api.zfinia.com

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
      "amount": "160000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 60
    }
  ],
  "resource": {
    "url": "https://api.zfinia.com/x402/v1/kubernetes-manifest-audit",
    "tags": [
      "kubernetes",
      "manifest validation",
      "policy as code",
      "release gate",
      "developer tooling"
    ],
    "mimeType": "application/json",
    "description": "Audit a set of Kubernetes manifests against a contract the caller states. Reports an image with no tag or the latest tag, which changes under you; absent resource requests or limits; absent readiness or liveness probes; a missing required label; hostNetwork, hostPID, a hostPath volume or a privileged container; and a credential-shaped environment variable set to a literal, whose value is never echoed. YAML parsing surprises are reported rather than inherited.",
    "serviceName": "K8s Manifest Audit"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "contract": {
              "require_labels": [
                "app",
                "team"
              ],
              "require_probes": true,
              "require_resource_limits": true,
              "forbid_mutable_image_tags": true
            },
            "manifests": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n  name: web\n  labels:\n    app: web\nspec:\n  replicas: 3\n  selector:\n    matchLabels:\n      app: web\n  template:\n    metadata:\n      labels:\n        app: web\n    spec:\n      containers:\n        - name: web\n          image: ghcr.io/example/web:latest\n          ports:\n            - containerPort: 8080\n          resources:\n            requests:\n              cpu: 500m\n              memory: 256M\n            limits:\n              cpu: 200m\n              memory: 512Mi\n          env:\n            - name: DATABASE_PASSWORD\n              value: hunter2\n            - name: FEATURE_FLAG\n              value: no\n"
          },
          "type": "http",
          "method": "POST",
          "bodyType": "json"
        },
        "output": {
          "type": "json",
          "example": {
            "limits": {
              "maxFindings": 500,
              "maxDocuments": 100,
              "maxYamlBytes": 262144,
              "maxDockerfileBytes": 131072
            },
            "passed": false,
            "checked": {
              "probes": true,
              "required_labels": 2,
              "resource_limits": true,
              "security_context": false,
              "mutable_image_tags": true
            },
            "complete": true,
            "findings": [
              {
                "code": "SCALAR_IS_A_YAML_BOOLEAN",
                "line": 33,
                "detail": "manifests: \"no\" is an unquoted YAML 1.1 boolean and reads as false, not as the text no. Quoting it keeps it a string.",
                "location": "spec.template.spec.containers[0].env[1].value"
              },
              {
                "code": "REQUIRED_LABEL_ABSENT",
                "detail": "Deployment web does not carry the required label team.",
                "location": "Deployment web"
              },
              {
                "code": "IMAGE_TAG_IS_LATEST",
                "detail": "Deployment web container web uses the latest tag, so two pods created minutes apart can run different code.",
                "location": "Deployment web container web"
              }
            ],
            "documents": [
              {
                "kind": "Deployment",
                "name": "web",
                "containers": 1
              }
            ],
            "conformant": false,
            "request_id": "example-request",
            "service_id": "kubernetes_manifest_audit",
            "assumptions": [
              "Nothing is fetched and no cluster is contacted. The findings are about the documents supplied, so a value injected by an admission controller or a Helm template at deploy time is absent here and not a...",
              "YAML parsing surprises in the source are reported as findings rather than silently inherited, because a key read as the boolean true or a file mode read as octal changes what the cluster receives.",
              "Which checks ran is published, so a contract that switched everything off is visible rather than reading as a pass."
            ],
            "limitations": [
              "Observable facts about the manifests supplied. This is not a security assessment, a compliance determination or a judgement that a workload is production ready.",
              "conformant is true only when every document parsed and every check that ran found nothing."
            ],
            "observed_at": "2026-10-02T00:00:00.000Z",
            "not_examined": [],
            "finding_count": 6,
            "document_count": 1,
            "workload_count": 1,
            "container_count": 1,
            "service_version": "1.0.0",
            "findings_by_code": {
              "IMAGE_TAG_IS_LATEST": 1,
              "LIVENESS_PROBE_ABSENT": 1,
              "REQUIRED_LABEL_ABSENT": 1,
              "READINESS_PROBE_ABSENT": 1,
              "SCALAR_IS_A_YAML_BOOLEAN": 1,
              "CREDENTIAL_SHAPED_ENV_LITERAL": 1
            }
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "properties": {
              "body": {
                "type": "object",
                "required": [
                  "manifests"
                ],
                "properties": {
                  "contract": {
                    "type": "object",
                    "properties": {
                      "require_labels": {
                        "type": "array",
                        "items": {
                          "type": "string",
                          "maxLength": 316
                        },
                        "maxItems": 50,
                        "minItems": 1
                      },
                      "require_probes": {
                        "type": "boolean"
                      },
                      "require_resource_limits": {
                        "type": "boolean"
                      },
                      "require_security_context": {
                        "type": "boolean"
                      },
                      "forbid_mutable_image_tags": {
                        "type": "boolean"
                      }
                    },
                    "additionalProperties": false
                  },
                  "manifests": {
                    "type": "string",
                    "maxLength": 262144
                  }
                },
                "additionalProperties": false
              },
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
    "scheme": "exact",
    "network": "eip155:8453",
    "mimeType": "application/json",
    "resource": "https://api.zfinia.com/x402/v1/kubernetes-manifest-audit",
    "description": "",
    "maxAmountRequired": "160000",
    "maxTimeoutSeconds": 60
  }
]

Provenance

Seen in the source catalog

2026-10-04 08:26Z

Last indexed by Roundhouse

2026-10-07 14:46Z

Last enriched (probe, favicon, geo)

2026-10-07 16:16Z

x402 version

1

Max timeout

60s

Liveness probe

HTTP 402