x402 List

x402 Protocol Service Directory

Norravex x402 Endpoint Audit

Verification

Deterministic conformance and safety audit for public x402 HTTP 402 responses, with URL and payload modes, scored findings, and remediation.

Pay from $0.10 per request in USDC on Base, settled onchain via the x402 protocol, no signup, no API key needed.

listed 2026-07-28 · no on-chain settlement recorded yet

BASE URL https://norravex.com WEBSITE https://norravex.com/x402-endpoint-audit.html ENDPOINTS 1 NETWORK Base ASSET USDC MEMBER SINCE 2026-07-28 MONITORED SINCE 2026-07-28

ASSESSMENT

updated 4h ago

Evidence-backed signals, not a single score. Click any chip for the proof. Measured values stay read-only; unknown is honest.

reliability 100%
uptime 24h
100%
uptime 7d
100%
uptime 30d
100%
uptime 90d
100%
response p95
1279ms
avg response
542ms
total checks
24
compliance A (14/14)

14 of 14 x402 conformance checks pass. Full checklist below.

jump to compliance checklist

price $0.10 (p86 in Verification)
price (min)
$0.10
category percentile (min)
p86 in Verification
endpoints / prices
1 / 1
model
flat
stability
100%
risk clean

No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.

domain age
2d
registrar
Tucows Domains Inc.
hosting
custom
domain created
2026-07-25

Identity facts, not a risk score.

traction $0 30d · 0 buyers
volume 30d
$0
buyers 30d
0
settlements 30d
0
first settlement
---
last settlement
---
top buyer share
-
trend 7d vs 30d
-
networks
eip155:8453
volume all-time
$0
settlements all-time
0
median settlement 30d
$0
max settlement 30d
$0
settled via
-

Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.

Top buyer share is a concentration signal, not part of the ranking score.

WHAT IT DOES

ai-derived

Provides an API endpoint for auditing x402 compliance of services

category
api-audit
auditcomplianceverification

AI-generated summary. The measured data is never altered by it.

ENDPOINTS

Service endpoints with HTTP method, path, description, pricing, and network
METHOD PATH DESCRIPTION PRICE NETWORK ASSET
GET /api/x402/audit $0.10 Base USDC
1 endpoints

REQUEST / RESPONSE EXAMPLE

An unpaid request to GET /api/x402/audit returns HTTP 402 with the payment terms. Settle onchain via your facilitator, then retry with the X-Payment header.

// request
curl -i 'https://norravex.com/api/x402/audit'
// 402 response (captured by monitor) · 1 payload · click to expand
[
  {
    "error": "Payment required",
    "accepts": [
      {
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "payTo": "0x8a874F1e1ED23835e2816543E0A1d7Cd3FA3ff1a",
        "amount": "100000",
        "scheme": "exact",
        "network": "eip155:8453",
        "maxTimeoutSeconds": 300
      }
    ],
    "resource": {
      "url": "https://norravex.com/api/x402/audit",
      "mimeType": "application/json",
      "description": "A fresh deterministic x402 endpoint conformance and safety audit"
    },
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "url": "https://api.example.com/paid",
              "mode": "url"
            },
            "type": "http",
            "method": "POST",
            "bodyType": "json"
          },
          "output": {
            "type": "json",
            "example": {
              "score": 100,
              "verdict": "pass",
              "fingerprint": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
              "audit_version": "1.0.0"
            }
          }
        },
        "schema": {
          "type": "object",
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "required": [
            "input"
          ],
          "properties": {
            "input": {
              "type": "object",
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "properties": {
                "body": {
                  "oneOf": [
                    {
                      "type": "object",
                      "required": [
                        "mode",
                        "url"
                      ],
                      "properties": {
                        "url": {
                          "type": "string",
                          "description": "Public HTTPS endpoint to inspect"
                        },
                        "mode": {
                          "const": "url"
                        }
                      },
                      "additionalProperties": false
                    },
                    {
                      "type": "object",
                      "required": [
                        "mode",
                        "status",
                        "headers",
                        "body",
                        "resource_url"
                      ],
                      "properties": {
                        "body": {},
                        "mode": {
                          "const": "payload"
                        },
                        "status": {
                          "const": 402
                        },
                        "headers": {
                          "type": "object",
                          "additionalProperties": {
                            "type": "string"
                          }
                        },
                        "resource_url": {
                          "type": "string"
                        }
                      },
                      "additionalProperties": false
                    }
                  ]
                },
                "type": {
                  "type": "string",
                  "const": "http"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                }
              },
              "additionalProperties": false
            },
            "output": {
              "type": "object",
              "required": [
                "type"
              ],
              "properties": {
                "type": {
                  "type": "string"
                },
                "example": {
                  "type": "object",
                  "required": [
                    "audit_version",
                    "verdict",
                    "score",
                    "fingerprint"
                  ]
                }
              }
            }
          }
        }
      }
    },
    "x402Version": 2
  }
]

OVER TIME

All charts share the 30d window selected here. Every series is also served as JSON at /api/v1/services/norravex-x402-endpoint-audit/price, /scores, /volume and /buyers. On-chain volume and distinct buyers are measured over the service's settlement address and are a conservative undercount (only settlements that reach a measured facilitator are counted). The on-chain series roll up hourly, so the latest day can be up to about an hour behind; distinct buyers are counted per payout address, so a service that settles to more than one address is an upper bound.

UPTIME
07-28 · uptime 100.0% · 547ms avg07-2807-28
30d UPTIME 100%
RESPONSE TIME
07-28 · 547ms avg07-28 · 547ms avg07-2807-28
AVG RESP 544ms
PRICE (captured 402, USD)
building price history ($0.10)
SUB-SCORES (uptime + x402 compliance)
building assessment history (1 day so far)
VOLUME (on-chain settlement, USD)
no on-chain volume yet
DISTINCT BUYERS
no distinct buyers yet

COMPLIANCE

14/14 checks pass · grade A
  • 402 payload captured
  • accepts[] array present
  • payTo address recoverable
  • payTo at accepts[0].payTo (conformant shape)
  • payTo is a valid on-chain address
  • atomic price declared
  • atomic price in a sane range
  • asset (token) address declared
  • network resolves to CAIP-2
  • payment scheme declared
  • served over HTTPS
  • declares the current x402 version (2)
  • EIP-712 domain parameters present on every EVM entry
  • x402 v2 envelope delivered in the payment-required header

SITE PILLARS

  • homepage reachable
  • openapi doc
  • pricing page
  • llms.txt
  • robots.txt
  • terms page
recent checks (18) · click to expand
TIME STATUS RESP
● OK 196ms
● OK 816ms
● OK 123ms
● SLOW 823ms
● OK 120ms
● OK 356ms
● OK 343ms
● OK 347ms
● OK 326ms
● OK 723ms
● SLOW 1069ms
● OK 85ms
● SLOW 1120ms
● SLOW 898ms
● SLOW 888ms
● OK 119ms
● OK 488ms
● OK 616ms

EMBED THIS BADGE

Show that Norravex x402 Endpoint Audit is monitored on x402-list. Paste this on your site or README, it links back to this live listing.

Norravex x402 Endpoint Audit listed on x402-list
status
Norravex x402 Endpoint Audit uptime on x402-list
live uptime
// HTML
<a href="https://x402-list.com/services/norravex-x402-endpoint-audit?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/norravex-x402-endpoint-audit.svg" alt="Norravex x402 Endpoint Audit listed on x402-list" height="28">
</a>
// Markdown
[![Norravex x402 Endpoint Audit on x402-list](https://x402-list.com/badge/norravex-x402-endpoint-audit.svg)](https://x402-list.com/services/norravex-x402-endpoint-audit?utm_source=badge&utm_medium=referral&utm_campaign=embed)
// HTML · live uptime variant
<a href="https://x402-list.com/services/norravex-x402-endpoint-audit?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/norravex-x402-endpoint-audit.svg?data=uptime" alt="Norravex x402 Endpoint Audit uptime on x402-list" height="28">
</a>

RUN THIS SERVICE?

Keep this listing accurate: propose changes to the name, description, website, category or add new endpoints to monitor. Ownership is verified with a domain proof and every change is reviewed manually; measured data stays read-only.

[ update this listing ]