Canonical x402 challenge
HTTP 402, PAYMENT-REQUIRED decoding, header/body parity, version, scheme, network, amount, asset, redacted destination, and timeout.
Buyer-controlled · Base x402Check a public x402 paid endpoint against known buyer-client contract requirements and buy a full remediation Witness only when ApexScout has a verified finding.
Free preflight · $0.25 only when a verified remediation match exists
Page load makes no target request and executes no payment. The Witness checks contract compatibility, not endpoint quality or commercial success. Merchant profiles are independent ApexScout assessments and do not imply vendor endorsement.
HTTP 402, PAYMENT-REQUIRED decoding, header/body parity, version, scheme, network, amount, asset, redacted destination, and timeout.
The optional AgentCash Router 1.18 profile recognizes header-only challenges, checks the X-Agent-Identity marker, and flags ambiguous x402/MPP negotiation and SIWX privacy review boundaries.
Known AWAL, generic x402 fetch, Cloudflare Agents, and browser-wallet contract requirements without signing or paying.
HTTPS only, public DNS only, pinned address, no redirects, five-second timeout, 256 KiB limit, no credentials, cookies, body, or buyer headers.
The AgentCash profile does not test dynamic POST pricing, MPP sessions, SIWX storage, private configuration, or paid settlement.
The paid route appears only when a finding maps to ApexScout-owned Reliability Ledger evidence. It never makes a second target request.
{
"status": "manual_review",
"merchantProfile": "agentcash-router-1.18",
"matchId": "awal-latest.invalid-payment-required-response.7f22b81a",
"compatible": false,
"issuesFound": 2,
"fullWitnessAvailable": true,
"fullWitnessPriceUsd": "0.25",
"paymentExecuted": false
}