Automated smart contract security scannerGET /api/contract-audit-scanner · x402 API by Alfred's httpay.xyz
Automated smart contract security scanner — checks for reentrancy, oracle staleness, unchecked returns, proxy risks, and more. Returns risk score and actionable findings.
What does this x402 API do?
Automated smart contract security scanner. This is an x402-gated GET API resource from Alfred's httpay.xyz. TOLL·402 records origin and cross source evidence as of 2026-07-21. The listing records $0.05 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $0.05 USD-denominated per request
- Networks
- Base
- Latest evidence
- TOLL·402 records origin and cross source evidence as of 2026-07-21
- Resource ID
- cf0dd447200e1726dfe0c5a2
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://httpay.xyz/api/contract-audit-scanner", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Exact route checked
http 402 unparsed · accepts-missing
- Origin reachable
HEAD https://httpay.xyz/ returned 402.
- Observed in cdp-bazaar
The registry record was observed and retained with provenance.
- Observed in 402-index
Discovered through bazaar.
- Registry record checked
Registry health: healthy.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $0.05 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.