SpendPreflight
Preflight x402 payments. Base ERC-8004 agent #1151628; wallet binding verified Nov 3, 2026.
| Endpoint | https://api.spendpreflight.com/mcp (streamable-http) |
|---|---|
| Registry version | 1.2.0-metadata.8 |
| Now | 17 tools · grade F (38) · pin ts_96c35142b78e27a4db24d6f394756c53 · protocol 2025-06-18 |
| First / last listed | 2026-11-13 00:55 UTC / 2026-11-13 00:55 UTC |
| Grade over time | 2026-11-13: F (38), 17 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: preflight_payment check_payee lint_endpoint check_token payment_receipt get_service_info verify_payee_binding quote_check listing_guard check_listing security_check seller_index domain_auth check_endpoint wallet_statement find_rv_stations size_solar
preflight_payment | Use when you are about to sign an x402 payment for allow, hold or block, reasons and a signed decision receipt. Covers payee sanctions screening, spending rules and cached price/recipient evidence where available. For separate evidence, use lint_endpoint/listing_guard for technical seller-metadata checks, verify_payee_binding for ERC-8478 registry-to-wallet binding, and payment_receipt for a nativ params: challenge, cart, resource_method, resource_url, rules, spent_today_usd |
check_payee | Use when you need standalone payee screening without a payment decision. Payee risk check. Screens a payee wallet address and name against the OFAC SDN sanctions list and checks the merchant domain's registration age and DNS. Returns risk low|medium|high|unknown with flags such as sanctioned_address, sanctioned_name_possible, new_domain. Call this before a USDC payment when you only have a payee n params: domain, address, name |
lint_endpoint | Use when you sell via x402 and want a free check of your public payment challenge. Free x402 Lint by SpendPreflight. Includes a free passive Security Check summary; optional full report with fixes is $0.10, no automatic payment. Checks a public HTTPS endpoint with an unpaid GET: v1/v2 challenge shape, payTo/asset/network syntax, price, Bazaar metadata and browser CORS headers. Returns a heuristic params: url* |
check_token | Use when you need a bounded Base token assessment with explicit unassessed areas. Base contract safety signals from bounded public-chain reads and OFAC. Basic: deployed bytecode and SDN match. Deep adds standard owner(), paused(), totalSupply(), decimals() and ERC-1967 storage observations, exact ERC-1167 minimal-proxy target detection, a Sourcify runtime-verification claim matched to current byte params: address*, chain, tier |
payment_receipt | Use when you need a signed observation of an existing Base USDC transfer. Verify a native Base USDC transfer by tx_hash (optional log_index), or exact pay_to + decimal amount + past start/end (max 90 days). Ambiguous matches fail without charge. Signed observation, OFAC flags, confirmations and printable HTML. Not invoice ownership or finality proof. Price $0.01 USDC on Base. No free trial. Price: params: tx_hash, log_index, pay_to, amount, start, end |
get_service_info | Use when you need more tools: browse Buyers, Sellers, Books and Data APIs, prices, rules and examples. If you have a payment challenge, call preflight_payment directly. Free, read-only service reference. Use when you need prices, default spending rules, payment setup, trial allowance, or a ready-to-use example call. If you already have a payment challenge or cart, call preflight_payment directly; params: none |
verify_payee_binding | Use when a seller advertises an ERC-8004 identity and you need an ERC-8478 Draft wallet-binding observation. ERC-8478 Draft payee verification: endpoint origin and ERC-8004 agent wallet or EIP-712 delegation at one pinned registry block. Nine explicit outcomes; not-read is uncharged. Signed JSON observation, not payment approval or a safety guarantee. Shared trial may apply. Price: 0.01 USDC. Mini params: requirement*, registry, agentId, resource_url |
quote_check | Use when you need an exact quote compared with cached public price and recipient evidence. Compare a supplied x402 quote with the latest comparable cached public unpaid quote and disclosed retained history. Scout keeps only the latest probe; the separate public index can retain seven days. $0.001 USDC on Base for a usable comparison, no trial. Missing/stale/ambiguous evidence returns unknown witho params: url*, amount*, payTo*, asset*, network*, method |
listing_guard | Use when you need a detailed public listing metadata check. Bazaar Listing Guard: CDP technical validation plus a bounded heuristic metadata screen for agent-directed instructions, embedded URLs, tool calls, invisible Unicode, long fields and prices above 100x a fresh Scout category median. Returns riskScore, flagged spans and rewrite suggestions. Not Coinbase policy certification or guaranteed de params: url*, method* |
check_listing | Use when an existing integration calls the listing_guard compatibility alias. Compatibility alias of listing_guard for existing clients. Prefer listing_guard for a new detailed metadata check; these are the same operation, not two independent checks. Bazaar Listing Guard: CDP technical validation plus a bounded heuristic metadata screen for agent-directed instructions, embedded URLs, tool calls, i params: url*, method* |
security_check | Use when you need the full passive evidence from a current complete saved Lint report. x402 Security Check (Lint Pro). Detailed passive findings and source-linked fixes from an existing, unexpired free Lint report. $0.10 USDC on Base, no trial or automatic payment. No new target request. Resource binding is advertised only; paid-response caching, replay/idempotency, header parser behavior and sett params: report_id* |
seller_index | Use when you need sellers from the existing cached public catalog. Search cached public x402 sellers. First three matches free; up to12 cost0.01 USDC only with extra matches. Bounded unpaid availability, 402, quote history and public Lint evidence; missing evidence unknown. Partial Base USDC wash-activity heuristic: low/elevated/unknown, coverage and reasons. Elevated subtracts10 ordering points w params: capability*, network, max_price_usd, limit |
domain_auth | Use when you need public DNS email-authentication observations for a domain. Observe a public domain’s MX, SPF, direct DMARC record, supplied DKIM selectors and resolver-reported DNSSEC evidence.0.005 USDC per usable report, no shared trial. Fixed public Cloudflare DoH only, at most7 queries/shared8s/128KiB, no SMTP, sender authentication test, DNS changes or query storage. Missing selectors and i params: domain*, selectors |
check_endpoint | Use when you need cached public endpoint evidence. Cached x402 endpoint observations, operated by SpendPreflight. Returns a transparent score (or unknown), its components and seven-day unpaid probe history for an already publicly listed URL. Never fetches the caller's URL or pays the endpoint. Unlisted, unavailable or stale data is not charged. This is not a paid-delivery or compliance guarantee. params: url*, method |
wallet_statement | Use when you need a reconciled Base USDC statement for a bounded UTC window. Export native Base USDC wallet transfers as JSON or CSV for a past range up to 90 days, start inclusive/end exclusive. Exact decimal running balances, counterparties and OFAC flags. Up to 1000 transfers/128 RPC calls/25 seconds; oversized or unavailable historical data fails without charge. Informational, not tax advice. params: address*, start*, end*, format |
find_rv_stations | Use when you need nearby RV stations from the dated FillPoint snapshot; see Data APIs. Nearest RV dump/water stations from FillPoint RV's dated September 17, 2026 ODbL snapshot. $0.01 for bounded straight-line proximity calculation, not live access, potable-water assurance or road routing. Snapshot age and unknown current conditions are explicit. Full underlying projection is free under ODbL. Pric params: latitude*, longitude*, radius_km, limit, service |
size_solar | Use when you need solar energy arithmetic from supplied assumptions; see Data APIs. Off-grid PV energy-balance estimate based on Wattpath by Nomad Energy Club. Supply daily loads, peak sun hours, PV losses, and optional battery assumptions. No location/weather lookup, electrical design, surge or installation certification. $0.02 per calculation; no stored inputs. Price: 0.02 USDC. Minimal input ex params: loads*, peak_sun_hours*, pv_loss_fraction*, inverter_efficiency, panel_watts, battery |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.