apexfaucet.xyz

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "note": "X1 is a Solana fork. The same address (HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ) receives funds on both chains. Solana-native agents can pay USDC without bridging anything.",
  "error": "missing required parameter: domain — nothing has been charged.",
  "usage": "/api/x402/domain-check?domain=coinbase-support-wallet.com",
  "accepts": [
    {
      "rpc": "https://api.mainnet-beta.solana.com",
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "extra": {
        "feePayer": "D93NE2kMj88BPsHfdZZ4A1HX2CGo14Y18Bdb3J4qtD5c"
      },
      "payTo": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
      "amount": "2000",
      "scheme": "exact",
      "symbol": "USDC",
      "chainId": "solana-mainnet",
      "network": "solana",
      "decimals": 6,
      "mimeType": "application/json",
      "priceUsd": "~$0.002",
      "receiver": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
      "resource": "https://apexfaucet.xyz/api/x402/domain-check",
      "priceMinor": 2000,
      "description": "Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.",
      "networkName": "solana",
      "validForSec": 300,
      "networkCaip2": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "outputSchema": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "domain": "coinbase-support-wallet.com"
          },
          "discoverable": true
        },
        "output": {
          "type": "json",
          "schema": {
            "type": "object",
            "properties": {
              "ok": {
                "type": "boolean"
              },
              "data": {
                "type": "object"
              },
              "paid": {
                "type": "number"
              }
            }
          },
          "example": {
            "ok": true,
            "data": {
              "ok": true,
              "dns": {},
              "how": "registration from RDAP (…",
              "host": "coinbase-support-wallet.…",
              "signals": [],
              "verdict": "CAUTION: the name imitat…",
              "lookalike": [],
              "certificate": {},
              "registration": {},
              "registrableDomain": "coinbase-support-wallet.…"
            },
            "paid": 0.002
          }
        }
      },
      "priceDisplay": "0.002 USDC",
      "replayHeader": "X-PAYMENT-SOL",
      "maxAmountRequired": "2000",
      "maxTimeoutSeconds": 300
    },
    {
      "rpc": "https://rpc.mainnet.arc.io",
      "asset": "0x3600000000000000000000000000000000000000",
      "extra": {
        "name": "USDC",
        "note": "Standard x402: sign an EIP-3009 transferWithAuthorization for this amount to payTo and send it base64 in PAYMENT-SIGNATURE - we settle it, you pay no gas. Or, because USDC is also the native gas token on Arc, send a plain value transfer to payTo and replay the transaction hash in X-PAYMENT-ARC.",
        "version": "2",
        "credentialTypes": [
          "authorization"
        ]
      },
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "amount": "2000",
      "scheme": "exact",
      "symbol": "USDC",
      "chainId": 5042,
      "network": "arc",
      "decimals": 6,
      "mimeType": "application/json",
      "priceUsd": "~$0.002",
      "receiver": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "resource": "https://apexfaucet.xyz/api/x402/domain-check",
      "priceMinor": 2000,
      "description": "Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.",
      "networkName": "arc",
      "validForSec": 300,
      "networkCaip2": "eip155:5042",
      "priceDisplay": "0.002 USDC",
      "replayHeader": "X-PAYMENT-ARC",
      "maxAmountRequired": "2000",
      "maxTimeoutSeconds": 300
    },
    {
      "rpc": "https://mainnet.base.org",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "note": "Standard x402: sign an EIP-3009 transferWithAuthorization for this amount to payTo and send it base64 in PAYMENT-SIGNATURE — we settle it, you pay no gas. Or send USDC to payTo and replay the tx hash in X-PAYMENT-BASE.",
        "version": "2",
        "credentialTypes": [
          "authorization"
        ]
      },
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "amount": "2000",
      "scheme": "exact",
      "symbol": "USDC",
      "chainId": 8453,
      "network": "base",
      "decimals": 6,
      "mimeType": "application/json",
      "priceUsd": "~$0.002",
      "receiver": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "resource": "https://apexfaucet.xyz/api/x402/domain-check",
      "priceMinor": 2000,
      "description": "Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.",
      "networkName": "base",
      "validForSec": 300,
      "networkCaip2": "eip155:8453",
      "priceDisplay": "0.002 USDC",
      "replayHeader": "X-PAYMENT-BASE",
      "maxAmountRequired": "2000",
      "maxTimeoutSeconds": 300
    },
    {
      "rpc": "https://rpc.mainnet.x1.xyz",
      "note": "X1 is an SVM chain without a registered CAIP-2 namespace; standard x402 clients cannot pay on it. Pay the USDC option, or send XNT yourself and replay the signature.",
      "asset": "native",
      "payTo": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
      "amount": "7500000",
      "scheme": "exact",
      "symbol": "XNT",
      "chainId": "x1-mainnet",
      "network": "x1",
      "decimals": 9,
      "mimeType": "application/json",
      "priceUsd": "~$0.002",
      "receiver": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
      "resource": "https://apexfaucet.xyz/api/x402/domain-check",
      "priceMinor": 7500000,
      "description": "Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.",
      "networkName": "x1",
      "validForSec": 300,
      "priceDisplay": "0.0075 XNT",
      "replayHeader": "X-PAYMENT",
      "maxAmountRequired": "7500000",
      "maxTimeoutSeconds": 300
    }
  ],
  "revenue": "Payment funds the public APEX faucet — every paid request lets a stranger claim free XNT.",
  "version": "1",
  "required": [
    {
      "name": "domain",
      "example": "coinbase-support-wallet.com",
      "description": "A domain name or a full URL."
    }
  ],
  "resource": "/api/x402/domain-check",
  "standard": "x402",
  "discovery": "/.well-known/x402",
  "facilitator": "/api/x402/verify",
  "x402Version": 1,
  "instructions": [
    "Standard x402 clients: sign the Solana USDC option (exact scheme, fee payer D93NE2kMj88BPsHfdZZ4A1HX2CGo14Y18Bdb3J4qtD5c) and send it in the PAYMENT-SIGNATURE header. We settle it and return PAYMENT-RESPONSE with the transaction.",
    "Or pay yourself on ONE network and replay the signature:",
    "— Solana USDC: send 0.002 USDC to HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ on Solana mainnet; replay with header X-PAYMENT-SOL: <tx_sig>",
    "— X1 native: send 0.0075 XNT to HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ on rpc.mainnet.x1.xyz; replay with header X-PAYMENT: <tx_sig>",
    "Every payment is verified on chain before the content is served."
  ]
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
    "scheme": "exact",
    "network": "eip155:8453",
    "mimeType": "application/json",
    "resource": "https://apexfaucet.xyz/api/x402/domain-check",
    "description": "",
    "maxAmountRequired": "2000",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
    "scheme": "exact",
    "network": "eip155:8453",
    "mimeType": "application/json",
    "resource": "https://apexfaucet.xyz/api/x402/domain-check",
    "description": "",
    "maxAmountRequired": "2000",
    "maxTimeoutSeconds": 604900
  }
]

Provenance

Seen in the source catalog

2026-10-08 06:10Z

Last indexed by Roundhouse

2026-10-11 05:46Z

Last enriched (probe, favicon, geo)

2026-09-29 08:15Z

x402 version

1

Max timeout

300s

Liveness probe

HTTP 402