Paid crypto market-intelligence API for autonomous agents: crypto signals, whale/CEX/bridge flow alerts, calibrated price ranges, risk state, preflight checks, decision journals, and outcome audits via x402.
Payment surface
This count includes endpoints established by catalog, OpenAPI, or valid runtime 402 evidence. It does not count every URL the harmless scanner attempted.
Probe coverage
These are bounded unauthenticated requests and scanner-policy stops. A response without MPP evidence remains a discovery result, not a security failure.
162 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:22 PM UTC1,178 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:21 PM UTC1,256 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:21 PM UTC35,038 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:20 PM UTC1,355 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:20 PM UTC1,413 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:20 PM UTC1,261 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:20 PM UTC1,543 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:26 PM UTC1,806 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:24 PM UTC1,330 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:23 PM UTC1,549 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:23 PM UTC1,525 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 12:23 PM UTC34,187 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:18 AM UTC1,373 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 9, 2026, 6:18 AM UTC1,630 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Oct 1, 2026, 12:24 AM UTC162 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:22 PM UTC1,178 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:21 PM UTC1,256 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:21 PM UTC1,355 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:21 PM UTC35,038 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:21 PM UTC1,413 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:21 PM UTC1,261 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:20 PM UTC1,330 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:20 PM UTC1,544 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 6:20 PM UTC1,806 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:24 PM UTC1,549 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:23 PM UTC1,525 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:22 PM UTC34,187 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:18 PM UTC1,373 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 30, 2026, 12:18 PM UTC1,626 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 6:23 PM UTC1,178 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:24 PM UTC162 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:24 PM UTC1,256 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:23 PM UTC1,355 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:23 PM UTC1,413 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:23 PM UTC34,069 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:23 PM UTC1,259 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:22 PM UTC1,330 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:22 PM UTC1,542 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 12:22 PM UTC25,413 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 6:22 AM UTC1,373 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 21, 2026, 6:20 AM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:25 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:23 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:22 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:22 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:21 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:21 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:21 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:21 PM UTC17 response bytes · 0 redirects · HTTPS fetch completed with platform certificate validation
Sep 12, 2026, 12:20 PM UTCEvidence model
Every result names its evidence state. Unknown and not tested never mean secure.
No RFC 9727 API catalog was available at this URL (HTTP 404); prior advertised links were withdrawn
Basis: RFC 9727 discovery response · Oct 9, 2026, 6:22 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:22 PM UTC162 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:22 PM UTCNo MPP Payment challenge observed
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:22 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:22 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:22 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:22 PM UTCNo current Payment challenge exposes session or authorization inputs
Basis: observable challenge values only · Oct 9, 2026, 6:22 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:22 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:22 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:22 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:22 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:22 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:22 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:22 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:21 PM UTC1178 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:21 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:21 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:21 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:21 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:21 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:21 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:21 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:21 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:21 PM UTC1256 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:21 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:21 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:21 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:21 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:21 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:21 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:21 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:21 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:21 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:20 PM UTC35038 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTCNo MPP Payment challenge observed
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:20 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTCNo current Payment challenge exposes session or authorization inputs
Basis: observable challenge values only · Oct 9, 2026, 6:20 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:20 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:20 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:20 PM UTC1355 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:20 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:20 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:20 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:20 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:20 PM UTC1413 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:20 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:20 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:20 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:20 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:20 PM UTC1261 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:20 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:20 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:20 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:20 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:20 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:20 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:20 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:26 PM UTC1543 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:26 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:26 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:26 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:26 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:26 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 12:26 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:26 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:26 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:26 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:26 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:26 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:26 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:26 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:24 PM UTC1806 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:24 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:24 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:24 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:24 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:24 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 12:24 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:24 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:24 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:24 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:24 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:24 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:24 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:24 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:23 PM UTC1330 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:23 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 12:23 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:23 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:23 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:23 PM UTC1549 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:23 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 12:23 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:23 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:23 PM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 12:23 PM UTC1525 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 12:23 PM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 12:23 PM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 12:23 PM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 12:23 PM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 12:23 PM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 12:23 PM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 12:23 PM UTC14 payment offer(s) accepted
Basis: harmless discovery response · Oct 9, 2026, 6:18 AM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 9, 2026, 6:18 AM UTC1373 bytes within scanner limit
Basis: harmless scanner · Oct 9, 2026, 6:18 AM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 9, 2026, 6:18 AM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 9, 2026, 6:18 AM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 9, 2026, 6:18 AM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:18 AM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 9, 2026, 6:18 AM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 9, 2026, 6:18 AM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 9, 2026, 6:18 AM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 9, 2026, 6:18 AM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 9, 2026, 6:18 AM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 9, 2026, 6:18 AM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 9, 2026, 6:18 AM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 9, 2026, 6:18 AM UTCRequires paid or state-changing behavior outside scanner scope
Basis: Tempo Aug 24 research class · Prior art: https://github.com/wevm/mppx/pull/510#discussion_r3377899233 · Oct 1, 2026, 12:24 AM UTC1630 bytes within scanner limit
Basis: harmless scanner · Oct 1, 2026, 12:24 AM UTC1 Payment challenge(s) observed on HTTP 402; all required fields decoded and validated
Basis: unauthenticated HTTP response · Oct 1, 2026, 12:24 AM UTCChannel and settlement lifecycle require credentials or payments
Basis: public economic-security prior art · Oct 1, 2026, 12:24 AM UTCConcurrency and paid state changes are prohibited
Basis: public economic-security prior art · Oct 1, 2026, 12:24 AM UTCScanner never sends credentials or payments
Basis: methodology · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 1, 2026, 12:24 AM UTC[{"method":"evm","intent":"charge","deposit":null,"authorizationWindow":null,"depositWindowRatio":null,"observableAuthorizationExposure":null,"note":"unknown: session authorization inputs not observable"}]
Basis: observable challenge values only · Oct 1, 2026, 12:24 AM UTCSignature and fee-payer relationships are not observable unauthenticated
Basis: public economic-security prior art · Oct 1, 2026, 12:24 AM UTCHTTPS fetch completed with platform certificate validation
Basis: platform TLS validation · Oct 1, 2026, 12:24 AM UTCScanner does not select, downgrade, or execute payment methods
Basis: public economic-security prior art · Oct 1, 2026, 12:24 AM UTCRequires a completed paid interaction outside scanner scope
Basis: public economic-security prior art · Oct 1, 2026, 12:24 AM UTC0 redirects; every hop passed URL and DNS validation
Basis: harmless scanner · Oct 1, 2026, 12:24 AM UTCScanner never replays signed credentials
Basis: public advisory and protocol prior art · Prior art: https://github.com/advisories/GHSA-fxc9-7j2w-vx54 · Oct 1, 2026, 12:24 AM UTC1 hop(s) resolved twice to stable public addresses
Basis: scanner URL, DNS and redirect policy · Oct 1, 2026, 12:24 AM UTCsecurity:bounded_response: {"state":"tested-pass","evidence":"34187 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"1544 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"1543 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"34187 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"1626 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"1630 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"34187 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"162 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"34069 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"35038 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"1259 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"1261 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
security:bounded_response: {"state":"tested-pass","evidence":"1542 bytes within scanner limit","basis":"harmless scanner"} → {"state":"tested-pass","evidence":"1544 bytes within scanner limit","basis":"harmless scanner"}
Evidence: Repeated harmless observation changed the modeled property
offer → {"method":"evm","intent":"charge","currency":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","chainId":"8453","recipient":…
Evidence: challenge payment metadata
content_type → application/json; charset=utf-8
Evidence: harmless unauthenticated HTTP observation
tls_state: not-tested → tested-pass
Evidence: harmless unauthenticated HTTP observation
source:challenge → active
Evidence: https://crypto.forgemesh.io/api/kronos/futures/decision
challenge_format → mpp-payment-auth
Evidence: harmless unauthenticated HTTP observation
content_type → application/json; charset=utf-8
Evidence: harmless unauthenticated HTTP observation
offer → {"method":"evm","intent":"charge","currency":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","chainId":"8453","recipient":…
Evidence: challenge payment metadata
source:challenge → active
Evidence: https://crypto.forgemesh.io/api/kronos/futures/funding
tls_state: not-tested → tested-pass
Evidence: harmless unauthenticated HTTP observation
challenge_format → mpp-payment-auth
Evidence: harmless unauthenticated HTTP observation
tls_state: not-tested → tested-pass
Evidence: harmless unauthenticated HTTP observation
offer → {"method":"evm","intent":"charge","currency":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","chainId":"8453","recipient":…
Evidence: challenge payment metadata