How the score is made

every rule on this page is the rule the scanner runs. Rules version scan-rules-1. a score from 0 to 100; higher means more caution.

x402 endpoint parts

partwhat is readmax pointsmarks
E1402 challenge shape10
E2payment asset recognised15
E3manifest and quote agree10points when absent 5
E4payee wallet age10scores 0 at 90 · scores the full max at 7
E5ashare of payments from payee-linked wallets30scores 0 at 0.1 · scores the full max at 0.8
E5bdistinct payers15scores 0 at 25 · scores the full max at 3
E6published receipts verify10points when absent 5
E5applies to E5a and E5bits parts are read only when at least this share of the payments read were classified 0.5

ERC-8004 agent parts

partwhat is readmax pointsmarks
A1agents held by the same owner10scores 0 at 3 · scores the full max at 50
A2registration file20points when invalid 10
A3listed services answering15scores 0 at 0 · scores the full max at 1
A4feedback from owner-linked wallets25scores 0 at 0.1 · scores the full max at 0.8 · points when there are none 10
A5validation entries10
A6owner wallet age10scores 0 at 90 · scores the full max at 7
A7worst listed endpoint10scores 0 at 0 · scores the full max at 100

From points to a score

Points are added over the parts that could be read and rescaled onto 0 to 100. A part that could not be read is left out of the total; it is not counted as a pass. Text taken from a fetched answer is cut to 80 characters.

Bands

Flags

A flag is raised only from a check that was read. Any flag sets the verdict to block.

Caps

A cap lowers clear to caution. It leaves caution and block alone. One is set when 2 or more score parts could not be read, or when fewer than 10 payments were read, or when a payment lane asks for an asset that is not the recognised USDC contract for its network, or when an agent has no feedback and no validation entries.

When there is no score

The word is unknown, or block if a flag was raised, and the page says why.

Reading the result

Payer groups

linked means a payer's first USDC funding came directly from the payee, the agent's owner or another linked payer; other payers are not shown to be independent. The group that is not linked is labelled not directly linked.

Scan something