USDC payment infrastructure for AI agents and humans. Send tips, hire people for tasks, and create/earn from gigs — all settled on-chain via x402 (Base, Solana, World Chain) and MPP (Tempo, Stellar, Monad).
Payment surface
This count includes endpoints established by catalog, OpenAPI, or valid runtime 402 evidence. It does not count every URL the harmless scanner attempted.
Probe coverage
These are bounded unauthenticated requests and scanner-policy stops. A response without MPP evidence remains a discovery result, not a security failure.
Target has no public A or AAAA records
Oct 9, 2026, 12:31 PM UTCTarget has no public A or AAAA records
Oct 9, 2026, 6:23 AM UTCTarget has no public A or AAAA records
Oct 9, 2026, 6:22 AM UTCTarget has no public A or AAAA records
Oct 9, 2026, 6:18 AM UTCTarget has no public A or AAAA records
Oct 9, 2026, 12:37 AM UTCTarget has no public A or AAAA records
Oct 8, 2026, 6:32 PM UTCTarget has no public A or AAAA records
Oct 8, 2026, 12:30 PM UTCTarget has no public A or AAAA records
Oct 8, 2026, 6:29 AM UTCTarget has no public A or AAAA records
Oct 8, 2026, 12:31 AM UTCTarget has no public A or AAAA records
Oct 7, 2026, 6:29 PM UTCTarget has no public A or AAAA records
Oct 7, 2026, 12:28 PM UTCTarget has no public A or AAAA records
Oct 7, 2026, 6:35 AM UTCTarget has no public A or AAAA records
Oct 7, 2026, 12:40 AM UTCTarget has no public A or AAAA records
Oct 6, 2026, 6:34 PM UTCTarget has no public A or AAAA records
Oct 6, 2026, 12:34 PM UTCTarget has no public A or AAAA records
Oct 6, 2026, 6:22 AM UTCTarget has no public A or AAAA records
Oct 6, 2026, 12:28 AM UTCTarget has no public A or AAAA records
Oct 5, 2026, 6:29 PM UTCTarget has no public A or AAAA records
Oct 5, 2026, 12:27 PM UTCTarget has no public A or AAAA records
Oct 5, 2026, 6:27 AM UTCTarget has no public A or AAAA records
Oct 5, 2026, 12:30 AM UTCTarget has no public A or AAAA records
Oct 4, 2026, 6:27 PM UTCTarget has no public A or AAAA records
Oct 4, 2026, 12:29 PM UTCTarget has no public A or AAAA records
Oct 4, 2026, 6:27 AM UTCTarget has no public A or AAAA records
Oct 4, 2026, 12:30 AM UTCTarget has no public A or AAAA records
Oct 3, 2026, 6:29 PM UTCTarget has no public A or AAAA records
Oct 3, 2026, 12:32 PM UTCTarget has no public A or AAAA records
Oct 3, 2026, 6:22 AM UTCTarget has no public A or AAAA records
Oct 3, 2026, 12:34 AM UTCTarget has no public A or AAAA records
Oct 2, 2026, 6:30 PM UTCTarget has no public A or AAAA records
Oct 2, 2026, 12:45 PM UTCTarget has no public A or AAAA records
Oct 2, 2026, 6:26 AM UTCTarget has no public A or AAAA records
Oct 2, 2026, 12:39 AM UTCTarget has no public A or AAAA records
Oct 2, 2026, 12:29 AM UTCTarget has no public A or AAAA records
Oct 1, 2026, 6:35 PM UTCTarget has no public A or AAAA records
Oct 1, 2026, 6:25 PM UTCTarget has no public A or AAAA records
Oct 1, 2026, 12:41 PM UTCTarget has no public A or AAAA records
Oct 1, 2026, 12:30 PM UTCTarget has no public A or AAAA records
Oct 1, 2026, 12:21 PM UTCTarget has no public A or AAAA records
Oct 1, 2026, 6:25 AM UTCTarget has no public A or AAAA records
Oct 1, 2026, 12:32 AM UTCTarget has no public A or AAAA records
Sep 30, 2026, 6:27 PM UTCTarget has no public A or AAAA records
Sep 30, 2026, 12:26 PM UTCTarget has no public A or AAAA records
Sep 30, 2026, 12:18 PM UTCTarget has no public A or AAAA records
Sep 30, 2026, 6:28 AM UTCTarget has no public A or AAAA records
Sep 30, 2026, 12:24 AM UTCTarget has no public A or AAAA records
Sep 29, 2026, 6:25 PM UTCTarget has no public A or AAAA records
Sep 29, 2026, 12:24 PM UTCTarget has no public A or AAAA records
Sep 29, 2026, 6:23 AM UTCTarget has no public A or AAAA records
Sep 29, 2026, 12:26 AM UTCEvidence model
Every result names its evidence state. Unknown and not tested never mean secure.
dns-empty: Target has no public A or AAAA records
Basis: scanner policy decision · Oct 9, 2026, 12:31 PM UTCNo RFC 9727 API catalog was available at this URL (HTTP 404); prior advertised links were withdrawn
Basis: RFC 9727 discovery response · Sep 21, 2026, 12:18 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Sep 21, 2026, 12:18 PM UTC162 bytes within scanner limit
Basis: harmless scanner · Sep 21, 2026, 12:18 PM UTCNo MPP Payment challenge observed
Basis: unauthenticated HTTP response · Sep 21, 2026, 12:18 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Sep 21, 2026, 12:18 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Sep 21, 2026, 12:18 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Sep 21, 2026, 12:18 PM UTCNo current Payment challenge exposes session or authorization inputs
Basis: observable challenge values only · Sep 21, 2026, 12:18 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Sep 21, 2026, 12:18 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Sep 21, 2026, 12:18 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Sep 21, 2026, 12:18 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Sep 21, 2026, 12:18 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Sep 21, 2026, 12:18 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Sep 21, 2026, 12:18 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Sep 21, 2026, 12:18 PM UTC2 payment offer(s) accepted
Basis: harmless discovery response · Sep 13, 2026, 12:23 AM UTCHistory
security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://molty.cash/ was recorded but not fo… → {"state":"observed","evidence":"dns-empty: Target has no public A or AAAA records","basis":"scanner policy decision"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create pay-per-post gigs — fund tasks for humans to complete on X → Create a CPM content campaign
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create a CPM content campaign → Create pay-per-post gigs — fund tasks for humans to complete on X
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create a CPM content campaign → Create pay-per-post gigs — fund tasks for humans to complete on X
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create pay-per-post gigs — fund tasks for humans to complete on X → Create a CPM content campaign
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:api_catalog_parse: {"state":"observed","evidence":"API catalog source returned HTTP 404; prior advertised links were withdrawn","basis":"R… → {"state":"observed","evidence":"No RFC 9727 API catalog was available at this URL (HTTP 404); prior advertised links we…
Evidence: Repeated harmless observation changed the modeled property
security:probe_safety: {"state":"observed","evidence":"Redirects to a different hostname are recorded as blocked, not followed","basis":"scann… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://molty.cash/ was recorded but not fo…
Evidence: Repeated harmless observation changed the modeled property
security:probe_safety: {"state":"tested-fail","evidence":"Redirects to a different hostname are recorded as blocked, not followed","basis":"sc… → {"state":"observed","evidence":"Redirects to a different hostname are recorded as blocked, not followed","basis":"scann…
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create pay-per-post gigs — fund tasks for humans to complete on X → Create a CPM content campaign
Evidence: clock-guarded source update
description: Create a CPM content campaign → Create pay-per-post gigs — fund tasks for humans to complete on X
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:api_catalog_parse: {"state":"tested-fail","evidence":"API catalog source returned HTTP 404; prior advertised links were withdrawn","basis"… → {"state":"observed","evidence":"API catalog source returned HTTP 404; prior advertised links were withdrawn","basis":"R…
Evidence: Repeated harmless observation changed the modeled property
description: Create a CPM content campaign → Create pay-per-post gigs — fund tasks for humans to complete on X
Evidence: clock-guarded source update
security:bounded_response: {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"5323 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
description: Create pay-per-post gigs — fund tasks for humans to complete on X → Create a CPM content campaign
Evidence: clock-guarded source update
offer → {"method":"unknown","intent":"charge","currency":"USD","chainId":null,"recipient":null,"amount":null,"decimals":null,"u…
Evidence: openapi payment metadata