x402-compliance
x402-V2-conformiteitstester: toetst elk betaald eindpunt zonder te betalen en controleert de 402-challenge (PAYMENT-REQUIRED-header, x402Version 2, accepts[]-schema, CAIP-2-netwerk, atomair bedrag, canonieke USDC-asset, payTo, maxTimeoutSeconds, EIP-712-extra, resource, Bazaar-extensie, CORS) en dat vrije 200’s of vervalste betalingsheaders de resource nooit vrijgeven. Geeft score, oordeel en details per controle.
Eindpunt
GET|POST https://forge-tools.dentreprise.workers.dev/api/x402-compliance
Parameters
| Naam | Verplicht | Type | Beschrijving |
|---|---|---|---|
url | Verplicht | string | Paid endpoint URL to test |
method | Optioneel | string | GET (default) or POST |
Voorbeeldverzoek (onbetaald — verwacht 402)
curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"
Voorbeeld van een 402-challenge
Hetzelfde object wordt ook als base64-header PAYMENT-REQUIRED verstuurd. Bedragen zijn atomaire USDC-eenheden (6 decimalen).
{
"x402Version": 2,
"error": "Payment required",
"resource": {
"url": "https://forge-tools.dentreprise.workers.dev/api/x402-compliance",
"description": "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource. Returns score, verdict and per-check details.",
"mimeType": "application/json"
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
"maxTimeoutSeconds": 120,
"extra": {
"name": "USD Coin",
"version": "2"
}
}
]
}Opnieuw proberen met betaling
curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD" \ -H "PAYMENT-SIGNATURE: $PAYMENT"
Voorbeeldantwoord
{
"verdict": "compliant",
"score": 100,
"summary": {
"pass": 14,
"warn": 0,
"fail": 0
},
"checks": [
{
"id": "status_402",
"status": "pass"
}
]
}Gratis demo / voorbeeld
Deze tool staat op de wave-1-worker. ?demo=1 geeft een gelabeld voorbeeld of fragment terug met HTTP 200 en zonder betaling. De body is geen livedata. De eerste 3 geslaagde echte aanroepen per IP per UTC-dag zijn ook gratis.
curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD&demo=1"
Gelabeld demo-antwoord
{
"demo": true,
"demo_label": "DEMO / SAMPLE — not live data. This is a labelled example response and was not charged.",
"charged": false,
"tool": "/api/x402-compliance",
"docs": "https://agent-hub.dentreprise.workers.dev/tools/x402-compliance/",
"how_to_get_live_data": "Call the same URL without demo=1. The first 3 successful real calls per IP per UTC day are free; after that attach an x402 v2 PAYMENT-SIGNATURE (USDC on Base).",
"sample": {
"verdict": "compliant",
"score": 100,
"summary": {
"pass": 14,
"warn": 0,
"fail": 0
},
"checks": [
{
"id": "status_402",
"status": "pass"
}
]
}
}JavaScript — @x402/fetch
Officiële x402-v2-client. Installeer @x402/fetch en @x402/evm. De oudere pakketnaam x402-fetch is de verouderde v1-lijn en moet niet voor deze endpoints worden gebruikt.
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
// Official x402 v2 client. The older package name "x402-fetch" is the deprecated v1 line.
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});
const res = await fetchWithPayment(
"https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"
);
console.log(await res.json());Python — x402
Officieel PyPI-pakket x402. Gebruik x402HttpxClient (async) of x402_requests (sync) na register_exact_evm_client met EthAccountSigner.
import asyncio
import os
from eth_account import Account
from x402 import x402Client
from x402.http.clients import x402HttpxClient
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
# Official PyPI package: x402
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402Client()
register_exact_evm_client(client, EthAccountSigner(account))
async def main():
async with x402HttpxClient(client) as http:
res = await http.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD")
print(res.json())
asyncio.run(main())
# Sync alternative:
# from x402 import x402ClientSync
# from x402.http.clients import x402_requests
# client = x402ClientSync()
# register_exact_evm_client(client, EthAccountSigner(account))
# with x402_requests(client) as session:
# print(session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD").json())MCP-server — forge-agent-mcp
stdio dekt de volledige catalogus (beide API-hosts). Clone forge-agent-mcp en wijs je MCP-client naar src/server.mjs. De gehoste Streamable-HTTP-remote op de oorspronkelijke gateway biedt nog steeds alleen de oorspronkelijke gateway-tools.
{
"mcpServers": {
"forge-agent-hub": {
"command": "node",
"args": ["/path/to/forge-agent-mcp/src/server.mjs"]
},
"forge-agent-api": {
"url": "https://x402-gateway.forge-x402.workers.dev/mcp",
"transport": "streamable-http"
}
}
}LangChain-toolwrapper
Pak dezelfde x402-clients in als LangChain-tool met DynamicStructuredTool (@langchain/core) of @tool (langchain_core).
import { DynamicStructuredTool } from "@langchain/core/tools";
import { z } from "zod";
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});
export const x402_compliance = new DynamicStructuredTool({
name: "x402_compliance",
description: "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource.",
schema: z.object({}),
func: async (input) => {
const res = await fetchWithPayment("https://forge-tools.dentreprise.workers.dev/api/x402-compliance" + "?" + new URLSearchParams(input));
return JSON.stringify(await res.json());
},
});import os
from langchain_core.tools import tool
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402ClientSync()
register_exact_evm_client(client, EthAccountSigner(account))
@tool
def x402_compliance() -> str:
"""x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource."""
with x402_requests(client) as session:
return session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance").textGerelateerde eindpunten
x402-manifest-from-openapi
Zet een OpenAPI-3.
x402-listing-check
Controleert of een host een geldige x402-discovery-lijst aanbiedt (/.
x402-facilitator-health
x402-facilitator-gezondheidscheck: roept GET /supported aan op een facilitator (of op een standaardlijst incl.