x402 endpoint compliance observations — 2026-10-31

We ran ScanPay's $0.01 x402 auditor against 40 public x402 endpoints discovered through the PayAI Bazaar, one paid call each. The auditor fetches each endpoint unpaid and scores the observable 402 Payment Required contract: x402 version, accepts completeness, resource match, discovery extension, header/body challenge, CORS exposure and latency.

31
compliant
9
partial
0
other
40
observed
Scope and honesty. A score is a snapshot of the unpaid challenge at the time of the request — not a certification, security review, uptime guarantee or endorsement. Endpoints and operators have no relationship with ScanPay. Scores are reproducible: re-run the audit yourself. Corrections: scanpay-ops@fldubai.com.
EndpointScoreVerdictHTTPLatencyNotable findings
lqd-verdict.onrender.com100compliant402915.7 ms—
qrcode.pub100compliant40258.7 ms—
x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev100compliant402769.6 ms—
agentum.lat88compliant402472.6 ms—
api.lupapago.com88compliant40258.2 ms—
api.syraa.fun88compliant402287.3 ms—
assetfactory-jobs-x402.sigrunner.workers.dev88compliant40244.6 ms—
automaton-paid.sharkquant.ai88compliant402508.7 ms—
aws-bedrock.grok.me88compliant402422.5 ms—
bentcrypto-x402-production.up.railway.app88compliant402403.1 ms—
business.agentum.lat88compliant402497.1 ms—
citable.run88compliant402389.7 ms—
earlythunder.com88compliant40284.2 ms—
gw.tolls.fun88compliant402233.7 ms—
kr-x402-mvp.kgy5612.workers.dev88compliant40260.2 ms—
lazareus.xyz88compliant402221.0 ms—
money-reactor.makar52nn2016.workers.dev88compliant40244.2 ms—
mr-river10.makar52nn2016.workers.dev88compliant40242.7 ms—
mr-river2.makar52nn2016.workers.dev88compliant40244.0 ms—
mr-river3.makar52nn2016.workers.dev88compliant402175.5 ms—
mr-river4.makar52nn2016.workers.dev88compliant40243.7 ms—
mr-river5.makar52nn2016.workers.dev88compliant402179.9 ms—
mr-river6.makar52nn2016.workers.dev88compliant40243.3 ms—
mr-river7.makar52nn2016.workers.dev88compliant40263.5 ms—
mr-river8.makar52nn2016.workers.dev88compliant402197.8 ms—
mr-river9.makar52nn2016.workers.dev88compliant40241.8 ms—
onlinewebdirectory.net88compliant402180.9 ms—
relay402.georgespring.workers.dev88compliant402408.2 ms—
rentcast.x402.paysponge.com88compliant402333.6 ms—
sol.blockrun.ai88compliant402402.7 ms—
underground.substratesymposium.com88compliant402492.8 ms—
47620.xyz75partial402286.8 ms—
aniccaai.com75partial402567.6 ms—
changelog-state-api.replit.app75partial402746.0 ms—
mpp.hyreagent.fun75partial402216.3 ms—
payai.agentstools.dev75partial402245.9 ms—
aijobsboom-x402.sonofgus.workers.dev50partial402425.9 ms—
blocksearch.dev50partial402561.6 ms—
circadian-agent.com50partial402354.4 ms—
clawpay.ai50partial402386.4 ms—

Run the same audit on your endpoint

curl -s -X POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/x402-check \
  -H 'Content-Type: application/json' -d '{"target":"https://your-service.example/api"}'
# unpaid -> 402; pay $0.01 in USDC on Base or Solana, retry with PAYMENT-SIGNATURE

Machine-readable: https://scanpay-edge.alextaghiashvili.workers.dev/.well-known/x402 · OpenAPI · llms.txt.