https://goldkey-edge-storefront.noah-ing.workers.dev/v1/action-gatePOST /v1/action-gate · x402 API by goldkey-edge-storefront
$0.01 AI-agent tool-call preflight: return ALLOW, REVIEW, or BLOCK before an MCP/tool call, payment, fetch, message, write, or execution. One deterministic request combines prompt-injection and hidden-Unicode scanning, SSRF/unsafe-URL screening, JSON Schema payload validation, and atomic spend-mandate enforcement. Returns stable reason codes plus request_sha256 and receipt_sha256; never executes the action; hashes are reproducible, not signatures.
What does this x402 API do?
https://goldkey-edge-storefront.noah-ing.workers.dev/v1/action-gate. This is an x402-gated POST API resource from goldkey-edge-storefront. TOLL·402 did not invoke this route automatically because doing so was not considered safe. No normalized USD price is recorded; the listing names Base. No settled paid call has been verified.
- Published price
- No normalized USD price is recorded
- Networks
- Base
- Latest evidence
- TOLL·402 did not invoke this route automatically because doing so was not considered safe
- Resource ID
- 5dc40871ff77a33cbf3be6f9
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://goldkey-edge-storefront.noah-ing.workers.dev/v1/action-gate", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({
"type": "http",
"method": "POST",
"bodyType": "json",
"bodyFieldNames": [
"action",
"payload",
"schema",
"spend",
"untrusted_text"
],
"pathParamNames": [],
"queryParamNames": []
}),
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.Review the provider input schema before running this non-read-only method. No payment code is included.
- Exact route checked
not safely testable · potentially-mutating-method:POST
- Origin reachable
HEAD https://goldkey-edge-storefront.noah-ing.workers.dev/ returned 200.
- Observed in cdp-bazaar
The registry record was observed and retained with provenance.
- Observed in 402-index
Discovered through bazaar.
- Registry record checked
Registry health: healthy.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is No normalized USD price is recorded. Raw protocol requirements remain visible below for implementation and audit use.