SCVD General Store

Preflight an x402 Endpoint

preflight_endpoint

Endpoint inspection and x402 endpoint preflight, free. The inspection block separates observed protocols, unverified advertised terms, structural checks and gaps; no signature, settlement or delivery verification is performed. The top-level verdict remains x402-specific. For a buyer about to pay a door it has not paid before, and for a seller checking their own. Check any x402 endpoint's door before paying it: one unpaid probe answering whether the URL serves a well-formed x402 v2 payment challenge right now — 402 status, parseable PAYMENT-REQUIRED, signable accepts, internal consistency, rail receivability where readable, and observed discovery/schema or offer/challenge contradictions. Optional extensions remain optional. Returns the verdict with reached_level on the L0-L6 evidence ladder, the tri-state checks vector, and what this single probe cannot tell you. A shape check at one moment, NEVER an uptime or delivery claim — a passing preflight quoted as either is a misquote. An evidence instrument: the reading is written to be handed to the human behind you, gaps at full weight. Rate limited; the result carries the stated ceiling. For a signed, servable version of this same look, buy_observation with item_id service_audit.

Example tool call

This call uses example arguments supplied in the tool’s input schema.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "url": "https://example.com/api/paid-answer"
    },
    "name": "preflight_endpoint"
  }
}

Input Schema

Name	Required	Description
`url`	Yes	The https endpoint a buyer would GET expecting a 402 challenge.
`model`	No	Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.
`client`	No	Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.
`operator`	No	Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.
`came_from`	No	Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.
`operator_kind`	No	Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.
`prior_cert_id`	No	Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.

Output Schema

Name	Required	Description
`verdict`	Yes	x402-specific: ready \| not_ready \| unreachable \| method_unresolved.
`inspection`	No	One unpaid response, with observed protocols, unverified advertised term summaries, existing structural findings and coverage gaps. The x402 verdict retains its meaning. No artifact signature verification, payment signing, payment submission, settlement or delivery check.
`reached_level`	Yes	How far the probe got on the evidence ladder: none \| L1 \| L2 \| L3a.
`single_probe_note`	No	One moment — the standing caveat. Two requests only where a door refuses the first verb.
`reached_level_meaning`	No	What that rung does and does not claim.

Schema Changelog

Changes observed during successful MCP inspections.

Changed2 schema fields changedSep 28, 2026

addedOutput schema / properties / inspection

Added value: +{
+  "description": "One unpaid response, with observed protocols, unverified advertised term summaries, existing structural findings and coverage gaps. The x402 verdict retains its meaning. No artifact signature verification, payment signing, payment submission, settlement or delivery check.",
+  "properties": {
+    "coverage": {
+      "description": "Body read / over_limit / unobserved and MPP core read / absent / unmeasured.",
+      "type": "object"
+    },
+    "gaps": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "observed_at": {
+      "format": "date-time",
+      "type": "string"
+    },
+    "protocols": {
+      "properties": {
+        "observed": {
+          "items": {
+            "enum": [
+              "x402",
+              "mpp"
+            ],
+            "type": "string"
+          },
+          "type": "array",
+          "uniqueItems": true
+        },
+        "scope": {
+          "type": "string"
+        },
+        "state": {
+          "enum": [
+            "read",
+            "partial",
+            "unobserved"
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "reachability": {
+      "properties": {
+        "http_status": {
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
+        "method": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "state": {
+          "enum": [
+            "responded",
+            "unreachable",
+            "method_unresolved"
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "signatures": {
+      "properties": {
+        "reason": {
+          "type": "string"
+        },
+        "state": {
+          "enum": [
+            "not_checked"
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "structure": {
+      "description": "Existing x402, frozen MPP and MPP core batteries, checked counts and failed check names. MPP core also names unmeasured checks; no global readiness verdict.",
+      "type": "object"
+    },
+    "subject_url": {
+      "type": "string"
+    },
+    "terms": {
+      "description": "Unverified summaries, at most 32 entries per protocol, each with state, entries, total and omitted. Not complete payment instructions.",
+      "type": "object"
+    },
+    "unperformed": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "version": {
+      "enum": [
+        "inspection-v1"
+      ],
+      "type": "string"
+    }
+  },
+  "type": "object"
+}

changedOutput schema / properties / verdict / description

Previous value: -"ready | not_ready | unreachable."New value: +"x402-specific: ready | not_ready | unreachable | method_unresolved."

Changed6 schema fields changedSep 18, 2026

addedInput schema / properties / came_from

Added value: +{
+  "description": "Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.",
+  "maxLength": 160,
+  "type": "string"
+}

addedInput schema / properties / client

Added value: +{
+  "description": "Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.",
+  "maxLength": 64,
+  "type": "string"
+}

addedInput schema / properties / model

Added value: +{
+  "description": "Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.",
+  "maxLength": 64,
+  "type": "string"
+}

addedInput schema / properties / operator

Added value: +{
+  "description": "Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.",
+  "maxLength": 120,
+  "type": "string"
+}

addedInput schema / properties / operator_kind

Added value: +{
+  "description": "Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.",
+  "enum": [
+    "solo",
+    "company",
+    "research",
+    "self"
+  ],
+  "type": "string"
+}

addedInput schema / properties / prior_cert_id

Added value: +{
+  "description": "Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.",
+  "maxLength": 64,
+  "type": "string"
+}

Changed1 schema field changedSep 16, 2026

changedOutput schema / properties / single_probe_note / description

Previous value: -"One request, one moment — the standing caveat."New value: +"One moment — the standing caveat. Two requests only where a door refuses the first verb."

First observedSep 6, 2026

TDQS

A4.4/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations it discloses the negative space that matters most: no signature, settlement or delivery verification; optional extensions stay optional; a single-moment shape check, not an uptime claim; rate limited with the ceiling carried in the result. It also declares the return shape (verdict, reached_level on the L0-L6 ladder, tri-state checks vector, and what the probe cannot tell you), which is behavioral detail an agent could not infer from readOnlyHint=false / idempotentHint=false alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the unpaid-probe mechanic are front-loaded, but the middle is rhetorical padding: 'Optional extensions remain optional,' the restatement of the free/certificate points, and aphorisms like 'a passing preflight quoted as either is a misquote' and 'gaps at full weight.' The content is retrievable, but several sentences could be cut without losing an invocation-relevant fact.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a network-probing tool with a rich input schema and an output schema, the description covers what it does, when to use it, what it provably does not verify, and where the paid variant lives. Return-value detail is largely redundant given the output schema, and the optional provenance parameters are left entirely to the schema, so it is complete but not airtight.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and each of the seven parameters carries its own description, so the baseline is 3. The prose adds no parameter-level meaning (nothing about url format, operator_kind semantics, or what prior_cert_id unlocks beyond what the schema already says). This is the schema doing the work, not the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening pairs a specific verb and resource with the exact object of the operation, and then enumerates what the probe actually checks (402 status, parseable PAYMENT-REQUIRED, signable accepts, rail receivability, contradictions). It also distinguishes itself from the adjacent paid sibling by naming buy_observation with item_id service_audit. An agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the two audiences explicitly ('a buyer about to pay a door it has not paid before, and for a seller checking their own') and names the alternative with the condition that selects it ('For a signed, servable version of this same look, buy_observation with item_id service_audit'). It also supplies a hard exclusion: never quote a pass as uptime or delivery.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All SCVD General Store tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.