Signed four-part audit of one x402 endpoint, by buying from it
Signed four-part audit of one x402 endpoint, by buying from it: the quote (what the 402 asks, and whether the seller's manifest and public catalog agree), real purchases with Orcpin's audit wallet (quoted vs signed vs settled vs chain vs delivered; replay and bad-payment behaviour), the door's inbound books from the chain (settlements, revenue, distinct and repeat payers), and unit cost against priced doors listed. Ed25519-signed and logged; facts, no verdict. No purchase settled, no charge.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://orcpin.dev/v1/door-report
| Category | Code and developer |
|---|---|
| Provider host | orcpin.dev |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 1 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"purchases": 3,
"url": "https://orcpin.dev/v1/endpoint-reliability?url=https://example.com/v1/x"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"body": {
"description": "JSON body to send to a POST door (the request an agent would actually make). Implies method POST.",
"type": "object"
},
"method": {
"description": "The door's verb. Default: GET, retried as POST if GET looks like the wrong verb.",
"enum": [
"GET",
"POST"
],
"type": "string"
},
"purchases": {
"description": "Real purchases to make, 1\u20135. Default 3. Their total must fit the audit's purchase budget.",
"type": "integer"
},
"url": {
"description": "The x402 endpoint to audit \u2014 a public http(s) URL that answers an unpaid request with a 402 challenge.",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"attention": {
"items": {
"type": "object"
},
"type": "array"
},
"books": {
"type": [
"object",
"null"
]
},
"cost": {
"type": "object"
},
"disclaimer": {
"type": "string"
},
"door": {
"type": "object"
},
"purchase": {
"type": "object"
},
"quote": {
"type": "object"
},
"schema_version": {
"type": "string"
},
"signature": {
"type": [
"object",
"null"
]
},
"signed": {
"type": "boolean"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}