PT
Ferramentas de desenvolvimento x402 · x402

x402-compliance

Testador de conformidade x402 V2: sonda qualquer endpoint pago sem pagar e verifica o desafio 402 (cabeçalho PAYMENT-REQUIRED, x402Version 2, esquema accepts[], rede CAIP-2, montante atómico, ativo USDC canónico, payTo, maxTimeoutSeconds, extra EIP-712, resource, extensão Bazaar, CORS) e que um 200 gratuito ou cabeçalhos de pagamento forjados nunca desbloqueiem o recurso. Devolve pontuação, veredito e detalhes por verificação.

0.002 USDC / chamada · {atomic} atómico · 2000 atomic

Endpoint

GET|POST https://forge-tools.dentreprise.workers.dev/api/x402-compliance

Parâmetros

NomeObrigatórioTipoDescrição
urlObrigatóriostringPaid endpoint URL to test
methodOpcionalstringGET (default) or POST

Exemplo de pedido (por pagar — espere 402)

curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"

Exemplo de desafio 402

O mesmo objeto também é enviado como cabeçalho PAYMENT-REQUIRED em base64. Os montantes são unidades atómicas de USDC (6 casas decimais).

{
  "x402Version": 2,
  "error": "Payment required",
  "resource": {
    "url": "https://forge-tools.dentreprise.workers.dev/api/x402-compliance",
    "description": "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource. Returns score, verdict and per-check details.",
    "mimeType": "application/json"
  },
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "amount": "2000",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
      "maxTimeoutSeconds": 120,
      "extra": {
        "name": "USD Coin",
        "version": "2"
      }
    }
  ]
}

Tentar de novo com pagamento

curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD" \
  -H "PAYMENT-SIGNATURE: $PAYMENT"

Exemplo de resposta

{
  "verdict": "compliant",
  "score": 100,
  "summary": {
    "pass": 14,
    "warn": 0,
    "fail": 0
  },
  "checks": [
    {
      "id": "status_402",
      "status": "pass"
    }
  ]
}

Demo / amostra grátis

Esta ferramenta está no worker da vaga 1. ?demo=1 devolve uma amostra ou excerto etiquetado com HTTP 200 e sem pagamento. O corpo não são dados reais. As 3 primeiras chamadas reais com sucesso por IP e dia UTC também são grátis.

curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD&demo=1"

Resposta de demo etiquetada

{
  "demo": true,
  "demo_label": "DEMO / SAMPLE — not live data. This is a labelled example response and was not charged.",
  "charged": false,
  "tool": "/api/x402-compliance",
  "docs": "https://agent-hub.dentreprise.workers.dev/tools/x402-compliance/",
  "how_to_get_live_data": "Call the same URL without demo=1. The first 3 successful real calls per IP per UTC day are free; after that attach an x402 v2 PAYMENT-SIGNATURE (USDC on Base).",
  "sample": {
    "verdict": "compliant",
    "score": 100,
    "summary": {
      "pass": 14,
      "warn": 0,
      "fail": 0
    },
    "checks": [
      {
        "id": "status_402",
        "status": "pass"
      }
    ]
  }
}

JavaScript — @x402/fetch

Cliente oficial x402 v2. Instale @x402/fetch e @x402/evm. O nome de pacote antigo x402-fetch é a linha v1 descontinuada e não deve ser usado nestes endpoints.

import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";

// Official x402 v2 client. The older package name "x402-fetch" is the deprecated v1 line.
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
  schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});

const res = await fetchWithPayment(
  "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"
);
console.log(await res.json());

Python — x402

Pacote oficial PyPI x402. Use x402HttpxClient (async) ou x402_requests (sync) depois de register_exact_evm_client com EthAccountSigner.

import asyncio
import os
from eth_account import Account
from x402 import x402Client
from x402.http.clients import x402HttpxClient
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Official PyPI package: x402
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402Client()
register_exact_evm_client(client, EthAccountSigner(account))

async def main():
    async with x402HttpxClient(client) as http:
        res = await http.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD")
        print(res.json())

asyncio.run(main())

# Sync alternative:
# from x402 import x402ClientSync
# from x402.http.clients import x402_requests
# client = x402ClientSync()
# register_exact_evm_client(client, EthAccountSigner(account))
# with x402_requests(client) as session:
#     print(session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD").json())

Servidor MCP — forge-agent-mcp

O modo stdio cobre o catálogo completo (ambos os anfitriões de API). Clone forge-agent-mcp e aponte o seu cliente MCP para src/server.mjs. O remoto Streamable HTTP alojado no gateway original continua a expor apenas as ferramentas desse gateway.

{
  "mcpServers": {
    "forge-agent-hub": {
      "command": "node",
      "args": ["/path/to/forge-agent-mcp/src/server.mjs"]
    },
    "forge-agent-api": {
      "url": "https://x402-gateway.forge-x402.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Wrapper de ferramenta LangChain

Envolva os mesmos clientes x402 como ferramenta LangChain com DynamicStructuredTool (@langchain/core) ou @tool (langchain_core).

import { DynamicStructuredTool } from "@langchain/core/tools";
import { z } from "zod";
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
  schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});

export const x402_compliance = new DynamicStructuredTool({
  name: "x402_compliance",
  description: "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource.",
  schema: z.object({}),
  func: async (input) => {
    const res = await fetchWithPayment("https://forge-tools.dentreprise.workers.dev/api/x402-compliance" + "?" + new URLSearchParams(input));
    return JSON.stringify(await res.json());
  },
});
import os
from langchain_core.tools import tool
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402ClientSync()
register_exact_evm_client(client, EthAccountSigner(account))

@tool
def x402_compliance() -> str:
    """x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource."""
    with x402_requests(client) as session:
        return session.get("https://forge-tools.dentreprise.workers.dev/api/x402-compliance").text

Endpoints relacionados