x402-paywall-client — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited x402-paywall-client (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate x402 payment headers and call paywalled endpoints (HTTP or MCP streamable‑http) using a wallet private key.
1) Fetch payment requirements (expect HTTP 402) 2) Create X-PAYMENT header 3) Call the endpoint again with payment
Use the script below (or scripts/x402_pay.mjs).
For MCP endpoints, you still pay via x402 for the HTTP call, but you must send:
Accept: application/json, text/event-streamscripts/x402_pay.mjsRun:
node scripts/x402_pay.mjs --url https://example.com/prices \
--rpc https://mainnet.base.org \
--key $PRIVATE_KEYaccepts response (usually base).Payment verification failed, confirm wallet has USDC + ETH for gas.scripts/x402_pay.mjs — end‑to‑end payment callreferences/x402_flow.md — minimal flow & troubleshooting~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.