- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · dynamic
- true
Real-time search, extraction, and web crawling through a single, secure API.
- Implementation fingerprint
- unknown no confident attribution
- Fingerprint evidence
- No implementation-specific public signal observed.
- First seen
- Aug 25, 2026, 6:43 PM UTC
- Last seen
- Oct 9, 2026, 6:17 PM UTC
- Origin
- https://mpp.orthogonal.com
- Tags
- web-searchextractioncrawl
Payment surface
10 MPP endpoints
This count includes endpoints established by catalog, OpenAPI, or valid runtime 402 evidence. It does not count every URL the harmless scanner attempted.
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · dynamic
- true
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · dynamic
- true
- Recipient
- not observed
- Chain
- not observed
- Unit type
- request
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · dynamic
- true
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- monad
- Session · url
- https://x402.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · settlement
- circle-gateway
- Session · version
- x402-v2
- Session · url
- https://np.orthogonal.com/tavily/crawl
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- monad
- Session · url
- https://x402.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · settlement
- circle-gateway
- Session · version
- x402-v2
- Session · url
- https://np.orthogonal.com/tavily/extract
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- monad
- Session · url
- https://x402.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · settlement
- circle-gateway
- Session · version
- x402-v2
- Session · url
- https://np.orthogonal.com/tavily/map
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- monad
- Session · url
- https://x402.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · settlement
- circle-gateway
- Session · version
- x402-v2
- Session · url
- https://np.orthogonal.com/tavily/research
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/search
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- tempo
- Session · url
- https://mpp.orthogonal.com/tavily/search
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/search
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · url
- https://x402.orthogonal.com/tavily/search
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- monad
- Session · url
- https://x402.orthogonal.com/tavily/search
- Recipient
- not observed
- Chain
- not observed
- Unit type
- not observed
- Session · rail
- base
- Session · settlement
- circle-gateway
- Session · version
- x402-v2
- Session · url
- https://np.orthogonal.com/tavily/search
Probe coverage
7 harmless observations
These are bounded unauthenticated requests and scanner-policy stops. A response without MPP evidence remains a discovery result, not a security failure.
GET https://mpp.orthogonal.com/tavily/openapi.json
HTTP 2006,394 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:22 PM UTCGET https://mpp.orthogonal.com/tavily/openapi.json
HTTP 2006,394 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:21 PM UTCGET https://mpp.orthogonal.com/.well-known/api-catalog
HTTP 40479 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 29, 2026, 6:23 PM UTCGET https://mpp.orthogonal.com/tavily/openapi.json
HTTP 2005,221 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 6:23 AM UTCGET https://mpp.orthogonal.com/.well-known/api-catalog
HTTP 40479 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 20, 2026, 12:22 PM UTCGET https://mpp.orthogonal.com/tavily/openapi.json
HTTP 2005,221 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 6:21 AM UTCGET https://mpp.orthogonal.com/.well-known/api-catalog
HTTP 40479 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 11, 2026, 6:25 AM UTCEvidence model
Security properties
Every result names its evidence state. Unknown and not tested never mean secure.
authorization_delivery_settlement
Not testedRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:22 PM UTCbounded_response
Tested — pass6394 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:22 PM UTCchallenge_parse
UnknownNo MPP Payment challenge observed
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:22 PM UTCchannel_lifecycle_binding
Not testedChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:22 PM UTCconcurrency_single_winner
Not testedConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:22 PM UTCcredential_replay
Not testedScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:22 PM UTCeconomic_exposure_metadata
UnknownNo current Payment challenge exposes session or authorization inputs
Basis: observable challenge values only · Oct 9, 2026, 12:22 PM UTCfee_payer_cosigner_binding
Not testedSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:22 PM UTChttps_transport
Tested — passHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:22 PM UTCmethod_fallback_policy
Not testedScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:22 PM UTCopenapi_parse
Tested — pass30 payment offer(s) accepted
Basis: harmless discovery response · Oct 9, 2026, 12:22 PM UTCprice_debit_consistency
Not testedRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:22 PM UTCredirect_policy
Tested — pass0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:22 PM UTCreplay_idempotency_scope
Not testedScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:22 PM UTCssrf_target_validation
Tested — pass1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:22 PM UTCapi_catalog_parse
ObservedNo RFC 9727 API catalog was available at this URL (HTTP 404); prior advertised links were withdrawn
Basis: RFC 9727 discovery response · Sep 29, 2026, 6:23 PM UTC— payment-offer-updated
session_json: {"rail":"base","url":"https://x402.orthogonal.com/tavily/search"} → {"rail":"tempo","url":"https://mpp.orthogonal.com/tavily/search"}
Evidence: openapi payment metadata
— payment-offer-discovered
offer → {"method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"uni…
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"base","url":"https://x402.orthogonal.com/tavily/research"} → {"rail":"tempo","url":"https://mpp.orthogonal.com/tavily/research"}
Evidence: openapi payment metadata
— payment-offer-discovered
offer → {"method":"np","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"unitT…
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"base","url":"https://x402.orthogonal.com/tavily/crawl"} → {"rail":"tempo","url":"https://mpp.orthogonal.com/tavily/crawl"}
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"base","url":"https://x402.orthogonal.com/tavily/map"} → {"rail":"tempo","url":"https://mpp.orthogonal.com/tavily/map"}
Evidence: openapi payment metadata
— payment-offer-discovered
offer → {"method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"uni…
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"monad","url":"https://x402.orthogonal.com/tavily/research"} → {"rail":"base","url":"https://x402.orthogonal.com/tavily/research"}
Evidence: openapi payment metadata
— payment-offer-discovered
offer → {"method":"np","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"unitT…
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"base","url":"https://x402.orthogonal.com/tavily/extract"} → {"rail":"tempo","url":"https://mpp.orthogonal.com/tavily/extract"}
Evidence: openapi payment metadata
— security-property-changed
security:openapi_parse: {"state":"tested-pass","evidence":"20 payment offer(s) accepted","basis":"harmless discovery response"} → {"state":"tested-pass","evidence":"30 payment offer(s) accepted","basis":"harmless discovery response"}
Evidence: Repeated harmless observation changed the modeled property
— payment-offer-discovered
offer → {"method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"uni…
Evidence: openapi payment metadata
— payment-offer-discovered
offer → {"method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":null,"amount":null,"decimals":null,"uni…
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"base","settlement":"circle-gateway","version":"x402-v2","url":"https://np.orthogonal.com/tavily/search"} → {"rail":"base","url":"https://x402.orthogonal.com/tavily/search"}
Evidence: openapi payment metadata
— payment-offer-updated
session_json: {"rail":"monad","url":"https://x402.orthogonal.com/tavily/extract"} → {"rail":"base","url":"https://x402.orthogonal.com/tavily/extract"}
Evidence: openapi payment metadata