Skip to main content
Glama

x402-payment-audit

x402 Payment Endpoint Trust Check: Black-box check: does the x402 endpoint verify payment (reject forged txHash/signature/replay) before delivering? Buyer-side trust check before you pay. Returns SAFE/RISK/NOT_X402.

Input Schema

NameRequiredDescriptionDefault
urlNo
endpointNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • removedInput schema / properties / endpoint / description
      Removed value: -"Endpoint to process"
    • removedInput schema / properties / url / description
      Removed value: -"Url to process"
  2. Changed1 schema field changed
    • addedInput schema / properties / endpoint
      Added value: +{
      +  "description": "Endpoint to process",
      +  "type": "string"
      +}
  3. Changed1 schema field changed
    • addedInput schema / properties / url
      Added value: +{
      +  "description": "Url to process",
      +  "type": "string"
      +}
  4. First observed

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses the method (black-box), the specific attack classes tested (forged txHash, signature, replay), and the tri-state return taxonomy. It omits operational behavior such as timeouts, rate limits, or whether it makes live calls to the target.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Compact and front-loaded: the label, the check semantics, the usage context, and the return values all land within three short sentences. The leading "x402 Payment Endpoint Trust Check" duplicates the tool name but functions as a title and costs little.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no output schema, the description usefully declares the return values and test scope, which compensates for the missing output schema. However, the unresolved url-vs-endpoint ambiguity and the absence of any note on required inputs leave a real gap an agent must bridge on its own.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and both parameters (url, endpoint) are bare strings with no descriptions, and neither is marked required. The description refers to "the x402 endpoint," implying one of the two is the target, but it never explains the difference between url and endpoint or how they relate, leaving the agent to guess which to supply.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: a black-box trust check of an x402 payment endpoint, with concrete scope (forged txHash/signature/replay) and outcome values (SAFE/RISK/NOT_X402). It clearly positions itself as a buyer-side pre-payment verification, which separates it from generic validators. It does not name a specific sibling (e.g., x402-pay-debugger or x402-verify), so sibling differentiation is implicit rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Buyer-side trust check before you pay" gives a clear trigger condition and audience (buyer, pre-payment), which is strong usage context. It stops short of naming alternatives or stating when NOT to use it (e.g., after payment or for seller-side auditing), so no exclusions are offered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources