◆ 24K LABS THE GOLD‑402 INDEX

06 Security 41

Scanners, auditors, verifiers, risk feeds. The coldest shelf on the site, and the one where our own standard has to be highest: a security tool that cannot be reached is worse than no security tool, because someone is relying on it.

— a terminal running a scan someone will sign their name to —

27 answered when knocked 0 answer nothing 14 no receipt on file

41 of 731 curated services sit on this shelf. 27 carry a dated knock; most recent . A knock is one HTTP request that got an answer — not a delivery test. Read a stamp as reachable and speaks the protocol, never as worth the money.

  • agent.pw Self-hostable MIT credential vault for agent API keys and OAuth tokens.
  • Automaton-Sovereign — Pre-flight safety checks for Base before an agent signs: EVM bytecode analysis with honeypot and mint-backd…
  • Burnbound — Buyer-side spending controls for x402: per-agent daily caps, per-payment limits, allowed hosts and human ap…
  • ChainWard — Evidence-linked on-chain risk report for a Base or BNB Chain address before an agent pays it, $0.05 USDC on…
  • Checkpoint402 Sanctions Screening — Screens a person or company name (fuzzy, alias-aware) and/or a crypto wallet address against the US Treasur…
  • Cleared Index Trust provider and verification index with a conformant trust-evaluation endpoint: `POST /api/cleared/trust…
  • Coinbase Bug Bounty Report x402 vulnerabilities for rewards up to $50,000.
  • CVE Database Known vulnerabilities and patches for the x402 protocol.
  • CYBERA Compliance API VASP address identification (20,468 addresses, 29 chains), risk scoring, sanctions/mixer screening.
  • Decision Anchor External anchoring layer for accountability before x402 payment execution.
  • DopamineDesk Transaction Preflight — Checks an unsigned EVM transaction for simulation errors, gas, proxy evidence, and optional token-security…
  • EIP-3009 Security Analysis Security considerations for TransferWithAuthorization.
  • GPT-6 Agent Guard & Calldata Decoder — Pre-transaction safety analyzer and calldata decoder for autonomous agents to vet contracts and prevent wal…
  • Hermes Plant Action Safety Deterministic pre-execution gate for agent shell, Git, SQL, infrastructure, and deployment actions, with a…
  • HostDeFi Token Risk — x402 machine-payable multi-chain token risk scanner: instant on-chain safety grades for Solana and EVM toke…
  • ICME Labs Formal verification for AI agent actions.
  • Immunefi x402 Program Decentralized bug bounty platform with x402 listings.
  • KaelAi Wallet trust scoring API for the agentic economy.
  • LION — Compliance and company lookups for agents: OFAC SDN wallet screening that answers pass, warn or block, a mu…
  • MIDAX402 — Signed EIP-712 conformance verdicts for x402 services, appended to a public registry.
  • MoltGuard Agent trust scoring (0-100), Sybil detection with funding cluster analysis, Polymarket integrity, Ed25519 V…
  • Paybound Open-source governance proxy for x402 agent payments.
  • Payment Verification Guide Proper payment verification: facilitator trust models, on-chain verification fallbacks, amount and recipien…
  • PaySentry Control plane for AI agent payments.
  • PolicyLayer Non-custodial spending controls for AI agents.
  • Revettr Counterparty risk scoring for x402 agentic commerce.
  • ScoutScore Trust scoring for x402 services.
  • ScreenSeal — Sanctions screening for AI agents against OFAC SDN, OFAC Consolidated Non-SDN, and EU FSF lists, returning…
  • SENTINEL AML/CFT compliance intelligence.
  • Sentinel/Valeo Enterprise audit layer.
  • ShieldAPI x402-native security intelligence API.
  • SpendPreflight — Operated by SpendPreflight, an x402 service providing OFAC/domain screening and allow/hold/block payment pr…
  • stripe-mcps Trust verification + AML sanctions screening before Stripe/x402 payments.
  • TaskMarket Trust Score Requester reputation scoring for TaskMarket (taskmarket.dev): given a requester wallet address, returns a 0…
  • Verdix — Checks an EVM address on Base before an agent sends funds to it: OFAC sanctions, scam/phishing lists, live…
  • Viridis MCP Security Preflight Deterministic static preflight for caller-supplied MCP manifests that checks endpoint and authentication de…
  • x402 Agent Safety Store — Pre-transaction safety checks for agents on Base: decode what a signature or transaction does before signin…
  • x402 Checker (Nock) Free `GET /check?url=` honesty probe of a live x402 URL plus free `GET /board` (pay-to-rank, 24h) and `GET…
  • x402 Manifest Check Zero-dependency Python CLI and live x402-paid API for static manifest checks covering network, recipient, a…
  • x402 Preflight — Audits a public x402 endpoint before payment via required `resource_url` and optional `method=GET|HEAD`, `e…
  • x402 Trust Autonomous trust and reliability scoring for every publicly listed x402 endpoint, derived from continuous l…