Skip to main content
Glama

x402-payment-audit

x402 Payment Endpoint Trust Check: Black-box check: does the x402 endpoint verify payment (reject forged txHash/signature/replay) before delivering? Buyer-side trust check before you pay. Returns SAFE/RISK/NOT_X402.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlNoUrl to process
endpointNoEndpoint to process

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / properties / endpoint
      Added value: +{
      +  "description": "Endpoint to process",
      +  "type": "string"
      +}
  2. Changed1 schema field changed
    • addedInput schema / properties / url
      Added value: +{
      +  "description": "Url to process",
      +  "type": "string"
      +}
  3. First observed

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the whole burden and does real work: it declares the method is black-box, enumerates the attack cases probed (forged txHash, signature, replay), and names the three return categories SAFE/RISK/NOT_X402. It never states whether the probe itself triggers or simulates a payment and mentions no rate limits or side effects, which is a meaningful omission for a payment-adjacent tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense, front-loaded sentences with zero filler: identity, mechanism, usage moment, and return values in that order. Nothing is repeated from the name and nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no annotations and no output schema, the description supplies the purpose, the usage moment, and the return vocabulary, which is most of what an agent needs. The unresolved url-vs-endpoint distinction and the lack of any side-effect/safety statement leave a small but real gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds no clarification of the two parameters, and the url/endpoint pair is genuinely ambiguous (both optional, both seemingly the target), a gap the description could have resolved but does not.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Payment Endpoint Trust Check') and then defines the exact behavior under test: whether the endpoint rejects forged txHash/signature/replay before delivering. That level of mechanism detail is enough to separate it from generic siblings like x402-verify or x402-service-audit without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Buyer-side trust check before you pay' gives a clear triggering context and the perspective (buyer-side), which is exactly the decision point an agent needs. It stops short of naming when NOT to use it or pointing to a specific alternative tool, so it is not a full 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources