x402.tokenizen.nl
Bug Bounty Intelligence: AI-generated hypotheses for the Solidity in a public GitHub repo. Not an audit. It reads the files most likely to move funds first, in at most six parts, and the report states how much of the code it read. Usually done within the hour. Check your repo first, for free: GET /api/bug-intel/precheck?repo=owner/name
The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
Pay 5 USDC on Base to 0x015E…fe88f. The signed payment is good for 5 minutes.
- Paid to
- 0x015E…fe88f
- USD Coin contract
- 0x8335…02913
- Payment window
- 5 minutes
- As published
- 5000000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"amount": "5000000",
"scheme": "exact",
"network": "eip155:8453",
"maxAmountRequired": "5000000",
"maxTimeoutSeconds": 300
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"body": {
"repo": "owner/repo",
"contact": "jij@voorbeeld.nl"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"note": "Poll pollUrl tot status = \"complete\".",
"repo": "owner/repo",
"jobId": "bi-1786800000",
"status": "queued",
"pollUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000",
"reportUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000/report",
"estimatedHours": 24,
"price_paid_usd": "5.00"
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"body": {
"type": "object"
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET",
"POST"
],
"type": "string"
},
"bodyType": {
"type": "string"
},
"queryParams": {
"type": "object",
"properties": {},
"additionalProperties": {
"type": "string"
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type",
"example"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
},
"piprail": {
"pay": [
{
"how": "Sign an EIP-3009 transferWithAuthorization for this amount to payTo and resubmit with the PAYMENT-SIGNATURE header. Any x402 client that speaks the exact scheme works.",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"amount": "5000000",
"scheme": "exact",
"symbol": "USDC",
"network": "eip155:8453",
"amountFormatted": "5.00"
}
],
"docs": {
"pay": "https://x402.org",
"home": "https://tokenizen.nl",
"agents": "https://github.com/holistis/agent-receipt-verify"
},
"name": "tokenizen vulnerability pattern search",
"what": "This is an x402 \"402 Payment Required\" endpoint. Pay one of the offered rails to access it.",
"client": {
"note": "No proprietary client is required. Any x402 client that implements the exact scheme on eip155:8453 can pay this endpoint."
},
"verify": {
"note": "The receipt this endpoint returns can be checked independently, without trusting us.",
"tool": "npx -y agent-receipt-verify",
"source": "https://github.com/holistis/agent-receipt-verify"
},
"version": "2",
"protocol": "x402",
"instruction": "tokenizen x402 payment endpoint. Pay 5.00 USDC on eip155:8453 to 0x015Eb036560216B3051339061FF68A207E0fe88f with an EIP-3009 signature in the PAYMENT-SIGNATURE header. The receipt you get back can be verified independently with npx -y agent-receipt-verify. Docs: https://tokenizen.nl."
},
"offer-receipt": {
"info": {
"offers": [
{
"format": "eip712",
"payload": {
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"amount": "5000000",
"scheme": "exact",
"network": "eip155:8453",
"version": 1,
"validUntil": 1792955177,
"resourceUrl": "https://x402.tokenizen.nl/api/bug-intel"
},
"signature": "0x94b6ddc37b27bdccbbe61dd345c0aa461452cc6d9e9b10951c7df34fac1073034518319fd8603345eeb8db249152651f26d2f98e87c9eeedd8ff4d4dc314bb381b",
"acceptIndex": 0
}
]
}
}
}Provenance
- Seen in the source catalog
- 2026-10-25 18:07Z
- Last indexed by Roundhouse
- 2026-10-26 23:10Z
- Last enriched (probe, favicon, geo)
- —
- x402 version
- 2
- Max timeout
- 300s
- Liveness probe
- Not probed
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service x402.tokenizen.nl and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=x402.tokenizen.nl' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://x402.tokenizen.nl/api/bug-intel, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.