Sample on example input
x402 v2 Merchant Launch & Dual-Facilitator Certification Suite
Composite 6-check x402 merchant launch audit chaining EIP-3009 params, EIP-712 domain separator, CDP + PayAI facilitator compatibility, CAIP-2 network check, and pricing advisor.
Free sample: real output of this suite run on a made-up example configuration (example.com hosts, illustrative values chosen to show what findings look like). It is not an audit of any real system. The paid call runs the same logic on the parameters you send.
What you get
- Executive grade B, posture score 80/100 on this example input
- 6 sub-check results; failed on this example:
payment_header- Prioritized remediation checklist and disclaimer
Example input
{
"network": "eip155:8453",
"amount_atomic": "500"
}
Parameters this suite reads
All parameters this suite reads. Pass your real values as query or JSON parameters; omitted ones use defaults. The suite evaluates the values you pass; it does not crawl or scan live URLs.
name, version, chain_id, verifying_contract, nonce, valid_after, valid_before, method, price_usdc, has_bazaar_extension, network, asset, amount_atomic, pay_to, x402_version, category, indexing_cost_usdc
How to call it (0.05 USDC)
x402: Returns HTTP 402 with a base64 PAYMENT-REQUIRED header (x402 v2, USDC on Base, eip155:8453). Use any x402 v2 client (it signs an EIP-3009 authorization and retries with PAYMENT-SIGNATURE). Fallback: send the USDC yourself, then retry with header X-PAYMENT-TX: <tx hash>.
curl -i 'https://bot-bazaar.fly.dev/v1/x402/suite/x402-merchant-launch-audit?network=eip155%3A8453&amount_atomic=500'
Prepaid key:
curl -s -H 'X-Bazaar-Key: bz_live_YOUR_KEY' 'https://bot-bazaar.fly.dev/v1/x402/suite/x402-merchant-launch-audit?network=eip155%3A8453&amount_atomic=500'
MCP (streamable HTTP, tool suite_x402_merchant_launch_audit):
curl -s https://bot-bazaar.fly.dev/mcp -H 'content-type: application/json' -H 'X-Bazaar-Key: bz_live_YOUR_KEY' -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "suite_x402_merchant_launch_audit", "arguments": {"network": "eip155:8453", "amount_atomic": "500"}}}'OpenAI-compatible (0.01 USDC per chat call)
The chat-completions router picks the suite from keywords in the prompt and is billed at the chat-completions price.
curl -s https://bot-bazaar.fly.dev/v1/x402/chat/completions -H 'content-type: application/json' -H 'Authorization: Bearer bz_live_YOUR_KEY' -d '{"model": "bazaar-suite-pro-v1", "messages": [{"role": "user", "content": "Run the x402 merchant launch audit"}], "network": "eip155:8453", "amount_atomic": "500"}'
Full sample report (JSON)
{
"suite": "x402-merchant-launch-audit",
"tool": "suite/x402-merchant-launch-audit",
"title": "x402 v2 Merchant Launch, EIP-3009 & Dual-Facilitator Certification Suite",
"valid": true,
"composite_risk_score": 20,
"composite_posture_score": 80,
"executive_grade": "B",
"sub_check_count": 6,
"sub_checks": {
"eip3009_params": {
"valid": true,
"domain": {
"name": "USD Coin",
"version": "2",
"chainId": 8453,
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"eip712_domain_typehash": "0x8b73c3c69bb8fe3d512ecc4cf759cc79239f7b179b0ffacaa9a75d522b39400f",
"transfer_with_authorization_typehash": "0x7c7c6cdb67a18743f49ec6fa9b35f50d52ed05cbed4cc592e13b44501c1a2267",
"checks": {
"usdc_domain_name_ok": true,
"usdc_domain_version_ok": true,
"base_chain_id_ok": true,
"verifying_contract_format_ok": true,
"is_canonical_base_usdc": true,
"nonce_bytes32_ok": true,
"validity_window_ok": true
}
},
"eip712_domain": {
"domain": {
"name": "USD Coin",
"version": "2",
"chainId": 8453,
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"type_hash": "0x8b73c3c69bb8fe3d512ecc4cf759cc79239f7b179b0ffacaa9a75d522b39400f",
"name_hash": "0x52878b207aaddbfc15ea7bebcda681eb8ccd306e2227b61cef68505c8c056341",
"version_hash": "0xad7c5bef027816a800da1736444fb58a807ef4c9603b7848673f7e3a68eb14a5",
"domain_separator": "0x02fa7265e7c5d81118673727957699e4d68f74cd74b7db77da710fe8a2c7834f",
"matches_base_usdc_v2": true
},
"facilitator_compat": {
"cdp_bazaar_compatible": true,
"autonomous_crawler_sweep_ready": true,
"method": "GET",
"price_usdc": "0.01",
"network": "eip155:8453",
"has_bazaar_extension": true,
"recommendation": "Use GET + $0.01 USDC + extensions.bazaar schema for maximum autonomous CDP crawler conversion."
},
"caip2_network": {
"network": "eip155:8453",
"caip2_syntax_valid": true,
"recognized": true,
"chain_metadata": {
"chain_name": "Base Mainnet",
"chain_id": 8453,
"usdc": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"decimals": 6,
"cdp_bazaar_supported": true
},
"asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"asset_matches_canonical_usdc": true,
"caip19_asset_id": "eip155:8453/erc20:0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"payment_header": {
"valid": false,
"x402_version": 2,
"network": "eip155:8453",
"amount_atomic": "500",
"amount_usdc": "0.0005",
"pay_to_checksum": "0x6E007731870EDe419CfB31889Cd5C4493CEcb04c",
"meets_cdp_1000_atomic_min": false
},
"pricing_advisor": {
"category": "security-and-compliance",
"recommended_discovery_price_usdc": "0.01",
"empirical_benchmarks": {
"cdp_endpoints_at_or_below_0_01_pct": 69.0,
"cdp_endpoints_at_or_below_0_05_pct": 87.5,
"observed_crawler_auto_buy_cap_usdc": "0.01-0.05"
},
"indexing_self_test_cost_usdc": "0.01",
"breakeven_outside_calls": 1,
"strategy": "Expose a deterministic $0.01 GET route with queryParams in extensions.bazaar to capture 100% of autonomous indexer sweeps."
}
},
"passed_sub_checks": [
"eip3009_params",
"eip712_domain",
"facilitator_compat",
"caip2_network"
],
"failed_sub_checks": [
"payment_header"
],
"informational_sub_checks": [
"pricing_advisor"
],
"prioritized_remediation_checklist": [
"Return HTTP 402 with PAYMENT-REQUIRED base64 header on GET, POST, and HEAD requests.",
"Include extensions.bazaar input/output examples and JSON Schema Draft 2020-12 for Coinbase CDP Bazaar indexing.",
"Support both Coinbase CDP (primary) and PayAI (request-selectable/fallback) facilitators on eip155:8453 Base USDC."
],
"remediation_note": "General hardening checklist for this suite; failed_sub_checks lists the findings specific to the input you passed.",
"input_note": "This suite evaluates the configuration values passed as query or JSON parameters; it does not crawl or scan live URLs. Omitted parameters fall back to the documented defaults.",
"disclaimer": "Automated composite analytical & schema audit only \u2014 not legal advice, not financial or investment advice, not tax advice, and not a formal third-party security certification.",
"generated_at": 1793508502
}