x402 census · payai.agentstools.dev · 33ee3950b41d · JSON
POST /mcp/inspect
method-gated
Static security scan of a single text or prompt blob: hidden unicode, prompt injection, data-exfiltration directives, dangerous-capability and tool-shadowing language, and obfuscation. Returns a 0-100 risk score, category and findings. Security indicators, not a guarantee.
Verdict: not verified by an unpaid GET. 405/400: the 402 sits behind the declared method. This says nothing about whether the route works when called as declared.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://payai.agentstools.dev/mcp/inspect |
| Method | POST |
| Price | $0.003 USDC = 3000 atomic units of EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v |
| Network | solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp (solana) |
| payTo | AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u |
| Seller | payai.agentstools.dev |
| Catalogs | payai (row updated 2026-09-30) |
| Listed since (lower bound) | 2026-09-30 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-09-30 |
| CDP quality counters | not in the CDP catalog |
| Category (keyword rule) | identity/trust/kyc |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | mcp-inspect · mcp, security, prompt-injection, text, scanner |
Unpaid probe (census of 2026-09-30)
| Field | Value |
|---|---|
| Probed at | 2026-09-30T23:47:57.907Z |
| HEAD | 405 |
| GET | 405 |
| Verdict | method-gated 405/400: the 402 sits behind the declared method |
| 402 carried in | n/a |
| x402Version in the 402 | n/a |
| accepts[0] | none |
| Live amount equals catalog price | not comparable |
| Live payTo equals catalog payTo | not comparable |
| extensions.bazaar in the 402 | no |
| PAYMENT-REQUIRED header | no |
| WWW-Authenticate offer | none |
| Content type / server / CORS | application/json / uvicorn / none |
| Latency | 2,247 ms |
| Error | none |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Settlement history | unresolved: non-EVM payTo; only Base is covered |
Declared input and output (extensions.bazaar)
{
"input": {
"body": {
"kind": "description",
"text": "Get the weather for a city and return a short summary."
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"kind": "description",
"object": "text",
"reasons": [],
"coverage": {
"dimensions_total": 8,
"dimensions_flagged": []
},
"findings": [],
"text_hash": "sha256:…",
"disclaimer": "Automated security indicators, not a guarantee.",
"risk_score": 0,
"risk_category": "clean"
}
}
}
Try it (unpaid: shows the 402)
curl -si -X POST 'https://payai.agentstools.dev/mcp/inspect' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'
The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/33ee3950b41d/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"33ee3950b41d"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: PayAI listing status · this record as JSON · all resources on payai.agentstools.dev.