other · Listed · Found · 6 endpoints · Gateway-eligible
x402-api-catalog.onrender.com
x402-api-catalog.onrender.com
X402 endpoints published at https://x402-api-catalog.onrender.com.
Indexed from this operator's public /.well-known/x402.json. Found is not operator-owned and is not attested. Claim or opt out.
Agent Read · Cleared Index
ROUTE
Route when you need other at published x402 prices.
confidence
78%
source
signal
Index before you pay. Same payload for agents:
GET /api/cleared/agent-read?slug=x402-api-catalog-onrender-com-hofg
When to call
- Need other via x402 and want Cleared-indexed payTo with a live scorecard.
- Budget between $0.02 and $1 per call on published endpoints.
- X402 endpoints published at https://x402-api-catalog.onrender.com.
Risks
- Found — not operator-owned; claim status unknown.
- No Cleared settlement receipt on file yet.
- No Gateway traffic yet — market share unproven.
Price posture
Published 6 endpoints from $0.02 to $1.
Category · Gateway
other · no Gateway routes yet — early / unproven on Cleared market share.
Endpoint hints
GET /api/trust-checknpm package trust check / risk score / security audit: registry age, weekly downloads, GitHub org/stars, OSV.dev vulnerabilities, typosquat detection.
GET /api/repo-healthGitHub repo health check / audit / verify: stars, forks, open issues, last commit age, archived status, license.
GET /api/domain-checkDomain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT records), whether mail routing exists, HTTP reachability.
GET /api/x402-doctorAudits another x402 service for the exact failure modes that cause aggregators (agent-tools.cloud, x402scan, Bazaar) to mark it 'down' or make its 402 challenge
GET /api/mcp-auditMCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-p
GET /api/contract-checkEVM token contract safety check: honeypot detection, mint/blacklist/pausable/self-destruct capability, ownership renouncement, transfer tax, and a real token-im
Evidence (Cleared)
- → Intake verified · Gateway-eligible
- → Trust 70/100 · pass · tier listed
- → Protocol x402
- → Manifest reachable · schema valid
- → Found listing — indexed from public x402.json, not operator-attested.
Endpoints
endpoint-1
$0.02GET https://x402-api-catalog.onrender.com/api/trust-checknpm package trust check / risk score / security audit: registry age, weekly downloads, GitHub org/stars, OSV.dev vulnerabilities, typosquat detection.
endpoint-2
$0.02GET https://x402-api-catalog.onrender.com/api/repo-healthGitHub repo health check / audit / verify: stars, forks, open issues, last commit age, archived status, license.
endpoint-3
$0.02GET https://x402-api-catalog.onrender.com/api/domain-checkDomain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT records), whether mail routing exists, HTTP reachability.
endpoint-4
$1GET https://x402-api-catalog.onrender.com/api/x402-doctorAudits another x402 service for the exact failure modes that cause aggregators (agent-tools.cloud, x402scan, Bazaar) to mark it 'down' or make its 402 challenge unreadable: missing/invalid /.well-known/x402 descriptor, an unpaid request returning 500/404 instead of a clean 402, a malformed or missing payment-required challenge, and drift between the descriptor's advertised terms and the live challenge. Returns a concrete diagnosis and fix for each failing check, not just pass/fail.
endpoint-5
$0.06GET https://x402-api-catalog.onrender.com/api/mcp-auditMCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-poisoning), prompt-injection-style phrasing, and tools that quietly combine multiple high-privilege capabilities (network+filesystem+exec+credential access). If a GitHub repo is supplied, folds in a real software-supply-chain signal too.
endpoint-6
$0.05GET https://x402-api-catalog.onrender.com/api/contract-checkEVM token contract safety check: honeypot detection, mint/blacklist/pausable/self-destruct capability, ownership renouncement, transfer tax, and a real token-impersonation check (does the symbol claim to be USDC/WETH/DAI/cbBTC at the wrong address — the token equivalent of npm typosquatting).
Checks
reachable
valid
2026-10-21T20:47:31.740Z
No settlement evidence found in chain signals.
Gateway routing
Score ≥70/100 — Cleared attestation pass. Route via Gateway before pay.
Claim this listing to upgrade to Cleared attestation.
Claim listing