resources/atq6wtkp6k/POST /prod/v1/payg/session-risk
POSTorigin + 2 sourcesqualified signals

https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/session-riskPOST /prod/v1/payg/session-risk · x402 API by atq6wtkp6k

Check whether an email address has an active stolen session cookie circulating in a criminal archive — a signal of account takeover that bypasses password resets and 2FA entirely. Call to detect AiTM/session-hijack attacks before an authenticated agent session is trusted.

https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/session-risk

What does this x402 API do?

https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/session-risk. This is an x402-gated POST API resource from atq6wtkp6k. TOLL·402 did not invoke this route automatically because doing so was not considered safe. No normalized USD price is recorded; the listing names Base and Solana. No settled paid call has been verified.

Published price
No normalized USD price is recorded
Networks
Base · Solana
Latest evidence
TOLL·402 did not invoke this route automatically because doing so was not considered safe
Resource ID
ee5e10e31496c929dd786701
USE THIS RESOURCE

Start with a quote-only recipe. Payment signing stays in your project.

CODE
AI CODING TOOLS
quote-check.ts
const response = await fetch("https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/session-risk", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
  "type": "http",
  "method": "POST",
  "bodyType": "json",
  "bodyFieldNames": [
    "email"
  ],
  "pathParamNames": [],
  "queryParamNames": []
}),
});

console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));

// A valid 402 is a quote, not a completed paid call.

Review the provider input schema before running this non-read-only method. No payment code is included.

STATUS HISTORY

  1. Observed in cdp-bazaar

    The registry record was observed and retained with provenance.

  2. Observed in 402-index

    Discovered through bazaar.

  3. Exact route checked

    not safely testable · potentially-mutating-method:POST

  4. Origin reachable

    HEAD https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/ returned 403.

  5. Registry record checked

    Registry health: healthy.

What evidence supports this listing?

cdp-bazaarobserved 2026-08-05 · open source record ↗
402-indexobserved 2026-08-05 · open source record ↗
origin checkHEAD https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/ → 403 on 2026-08-05
route quotenot invoked automatically · potentially-mutating-method:POST · 2026-08-05

Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →

Which networks and payment options does it accept?

The normalized listing price is No normalized USD price is recorded. Raw protocol requirements remain visible below for implementation and audit use.

Baseexact300000 atomic · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Solanaexact300000 atomic · EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
atq6wtkp6k POST /prod/v1/payg/session-risk · ee5e10 x402 API · TOLL·402