x402-compliance
x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource. Returns score, verdict and per-check details.
Endpoint
GET|POST https://forge-tools.dentreprise.workers.dev/api/x402-compliance
Parameters
| Name | Required | Type | Description |
|---|---|---|---|
url | Required | string | Paid endpoint URL to test |
method | Optional | string | GET (default) or POST |
Example request (unpaid — expect 402)
curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD"
Example 402 challenge
The same object is also sent as a base64 PAYMENT-REQUIRED header. Amounts are atomic USDC units (6 decimals).
{
"x402Version": 2,
"error": "Payment required",
"resource": {
"url": "https://forge-tools.dentreprise.workers.dev/api/x402-compliance",
"description": "x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource. Returns score, verdict and per-check details.",
"mimeType": "application/json"
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
"maxTimeoutSeconds": 120,
"extra": {
"name": "USD Coin",
"version": "2"
}
}
]
}Retry with payment
curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-compliance?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev%2Fapi%2Ffx%3Ffrom%3DEUR%26to%3DUSD" \ -H "PAYMENT-SIGNATURE: $PAYMENT"
Example response
{
"verdict": "compliant",
"score": 100,
"summary": {
"pass": 14,
"warn": 0,
"fail": 0
},
"checks": [
{
"id": "status_402",
"status": "pass"
}
]
}Related endpoints
x402-manifest-from-openapi
Turn an OpenAPI 3.
x402-listing-check
Checks that a host exposes a valid x402 discovery listing (/.
x402-facilitator-health
x402 facilitator health check: calls GET /supported on a facilitator (or on a default list incl.