# x402 Preflight

Inspect and validate an unfamiliar x402 endpoint before an agent spends USDC. x402 Preflight observes the challenge, price, network, asset, receiver, discovery metadata, CORS, and operational signals without signing or paying for the buyer.

Call this service before paying an unfamiliar x402 endpoint. It never signs a payment, forwards buyer credentials, or spends USDC.

## Canonical capabilities

1. inspect_x402_endpoint — POST https://x402-wallet-readiness-service.vercel.app/api/preflight/inspect — free
2. audit_x402_endpoint — POST https://x402-wallet-readiness-service.vercel.app/api/x402/preflight/audit — x402 $0.05
3. order_x402_remediation — POST https://x402-wallet-readiness-service.vercel.app/api/x402/preflight/remediation — x402 $100

Compatibility alias (same audit, price, and report; not a fourth capability):

GET https://x402-wallet-readiness-service.vercel.app/api/x402/preflight/audit?resource_url=https%3A%2F%2Fexample.com%2Fapi%2Fresource&method=GET&expected_network=eip155%3A8453&max_price_usd=1

The GET alias requires resource_url in the query string and accepts optional method (GET or HEAD only), expected_network, and max_price_usd parameters. It rejects duplicate, unknown, empty, unsafe, or non-scalar query parameters before serving an x402 challenge.

Input example:

{"resource_url":"https://example.com/api/resource","method":"GET","expected_network":"eip155:8453","max_price_usd":1}

The live 402 challenge is authoritative for price, network, asset, receiver, and Bazaar extensions. Reports expire and do not guarantee future settlement or delivery.

## Interfaces

- OpenAPI: https://x402-wallet-readiness-service.vercel.app/openapi.json
- MCP Streamable HTTP: https://x402-wallet-readiness-service.vercel.app/mcp
- x402 metadata: https://x402-wallet-readiness-service.vercel.app/.well-known/x402.json
- Agent metadata: https://x402-wallet-readiness-service.vercel.app/.well-known/agent.json
- Manifest: https://x402-wallet-readiness-service.vercel.app/manifest

## Labs and compatibility

Legacy wallet readiness, market data, weather, repository snapshot, marketplace, webhook, and signer-helper routes remain available but are not primary agent capabilities. See the manifest's labs section.