x402-listing-check
Checks that a host exposes a valid x402 discovery listing (/.well-known/x402, x402.json, x402-listing): JSON, version, https resource URLs, same host, companions (/openapi.json, /llms.txt), and probes up to 10 listed resources for a real 402 challenge with consistent payTo. Never pays.
Endpoint
GET|POST https://forge-tools.dentreprise.workers.dev/api/x402-listing-check
Parameters
| Name | Required | Type | Description |
|---|---|---|---|
url | Required | string | Host or origin URL |
probe | Optional | string | Resources to probe, 0-10, default 5 |
Example request (unpaid — expect 402)
curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/x402-listing-check?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev"
Example 402 challenge
The same object is also sent as a base64 PAYMENT-REQUIRED header. Amounts are atomic USDC units (6 decimals).
{
"x402Version": 2,
"error": "Payment required",
"resource": {
"url": "https://forge-tools.dentreprise.workers.dev/api/x402-listing-check",
"description": "Checks that a host exposes a valid x402 discovery listing (/.well-known/x402, x402.json, x402-listing): JSON, version, https resource URLs, same host, companions (/openapi.json, /llms.txt), and probes up to 10 listed resources for a real 402 challenge with consistent payTo. Never pays.",
"mimeType": "application/json"
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "1000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
"maxTimeoutSeconds": 120,
"extra": {
"name": "USD Coin",
"version": "2"
}
}
]
}Retry with payment
curl -sS "https://forge-tools.dentreprise.workers.dev/api/x402-listing-check?url=https%3A%2F%2Fx402-gateway.forge-x402.workers.dev" \ -H "PAYMENT-SIGNATURE: $PAYMENT"
Example response
{
"verdict": "valid",
"resources_count": 14,
"probes": [
{
"status": 402,
"ok": true
}
]
}Related endpoints
x402-compliance
x402 V2 compliance tester: probes any paid endpoint without paying and checks the 402 challenge (PAYMENT-REQUIRED header, x402Version 2, accepts[] schema, CAIP-2 network, atomic amount, canonical USDC asset, payTo, maxTimeoutSeconds, EIP-712 extra, resource, Bazaar extension, CORS) and that free 200s or forged payment headers never unlock the resource.
x402-manifest-from-openapi
Turn an OpenAPI 3.
x402-facilitator-health
x402 facilitator health check: calls GET /supported on a facilitator (or on a default list incl.