HirePulse Agent Gateway

x402 Merchant Trust Check

x402_merchant_trust_check

Read-only

Merchant trust check for an x402 API before paying: pre-payment check of the endpoint: discovery files, live 402 terms, comparable USDC prices, latency, prompt-injection flags and public Coinbase CDP Bazaar payment statistics for the host. Heuristic, not a guarantee. $0.002; unreachable targets are free. Online shops: pre_purchase_merchant_trust_check.

Input Schema

Name	Required	Description	Default
`context`	No	Optional. A few words on why you are calling this tool. Recorded without your identity to improve the tools; leave out personal data.
`target_url`	Yes	Public HTTPS x402 API endpoint to inspect before signing a payment authorization; this scan does not authorize payment.

Output Schema

Name	Required	Description
`code`	No
`domain`	No
`status`	No
`sandbox`	No
`latency_ms`	No
`safe_to_pay`	No
`trust_score`	No
`matched_flags`	No
`recommendation`	No
`valid_x402_config`	No
`prompt_injection_risk`	No
`marketplace_reputation`	No	Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.

Schema Changelog

Changes observed during successful MCP inspections.

Changed3 schema fields changedNov 1, 2026

removedOutput schema / anyOf

Removed value: -[
-  {
-    "properties": {
-      "domain": {
-        "type": "string"
-      },
-      "latency_ms": {
-        "type": "number"
-      },
-      "marketplace_reputation": {
-        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
-        "type": "object"
-      },
-      "matched_flags": {
-        "items": {
-          "type": "string"
-        },
-        "type": "array"
-      },
-      "prompt_injection_risk": {
-        "enum": [
-          "LOW",
-          "MEDIUM",
-          "CRITICAL"
-        ],
-        "type": "string"
-      },
-      "recommendation": {
-        "type": "string"
-      },
-      "safe_to_pay": {
-        "type": "boolean"
-      },
-      "sandbox": {
-        "additionalProperties": false,
-        "properties": {
-          "demo_domain": {
-            "const": true,
-            "type": "boolean"
-          },
-          "note": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "demo_domain",
-          "note"
-        ],
-        "type": "object"
-      },
-      "status": {
-        "type": "string"
-      },
-      "trust_score": {
-        "maximum": 100,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "valid_x402_config": {
-        "type": "boolean"
-      }
-    },
-    "required": [
-      "domain",
-      "status"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "minLength": 1,
-        "type": "string"
-      },
-      "status": {
-        "maximum": 599,
-        "minimum": 400,
-        "type": "integer"
-      }
-    },
-    "required": [
-      "status",
-      "code"
-    ],
-    "type": "object"
-  }
-]

addedOutput schema / description

Added value: +"Fields only; full schema in GET /v1/catalog."

addedOutput schema / properties

Added value: +{
+  "code": {},
+  "domain": {},
+  "latency_ms": {},
+  "marketplace_reputation": {
+    "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal."
+  },
+  "matched_flags": {},
+  "prompt_injection_risk": {},
+  "recommendation": {},
+  "safe_to_pay": {},
+  "sandbox": {},
+  "status": {},
+  "trust_score": {},
+  "valid_x402_config": {}
+}

Changed3 schema fields changedNov 1, 2026

addedOutput schema / anyOf

Added value: +[
+  {
+    "properties": {
+      "domain": {
+        "type": "string"
+      },
+      "latency_ms": {
+        "type": "number"
+      },
+      "marketplace_reputation": {
+        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
+        "type": "object"
+      },
+      "matched_flags": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "prompt_injection_risk": {
+        "enum": [
+          "LOW",
+          "MEDIUM",
+          "CRITICAL"
+        ],
+        "type": "string"
+      },
+      "recommendation": {
+        "type": "string"
+      },
+      "safe_to_pay": {
+        "type": "boolean"
+      },
+      "sandbox": {
+        "additionalProperties": false,
+        "properties": {
+          "demo_domain": {
+            "const": true,
+            "type": "boolean"
+          },
+          "note": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "demo_domain",
+          "note"
+        ],
+        "type": "object"
+      },
+      "status": {
+        "type": "string"
+      },
+      "trust_score": {
+        "maximum": 100,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "valid_x402_config": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "domain",
+      "status"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "status": {
+        "maximum": 599,
+        "minimum": 400,
+        "type": "integer"
+      }
+    },
+    "required": [
+      "status",
+      "code"
+    ],
+    "type": "object"
+  }
+]

removedOutput schema / description

Removed value: -"Fields only; full schema in GET /v1/catalog."

removedOutput schema / properties

Removed value: -{
-  "code": {},
-  "domain": {},
-  "latency_ms": {},
-  "marketplace_reputation": {
-    "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal."
-  },
-  "matched_flags": {},
-  "prompt_injection_risk": {},
-  "recommendation": {},
-  "safe_to_pay": {},
-  "sandbox": {},
-  "status": {},
-  "trust_score": {},
-  "valid_x402_config": {}
-}

Changed3 schema fields changedNov 1, 2026

removedOutput schema / anyOf

Removed value: -[
-  {
-    "properties": {
-      "domain": {
-        "type": "string"
-      },
-      "latency_ms": {
-        "type": "number"
-      },
-      "marketplace_reputation": {
-        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
-        "type": "object"
-      },
-      "matched_flags": {
-        "items": {
-          "type": "string"
-        },
-        "type": "array"
-      },
-      "prompt_injection_risk": {
-        "enum": [
-          "LOW",
-          "MEDIUM",
-          "CRITICAL"
-        ],
-        "type": "string"
-      },
-      "recommendation": {
-        "type": "string"
-      },
-      "safe_to_pay": {
-        "type": "boolean"
-      },
-      "sandbox": {
-        "additionalProperties": false,
-        "properties": {
-          "demo_domain": {
-            "const": true,
-            "type": "boolean"
-          },
-          "note": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "demo_domain",
-          "note"
-        ],
-        "type": "object"
-      },
-      "status": {
-        "type": "string"
-      },
-      "trust_score": {
-        "maximum": 100,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "valid_x402_config": {
-        "type": "boolean"
-      }
-    },
-    "required": [
-      "domain",
-      "status"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "minLength": 1,
-        "type": "string"
-      },
-      "status": {
-        "maximum": 599,
-        "minimum": 400,
-        "type": "integer"
-      }
-    },
-    "required": [
-      "status",
-      "code"
-    ],
-    "type": "object"
-  }
-]

addedOutput schema / description

Added value: +"Fields only; full schema in GET /v1/catalog."

addedOutput schema / properties

Added value: +{
+  "code": {},
+  "domain": {},
+  "latency_ms": {},
+  "marketplace_reputation": {
+    "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal."
+  },
+  "matched_flags": {},
+  "prompt_injection_risk": {},
+  "recommendation": {},
+  "safe_to_pay": {},
+  "sandbox": {},
+  "status": {},
+  "trust_score": {},
+  "valid_x402_config": {}
+}

Changed1 schema field changedOct 27, 2026

changedOutput schema / anyOf

Previous value: -[
-  {
-    "properties": {
-      "domain": {
-        "type": "string"
-      },
-      "latency_ms": {
-        "type": "number"
-      },
-      "marketplace_reputation": {
-        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
-        "type": "object"
-      },
-      "matched_flags": {
-        "items": {
-          "type": "string"
-        },
-        "type": "array"
-      },
-      "prompt_injection_risk": {
-        "enum": [
-          "LOW",
-          "MEDIUM",
-          "CRITICAL"
-        ],
-        "type": "string"
-      },
-      "recommendation": {
-        "type": "string"
-      },
-      "safe_to_pay": {
-        "type": "boolean"
-      },
-      "status": {
-        "type": "string"
-      },
-      "trust_score": {
-        "maximum": 100,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "valid_x402_config": {
-        "type": "boolean"
-      }
-    },
-    "required": [
-      "domain",
-      "status"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "minLength": 1,
-        "type": "string"
-      },
-      "status": {
-        "maximum": 599,
-        "minimum": 400,
-        "type": "integer"
-      }
-    },
-    "required": [
-      "status",
-      "code"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "properties": {
+      "domain": {
+        "type": "string"
+      },
+      "latency_ms": {
+        "type": "number"
+      },
+      "marketplace_reputation": {
+        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
+        "type": "object"
+      },
+      "matched_flags": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "prompt_injection_risk": {
+        "enum": [
+          "LOW",
+          "MEDIUM",
+          "CRITICAL"
+        ],
+        "type": "string"
+      },
+      "recommendation": {
+        "type": "string"
+      },
+      "safe_to_pay": {
+        "type": "boolean"
+      },
+      "sandbox": {
+        "additionalProperties": false,
+        "properties": {
+          "demo_domain": {
+            "const": true,
+            "type": "boolean"
+          },
+          "note": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "demo_domain",
+          "note"
+        ],
+        "type": "object"
+      },
+      "status": {
+        "type": "string"
+      },
+      "trust_score": {
+        "maximum": 100,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "valid_x402_config": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "domain",
+      "status"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "status": {
+        "maximum": 599,
+        "minimum": 400,
+        "type": "integer"
+      }
+    },
+    "required": [
+      "status",
+      "code"
+    ],
+    "type": "object"
+  }
+]

Changed1 schema field changedOct 24, 2026

addedInput schema / properties / context

Added value: +{
+  "description": "Optional. A few words on why you are calling this tool. Recorded without your identity to improve the tools; leave out personal data.",
+  "type": "string"
+}

Changed1 schema field changedOct 24, 2026

changedOutput schema / anyOf

Previous value: -[
-  {
-    "properties": {
-      "domain": {
-        "type": "string"
-      },
-      "latency_ms": {
-        "type": "number"
-      },
-      "matched_flags": {
-        "items": {
-          "type": "string"
-        },
-        "type": "array"
-      },
-      "prompt_injection_risk": {
-        "enum": [
-          "LOW",
-          "MEDIUM",
-          "CRITICAL"
-        ],
-        "type": "string"
-      },
-      "recommendation": {
-        "type": "string"
-      },
-      "safe_to_pay": {
-        "type": "boolean"
-      },
-      "status": {
-        "type": "string"
-      },
-      "trust_score": {
-        "maximum": 100,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "valid_x402_config": {
-        "type": "boolean"
-      }
-    },
-    "required": [
-      "domain",
-      "status"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "minLength": 1,
-        "type": "string"
-      },
-      "status": {
-        "maximum": 599,
-        "minimum": 400,
-        "type": "integer"
-      }
-    },
-    "required": [
-      "status",
-      "code"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "properties": {
+      "domain": {
+        "type": "string"
+      },
+      "latency_ms": {
+        "type": "number"
+      },
+      "marketplace_reputation": {
+        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
+        "type": "object"
+      },
+      "matched_flags": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "prompt_injection_risk": {
+        "enum": [
+          "LOW",
+          "MEDIUM",
+          "CRITICAL"
+        ],
+        "type": "string"
+      },
+      "recommendation": {
+        "type": "string"
+      },
+      "safe_to_pay": {
+        "type": "boolean"
+      },
+      "status": {
+        "type": "string"
+      },
+      "trust_score": {
+        "maximum": 100,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "valid_x402_config": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "domain",
+      "status"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "status": {
+        "maximum": 599,
+        "minimum": 400,
+        "type": "integer"
+      }
+    },
+    "required": [
+      "status",
+      "code"
+    ],
+    "type": "object"
+  }
+]

Changed3 schema fields changedOct 23, 2026

addedOutput schema / anyOf

Added value: +[
+  {
+    "properties": {
+      "domain": {
+        "type": "string"
+      },
+      "latency_ms": {
+        "type": "number"
+      },
+      "matched_flags": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "prompt_injection_risk": {
+        "enum": [
+          "LOW",
+          "MEDIUM",
+          "CRITICAL"
+        ],
+        "type": "string"
+      },
+      "recommendation": {
+        "type": "string"
+      },
+      "safe_to_pay": {
+        "type": "boolean"
+      },
+      "status": {
+        "type": "string"
+      },
+      "trust_score": {
+        "maximum": 100,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "valid_x402_config": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "domain",
+      "status"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "status": {
+        "maximum": 599,
+        "minimum": 400,
+        "type": "integer"
+      }
+    },
+    "required": [
+      "status",
+      "code"
+    ],
+    "type": "object"
+  }
+]

removedOutput schema / properties

Removed value: -{
-  "domain": {
-    "type": "string"
-  },
-  "latency_ms": {
-    "type": "number"
-  },
-  "matched_flags": {
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "prompt_injection_risk": {
-    "enum": [
-      "LOW",
-      "MEDIUM",
-      "CRITICAL"
-    ],
-    "type": "string"
-  },
-  "recommendation": {
-    "type": "string"
-  },
-  "safe_to_pay": {
-    "type": "boolean"
-  },
-  "status": {
-    "type": "string"
-  },
-  "trust_score": {
-    "maximum": 100,
-    "minimum": 0,
-    "type": "integer"
-  },
-  "valid_x402_config": {
-    "type": "boolean"
-  }
-}

removedOutput schema / required

Removed value: -[
-  "domain",
-  "status"
-]

Changed1 schema field changedOct 21, 2026

addedInput schema / properties / target_url / description

Added value: +"Public HTTPS x402 API endpoint to inspect before signing a payment authorization; this scan does not authorize payment."

First observedOct 18, 2026

TDQS

A4.4/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint and openWorldHint; the description adds the pricing model ($0.002, unreachable targets free) and a key epistemic caveat ("Heuristic, not a guarantee") that an agent needs before acting on results. It also discloses the concrete evidence sources behind the verdict, which no annotation or schema conveys.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the pre-payment framing are front-loaded, and the cost plus sibling routing are packed into short trailing sentences with no filler. The middle clause is a dense comma-separated list that reads as a run-on but every item carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and full parameter coverage, the description supplies what structured fields cannot: cost, free-case behavior, the heuristic caveat, the evidence sources, and the sibling alternative. An agent has everything needed to decide whether to call and how to weigh the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented in the schema, including the note that the scan does not authorize payment. The description reinforces "public HTTPS x402 API endpoint" but adds no format or syntax detail beyond the schema; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — a pre-payment trust check of an x402 API endpoint — and enumerates exactly what is inspected (discovery files, live 402 terms, USDC prices, latency, prompt-injection flags, CDP Bazaar stats). It explicitly distinguishes itself from the sibling pre_purchase_merchant_trust_check, which covers online shops.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Pre-payment check of the endpoint" and "before paying" give clear timing context, and the closing sentence routes non-x402 online-shop cases to pre_purchase_merchant_trust_check. It stops short of explicit exclusions (e.g., non-HTTPS or non-x402 targets), but the alternative is named and the selection condition is stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All HirePulse Agent Gateway tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

x402 Merchant Trust Check

Input Schema

Output Schema

Schema Changelog

TDQS

Glama MCP Gateway

Resources