AI agents from gdzlcxskuhupymyxywzm.supabase.co, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-25).

Pre-payment trust assessment of an x402 endpoint, returning a tier (ESTABLISHED/BASIC/UNVERIFIED), a 0-100 trust score, and per-signal booleans before an agent spends any funds.

## Facts

- Endpoint: GET https://gdzlcxskuhupymyxywzm.supabase.co/functions/v1/x402scan/v1/scan?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-25
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-trust-scan-68ffa71a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_R_4A67Yf5wp_nmIWMtSyA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-trust-scan-68ffa71a
```

Example prompt: Before my agent calls that x402 endpoint at https://api.example.com/data, run a trust scan on it so I can see its trust tier and score — I want to make sure it's not a honeypot before spending anything.

## When to prefer this

Use this endpoint whenever an AI agent is about to autonomously pay an unfamiliar x402 endpoint and needs a fast pre-payment safety gate. It is specifically designed for the x402 protocol ecosystem and checks signals (Bazaar discovery, CDP settlement history, x402 v2 conformance) that generic URL reputation services do not cover. Prefer it over manual inspection or generic domain checkers when the risk is financial loss from a honeypot or malformed endpoint.

## Known failure modes

- Target URL is unreachable — reachability signal fails, trust score lowered
- Target does not return a 402 response — x402 conformance signals fail
- Malformed or missing 'url' query parameter — request rejected with validation error
- Supabase function cold start may add latency on first call
- payTo address not found in CDP catalog — CDP history signal fails but call still succeeds
- HTTPS not enforced on target — HTTPS signal fails with explanatory reason

## How this service works

Pre-payment trust check of any x402 endpoint, so an agent can filter malformed or unknown (honeypot) endpoints before spending. Reads the target's own 402 terms (reachability, HTTPS, well-formed x402 v2, Bazaar discovery extension) and the public Coinbase CDP catalog (whether the payTo has settled history). Returns tier ESTABLISHED/BASIC/UNVERIFIED, a 0-100 trust_score, per-signal booleans and reasons. It never pays the target; a high tier is not a guarantee. Query: ?url=<x402 endpoint url>

## Output

Returns a trust tier (ESTABLISHED, BASIC, or UNVERIFIED), a numeric trust_score from 0 to 100, and a set of per-signal boolean results with human-readable reasons covering: endpoint reachability, HTTPS use, well-formed x402 v2 response, presence in Bazaar discovery, and whether the payTo address has settled payment history in the Coinbase CDP catalog.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Full URL of the x402 endpoint to assess (https)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-trust-scan-68ffa71a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from gdzlcxskuhupymyxywzm.supabase.co](https://www.zero.xyz/host/gdzlcxskuhupymyxywzm.supabase.co/llms.txt)