lock-smith

Automated security checks for one x402 endpoint — not a penetration test. Eight non-destructive, unpaid probes: paywall presence, challenge sanity, garbage and forged (invalid-signature) payment rejection, exposure surface, error hygiene, body-size cap, discovery consistency. Returns SECURE / FINDINGS / EXPOSED with a fix note per finding. Use this when you operate an x402 route and want its locks

Open endpoint ↗

Price per call: $0.50
Chain: Base
Method: POST
Paid calls · 30 days: 0

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://lock-smith-production.up.railway.app/v1/audit", { method: "POST" });
console.log(await res.json());

https://lock-smith-production.up.railway.app/v1/audit