POST /api/lintInspect an x402 charge before signing.
Validate the network, USDC asset, recipient, atomic amount, timeout, EIP-712 domain, and your own allowlists.
Lint an x402 payment requirement or inspect a domain's live DNS and email-security posture. Tiny USDC payments, structured JSON, no account or API key.
TWO PAID TOOLS
Each route returns its authoritative payment challenge before input validation, then settles only after a valid result is ready.
POST /api/lintValidate the network, USDC asset, recipient, atomic amount, timeout, EIP-712 domain, and your own allowlists.
POST /api/domain-auditResolve current DNS and grade MX, SPF, DMARC, CAA, DNSSEC authentication, and apex reachability with actionable findings.
POST /api/lint
PAYMENT-SIGNATURE: <x402 payment>
Content-Type: application/json
{
"paymentRequired": { "x402Version": 2, "accepts": [...] },
"policy": {
"maxAmountUsd": 0.05,
"allowedPayTo": ["0x..."]
}
}PAYMENT LINT: SIX CHECKS
402 Guard validates structure and your local policy. It never asks for a private key and never signs on your behalf.
Rejects requirements outside your CAIP-2 allowlist.
Pins Base native USDC and validates the token address.
Checks EVM format, zero address, and optional payee allowlists.
Parses atomic USDC amounts and applies a caller-defined cap.
Flags unexpectedly long authorization windows.
Checks the canonical EIP-712 name and version.
HOW IT FITS
Your agent receives an unfamiliar x402 payment requirement.
Send the envelope plus your allowlists and maximum price.
Proceed only on a pass; review warnings and reject errors.