x402-Entwicklertools · x402

x402-compliance

x402-V2-Konformitätstester: prüft beliebige bezahlte Endpunkte ohne Zahlung und kontrolliert die 402-Challenge (PAYMENT-REQUIRED-Header, x402Version 2, accepts[]-Schema, CAIP-2-Netzwerk, atomarer Betrag, kanonischer USDC-Asset, payTo, maxTimeoutSeconds, EIP-712-extra, resource, Bazaar-Erweiterung, CORS) sowie dass freie 200er oder gefälschte Zahlungsheader die Ressource nie freigeben. Liefert Score, Urteil und Details je Prüfung.

0.002 USDC / Aufruf · {atomic} atomar · 2000 atomic

Endpunkt

GET|POST https://forge-tools.dentreprise.workers.dev/api/x402-compliance

Parameter

Name	Pflicht	Typ	Beschreibung
`url`	Pflicht	string	Paid endpoint URL to test
`method`	Optional	string	GET (default) or POST

Beispielanfrage (unbezahlt — 402 erwartet)

curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"

Beispiel einer 402-Challenge

Dasselbe Objekt wird auch als base64-Header PAYMENT-REQUIRED gesendet. Beträge sind atomare USDC-Einheiten (6 Dezimalstellen).

{
  "x402Version": 2,
  "error": "Payment required",
  "resource": {
    "url": "https://forge-tools.dentreprise.workers.dev/api/x402-compliance",
    "description": "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource. Returns score, verdict and per-check details.",
    "mimeType": "application/json"
  },
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "amount": "2000",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
      "maxTimeoutSeconds": 120,
      "extra": {
        "name": "USD Coin",
        "version": "2"
      }
    }
  ]
}

Mit Zahlung wiederholen

curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD" \
  -H "PAYMENT-SIGNATURE: $PAYMENT"

Beispielantwort

{
  "verdict": "compliant",
  "score": 100,
  "summary": {
    "pass": 14,
    "warn": 0,
    "fail": 0
  },
  "checks": [
    {
      "id": "status_402",
      "status": "pass"
    }
  ]
}

Kostenlose Demo / Beispiel

Dieses Tool liegt auf dem Wave-1-Worker. ?demo=1 liefert ein gekennzeichnetes Beispiel oder einen Auszug mit HTTP 200 ohne Zahlung. Der Body sind keine Livedaten. Die ersten 3 erfolgreichen echten Aufrufe pro IP und UTC-Tag sind ebenfalls kostenlos.

curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD&demo=1"

Gekennzeichnete Demo-Antwort

{
  "demo": true,
  "demo_label": "DEMO / SAMPLE — not live data. This is a labelled example response and was not charged.",
  "charged": false,
  "tool": "/api/x402-compliance",
  "docs": "https://agent-hub.dentreprise.workers.dev/tools/x402-compliance/",
  "how_to_get_live_data": "Call the same URL without demo=1. The first 3 successful real calls per IP per UTC day are free; after that attach an x402 v2 PAYMENT-SIGNATURE (USDC on Base).",
  "sample": {
    "verdict": "compliant",
    "score": 100,
    "summary": {
      "pass": 14,
      "warn": 0,
      "fail": 0
    },
    "checks": [
      {
        "id": "status_402",
        "status": "pass"
      }
    ]
  }
}

JavaScript — @x402/fetch

Offizieller x402-v2-Client. Installieren Sie @x402/fetch und @x402/evm. Der ältere Paketname x402-fetch ist die veraltete v1-Linie und sollte für diese Endpunkte nicht verwendet werden.

import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";

// Official x402 v2 client. The older package name "x402-fetch" is the deprecated v1 line.
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
  schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});

const res = await fetchWithPayment(
  "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"
);
console.log(await res.json());

Python — x402

Offizielles PyPI-Paket x402. Nutzen Sie x402HttpxClient (async) oder x402_requests (sync) nach register_exact_evm_client mit EthAccountSigner.

import asyncio
import os
from eth_account import Account
from x402 import x402Client
from x402.http.clients import x402HttpxClient
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Official PyPI package: x402
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402Client()
register_exact_evm_client(client, EthAccountSigner(account))

async def main():
    async with x402HttpxClient(client) as http:
        res = await http.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD")
        print(res.json())

asyncio.run(main())

# Sync alternative:
# from x402 import x402ClientSync
# from x402.http.clients import x402_requests
# client = x402ClientSync()
# register_exact_evm_client(client, EthAccountSigner(account))
# with x402_requests(client) as session:
#     print(session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD").json())

MCP-Server — forge-agent-mcp

stdio deckt den gesamten Katalog (beide API-Hosts) ab. Klonen Sie forge-agent-mcp und zeigen Sie mit Ihrem MCP-Client auf src/server.mjs. Die gehostete Streamable-HTTP-Remote am ursprünglichen Gateway stellt weiterhin nur die ursprünglichen Gateway-Tools bereit.

{
  "mcpServers": {
    "forge-agent-hub": {
      "command": "node",
      "args": ["/path/to/forge-agent-mcp/src/server.mjs"]
    },
    "forge-agent-api": {
      "url": "https://x402-gateway.forge-x402.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

LangChain-Tool-Wrapper

Kapseln Sie dieselben x402-Clients als LangChain-Tool mit DynamicStructuredTool (@langchain/core) oder @tool (langchain_core).

import { DynamicStructuredTool } from "@langchain/core/tools";
import { z } from "zod";
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
  schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});

export const x402_compliance = new DynamicStructuredTool({
  name: "x402_compliance",
  description: "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource.",
  schema: z.object({}),
  func: async (input) => {
    const res = await fetchWithPayment("https://forge-tools.dentreprise.workers.dev/api/x402-compliance" + "?" + new URLSearchParams(input));
    return JSON.stringify(await res.json());
  },
});

import os
from langchain_core.tools import tool
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402ClientSync()
register_exact_evm_client(client, EthAccountSigner(account))

@tool
def x402_compliance() -> str:
    """x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource."""
    with x402_requests(client) as session:
        return session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance").text