Payment security firewall scan for an OUTGOING x402 payment

Payment security firewall scan for an OUTGOING x402 payment: PII/secret leak detection in payment metadata, nonce replay detection, overpayment detection, prompt-injection-triggered payment analysis (fast + deep tiers), canonical-USDC asset verification, merchant pinning, velocity/spend caps, and counterparty reputation cross-check. Returns allow/flag/block with per-check reasons and an Ed25519-signed verdict. Advisory and non-custodial.

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://paysafe-agent.com/v1/scan/outgoing

Our checks, last 30 days

Example input (from the provider)

{
  "body": {
    "context": {
      "origin": "planning"
    },
    "expected_price_usd": 0.05,
    "payment": {
      "amount": "50000",
      "asset_decimals": 6,
      "description": "Premium data access",
      "network": "eip155:8453",
      "nonce": "0x1a2b3c",
      "pay_to": "0x209693Bc6afc0C5328bA36FaF03C514EF312287C",
      "resource_url": "https://api.example.com/premium",
      "scheme": "exact"
    }
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "properties": {
            "agent_id": {
              "description": "Identifier of the scanning agent (labels the scan; velocity and history are scoped to your API key's account, and to agent_id only for anonymous scans)",
              "type": "string"
            },
            "context": {
              "description": "Provenance: origin (planning|user_instruction|tool_result|fetched_content|unknown), content (the content the agent just read), content_source_url",
              "type": "object"
            },
            "expected_price_usd": {
              "description": "What the agent expected this to cost (USD)",
              "type": "number"
            },
            "payment": {
              "anyOf": [
                {
                  "required": [
                    "pay_to"
                  ]
                },
                {
                  "required": [
                    "amount"
                  ]
                },
                {
                  "required": [
                    "amount_usd"
                  ]
                }
              ],
              "description": "The x402 payment (or payment request) to screen: scheme, network, amount (atomic) or amount_usd, asset, pay_to, payer, resource_url, description, reason, nonce, metadata. Must carry pay_to or amount / amount_usd; a payment with neither is rejected with 400 and not scanned.",
              "properties": {
                "amount": {
                  "description": "Atomic token units, e.g. \"50000\" = $0.05 USDC",
                  "type": "string"
                },
                "amount_usd": {
                  "description": "Decimal USD, when no atomic amount is available",
                  "type": "number"
                },
                "asset": {
                  "description": "Token contract address",
                  "type": "string"
                },
                "network": {
                  "description": "CAIP-2 network id, e.g. eip155:8453",
                  "type": "string"
                },
                "nonce": {
                  "description": "Payment nonce, once signed",
                  "type": "string"
                },
                "pay_to": {
                  "description": "Recipient address",
                  "type": "string"
                },
                "resource_url": {
                  "description": "The resource being purchased",
                  "type": "string"
                }
              },
              "type": "object"
            },
            "policy": {
              "description": "Tiering overrides: force_deep / skip_deep for the deep content-analysis tier",
              "type": "object"
            }
          },
          "required": [
            "payment"
          ]
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON