x402 merchant
Code security scan: secrets, vul$1.00 / callfachada.chelsea-hermes.workers.dev ↗
SecurityCodeStatic-analysisSastPython

Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. One entry per finding with rule, severity, exact line number and a suggested fix. Rule-based, no LLM: same snippet, same findings. Send Python or JavaScript as text. Use it as a code review or vulnerability scanner for AI-generated code before shipping. Not a formal audit.

MerchantReport

0x734d…d883

0x734dd50abb63ea5af3d92b8016825475694bd883Explorer
Received
$47.38↓ 97%
Last 7d vs prior 7d
Paid out
$1.00
Last 7d vs prior 7d
Settlements
45↓ 97%
Last 7d vs prior 7d
6
Distinct counterparties
Over the whole indexed history

Received $47.38 of the $3060.46M Roundhouse has indexed across 1,398,118 wallets — less than 0.0001% of it.

Chains (from the recent scan): Base (45)

Funds flow over time

Activity

MayJunJulAugSepOctNov
LessMore

One square per day; click a day to see its settlements in the ledger.

Frequent counterparties

CounterpartySent to themReceived from themSettlementsLast
0x187c…0c4b$0.00$45.84397d agoGraph
0xb439…bc10$0.00$1.0015d agoGraph
0x5da4…6c70$1.00$0.00149d agoGraph
0xa1d1…1978$0.00$0.50118d agoGraph
0xc9c7…1670$0.00$0.03243d agoGraph
0x305c…75e0$0.00$0.01152d agoGraph

Ranked by settled amount over this wallet's recent settlement window — who it normally transacts with.

Data quality

95% of observed volume is with a single counterparty, in all 45 observed settlements.

Organic volume $48.38 of $48.38 total.

Recent activity

Payer PayeeChainAmountx402RouteAgeTxn hash
0xb439…bc100x734d…d883BaseBase$1.00100%coinbase5d ago0x114de7…56d721
0x187c…0c4b0x734d…d883BaseBase$0.25100%coinbase7d ago0x2bae01…20b576
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0xd5e7e4…422999
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0x3bec47…9978c4
0x187c…0c4b0x734d…d883BaseBase$1.00100%coinbase8d ago0x6e9266…7b14e0
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xa8c1c6…700e0a
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xb32d2d…230d96
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0x158ca0…ae129a
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xac0aed…65de57
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0xb26e5a…5ea983
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0x88fa01…e622d3
0x187c…0c4b0x734d…d883BaseBase$1.00100%coinbase8d ago0x22cde9…d843b9
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0x65edbb…3c6f86
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0x3a7519…7731cc
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xfe02df…7c92b4
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xb6e00c…ce4627
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0x5afc65…4c99c3
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0x1d62a2…8a7117
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0x6fb7cc…f2f143
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xc0c084…d88e5d
0x187c…0c4b0x734d…d883BaseBase$0.50100%coinbase8d ago0xa0ceaf…216792
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0x401ab0…670d6f
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0x1054c6…ef5bb0
0x187c…0c4b0x734d…d883BaseBase$3.00100%coinbase8d ago0xe367be…e20b2c
0x187c…0c4b0x734d…d883BaseBase$1.00100%coinbase8d ago0x45a175…996297

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will check 0x734d…d883's payment record before paying it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/merchants/0x734dd50abb63ea5af3d92b8016825475694bd883

Open skill.md
Show the prompt
Using Roundhouse, tell me whether this x402 merchant is worth paying: how many distinct
agents have paid it, how recently, and for what.

  Merchant wallet: 0x734dd50abb63ea5af3d92b8016825475694bd883

curl -s 'https://api.roundhouseai.io/v0/merchants/0x734dd50abb63ea5af3d92b8016825475694bd883'
curl -s 'https://api.roundhouseai.io/v0/entities/0x734dd50abb63ea5af3d92b8016825475694bd883/settlements?limit=50'

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.