Plan Blast Radius

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
      "amount": "250000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 60
    }
  ],
  "resource": {
    "url": "https://api.zfinia.com/x402/v1/terraform-plan-blast-radius",
    "tags": [
      "terraform",
      "infrastructure as code",
      "deployment safety",
      "change review",
      "developer tooling"
    ],
    "mimeType": "application/json",
    "description": "Read a Terraform plan and report what applying it destroys. Names each resource to be destroyed or replaced, and for a replacement the attribute the plan says forced it, which is what a caller changes to avoid it. Separates a destroy of a resource type that holds data, where re-applying does not bring it back, from a destroy of something stateless. The type patterns treated as holding data are published in the response and the caller can add to them.",
    "serviceName": "Plan Blast Radius"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "plan": "{\n \"format_version\": \"1.2\",\n \"terraform_version\": \"1.9.5\",\n \"resource_changes\": [\n  {\n   \"address\": \"aws_db_instance.primary\",\n   \"type\": \"aws_db_instance\",\n   \"change\": {\n    \"actions\": [\n     \"delete\",\n     \"create\"\n    ],\n    \"replace_paths\": [\n     [\n      \"engine_version\"\n     ]\n    ],\n    \"before\": {\n     \"engine_version\": \"14.7\",\n     \"tags\": {\n      \"owner\": \"platform\"\n     }\n    },\n    \"after\": {\n     \"engine_version\": \"15.4\",\n     \"tags\": {\n      \"owner\": \"platform\"\n     }\n    }\n   }\n  },\n  {\n   \"address\": \"aws_s3_bucket.exports\",\n   \"type\": \"aws_s3_bucket\",\n   \"change\": {\n    \"actions\": [\n     \"delete\"\n    ],\n    \"before\": {\n     \"bucket\": \"exports\",\n     \"tags\": {\n      \"owner\": \"data\"\n     }\n    },\n    \"after\": null\n   }\n  },\n  {\n   \"address\": \"aws_lambda_function.worker\",\n   \"type\": \"aws_lambda_function\",\n   \"change\": {\n    \"actions\": [\n     \"update\"\n    ],\n    \"before\": {\n     \"timeout\": 30\n    },\n    \"after\": {\n     \"timeout\": 60,\n     \"runtime\": \"nodejs20.x\"\n    },\n    \"after_unknown\": {\n     \"version\": true\n    }\n   }\n  },\n  {\n   \"address\": \"aws_instance.bastion\",\n   \"type\": \"aws_instance\",\n   \"change\": {\n    \"actions\": [\n     \"create\"\n    ],\n    \"before\": null,\n    \"after\": {\n     \"instance_type\": \"m5.24xlarge\"\n    }\n   }\n  },\n  {\n   \"address\": \"aws_cloudwatch_log_group.app\",\n   \"type\": \"aws_cloudwatch_log_group\",\n   \"change\": {\n    \"actions\": [\n     \"no-op\"\n    ],\n    \"before\": {},\n    \"after\": {}\n   }\n  }\n ],\n \"resource_drift\": [\n  {\n   \"address\": \"aws_security_group.web\",\n   \"type\": \"aws_security_group\",\n   \"change\": {\n    \"actions\": [\n     \"update\"\n    ],\n    \"before\": {\n     \"description\": \"web\",\n     \"ingress_count\": 2\n    },\n    \"after\": {\n     \"description\": \"web (edited in console)\",\n     \"ingress_count\": 5\n    }\n   }\n  }\n ]\n}"
          },
          "type": "http",
          "method": "POST",
          "bodyType": "json"
        },
        "output": {
          "type": "json",
          "example": {
            "limits": {
              "maxEnvBytes": 131072,
              "maxFindings": 500,
              "maxPlanBytes": 4194304,
              "maxResources": 5000,
              "maxStatements": 500,
              "maxPolicyBytes": 262144
            },
            "passed": false,
            "complete": false,
            "findings": [
              {
                "code": "STATEFUL_RESOURCE_REPLACED",
                "type": "aws_db_instance",
                "action": "replace",
                "detail": "aws_db_instance.primary will be destroyed and recreated. The plan says the replacement is forced by engine_version. aws_db_instance holds data, so a replacement is a data loss rather than a restart",
                "address": "aws_db_instance.primary"
              },
              {
                "code": "STATEFUL_RESOURCE_DESTROYED",
                "type": "aws_s3_bucket",
                "action": "destroy",
                "detail": "aws_s3_bucket.exports will be destroyed. aws_s3_bucket holds data that this plan does not recreate, so the destruction is not reversible by re-applying.",
                "address": "aws_s3_bucket.exports"
              }
            ],
            "resources": [
              {
                "type": "aws_db_instance",
                "action": "replace",
                "address": "aws_db_instance.primary",
                "stateful": true,
                "forced_by": [
                  "engine_version"
                ]
              },
              {
                "type": "aws_s3_bucket",
                "action": "destroy",
                "address": "aws_s3_bucket.exports",
                "stateful": true,
                "forced_by": []
              },
              {
                "type": "aws_lambda_function",
                "action": "update",
                "address": "aws_lambda_function.worker",
                "stateful": false,
                "forced_by": []
              }
            ],
            "request_id": "example-request",
            "reversible": false,
            "service_id": "terraform_plan_blast_radius",
            "assumptions": [
              "The input is a plan already rendered to JSON by terraform show -json. Nothing is fetched, no state is read and no credential is accepted, so the document supplied is the whole input.",
              "A replacement is reported with the attribute the plan says forced it, because that attribute is what a caller changes to avoid the replacement, and the plan records it separately from the action.",
              "The resource type patterns treated as holding data are published in the response rather than left as an unstated judgement, and the caller can add to them."
            ],
            "limitations": [
              "The plan document supplied. Whether the change is intended, and whether a destroyed resource is backed up elsewhere, are outside this.",
              "reversible is true only when every change was examined and none of them destroys or replaces anything. It is not a judgement that the plan is correct."
            ],
            "observed_at": "2026-10-02T00:00:00.000Z",
            "not_examined": [
              "VALUES_KNOWN_ONLY_AFTER_APPLY: aws_lambda_function.worker has attributes whose values are not known until apply, so what this update produces is not fully determined by the plan."
            ],
            "finding_count": 2,
            "examined_count": 5,
            "format_version": "1.2",
            "service_version": "1.0.0",
            "counts_by_action": {
              "read": 0,
              "no-op": 1,
              "create": 1,
              "update": 1,
              "destroy": 1,
              "replace": 1,
              "unknown": 0
            },
            "findings_by_code": {
              "STATEFUL_RESOURCE_REPLACED": 1,
              "STATEFUL_RESOURCE_DESTROYED": 1
            },
            "destructive_count": 2,
            "terraform_version": "1.9.5",
            "resource_change_count": 5,
            "stateful_type_patterns": [
              "db_instance",
              "db_cluster",
              "rds_cluster"
            ],
            "stateful_destructive_count": 2
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "properties": {
              "body": {
                "type": "object",
                "required": [
                  "plan"
                ],
                "properties": {
                  "plan": {
                    "type": "string",
                    "maxLength": 4194304
                  },
                  "stateful_type_patterns": {
                    "type": "array",
                    "items": {
                      "type": "string",
                      "maxLength": 128
                    },
                    "maxItems": 200,
                    "minItems": 1
                  }
                },
                "additionalProperties": false
              },
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
    "amount": "250000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 60
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "body": {
          "plan": "{\n \"format_version\": \"1.2\",\n \"terraform_version\": \"1.9.5\",\n \"resource_changes\": [\n  {\n   \"address\": \"aws_db_instance.primary\",\n   \"type\": \"aws_db_instance\",\n   \"change\": {\n    \"actions\": [\n     \"delete\",\n     \"create\"\n    ],\n    \"replace_paths\": [\n     [\n      \"engine_version\"\n     ]\n    ],\n    \"before\": {\n     \"engine_version\": \"14.7\",\n     \"tags\": {\n      \"owner\": \"platform\"\n     }\n    },\n    \"after\": {\n     \"engine_version\": \"15.4\",\n     \"tags\": {\n      \"owner\": \"platform\"\n     }\n    }\n   }\n  },\n  {\n   \"address\": \"aws_s3_bucket.exports\",\n   \"type\": \"aws_s3_bucket\",\n   \"change\": {\n    \"actions\": [\n     \"delete\"\n    ],\n    \"before\": {\n     \"bucket\": \"exports\",\n     \"tags\": {\n      \"owner\": \"data\"\n     }\n    },\n    \"after\": null\n   }\n  },\n  {\n   \"address\": \"aws_lambda_function.worker\",\n   \"type\": \"aws_lambda_function\",\n   \"change\": {\n    \"actions\": [\n     \"update\"\n    ],\n    \"before\": {\n     \"timeout\": 30\n    },\n    \"after\": {\n     \"timeout\": 60,\n     \"runtime\": \"nodejs20.x\"\n    },\n    \"after_unknown\": {\n     \"version\": true\n    }\n   }\n  },\n  {\n   \"address\": \"aws_instance.bastion\",\n   \"type\": \"aws_instance\",\n   \"change\": {\n    \"actions\": [\n     \"create\"\n    ],\n    \"before\": null,\n    \"after\": {\n     \"instance_type\": \"m5.24xlarge\"\n    }\n   }\n  },\n  {\n   \"address\": \"aws_cloudwatch_log_group.app\",\n   \"type\": \"aws_cloudwatch_log_group\",\n   \"change\": {\n    \"actions\": [\n     \"no-op\"\n    ],\n    \"before\": {},\n    \"after\": {}\n   }\n  }\n ],\n \"resource_drift\": [\n  {\n   \"address\": \"aws_security_group.web\",\n   \"type\": \"aws_security_group\",\n   \"change\": {\n    \"actions\": [\n     \"update\"\n    ],\n    \"before\": {\n     \"description\": \"web\",\n     \"ingress_count\": 2\n    },\n    \"after\": {\n     \"description\": \"web (edited in console)\",\n     \"ingress_count\": 5\n    }\n   }\n  }\n ]\n}"
        },
        "type": "http",
        "method": "POST",
        "bodyType": "json"
      },
      "output": {
        "type": "json",
        "example": {
          "limits": {
            "maxEnvBytes": 131072,
            "maxFindings": 500,
            "maxPlanBytes": 4194304,
            "maxResources": 5000,
            "maxStatements": 500,
            "maxPolicyBytes": 262144
          },
          "passed": false,
          "complete": false,
          "findings": [
            {
              "code": "STATEFUL_RESOURCE_REPLACED",
              "type": "aws_db_instance",
              "action": "replace",
              "detail": "aws_db_instance.primary will be destroyed and recreated. The plan says the replacement is forced by engine_version. aws_db_instance holds data, so a replacement is a data loss rather than a restart",
              "address": "aws_db_instance.primary"
            },
            {
              "code": "STATEFUL_RESOURCE_DESTROYED",
              "type": "aws_s3_bucket",
              "action": "destroy",
              "detail": "aws_s3_bucket.exports will be destroyed. aws_s3_bucket holds data that this plan does not recreate, so the destruction is not reversible by re-applying.",
              "address": "aws_s3_bucket.exports"
            }
          ],
          "resources": [
            {
              "type": "aws_db_instance",
              "action": "replace",
              "address": "aws_db_instance.primary",
              "stateful": true,
              "forced_by": [
                "engine_version"
              ]
            },
            {
              "type": "aws_s3_bucket",
              "action": "destroy",
              "address": "aws_s3_bucket.exports",
              "stateful": true,
              "forced_by": []
            },
            {
              "type": "aws_lambda_function",
              "action": "update",
              "address": "aws_lambda_function.worker",
              "stateful": false,
              "forced_by": []
            }
          ],
          "request_id": "example-request",
          "reversible": false,
          "service_id": "terraform_plan_blast_radius",
          "assumptions": [
            "The input is a plan already rendered to JSON by terraform show -json. Nothing is fetched, no state is read and no credential is accepted, so the document supplied is the whole input.",
            "A replacement is reported with the attribute the plan says forced it, because that attribute is what a caller changes to avoid the replacement, and the plan records it separately from the action.",
            "The resource type patterns treated as holding data are published in the response rather than left as an unstated judgement, and the caller can add to them."
          ],
          "limitations": [
            "The plan document supplied. Whether the change is intended, and whether a destroyed resource is backed up elsewhere, are outside this.",
            "reversible is true only when every change was examined and none of them destroys or replaces anything. It is not a judgement that the plan is correct."
          ],
          "observed_at": "2026-10-02T00:00:00.000Z",
          "not_examined": [
            "VALUES_KNOWN_ONLY_AFTER_APPLY: aws_lambda_function.worker has attributes whose values are not known until apply, so what this update produces is not fully determined by the plan."
          ],
          "finding_count": 2,
          "examined_count": 5,
          "format_version": "1.2",
          "service_version": "1.0.0",
          "counts_by_action": {
            "read": 0,
            "no-op": 1,
            "create": 1,
            "update": 1,
            "destroy": 1,
            "replace": 1,
            "unknown": 0
          },
          "findings_by_code": {
            "STATEFUL_RESOURCE_REPLACED": 1,
            "STATEFUL_RESOURCE_DESTROYED": 1
          },
          "destructive_count": 2,
          "terraform_version": "1.9.5",
          "resource_change_count": 5,
          "stateful_type_patterns": [
            "db_instance",
            "db_cluster",
            "rds_cluster"
          ],
          "stateful_destructive_count": 2
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "bodyType",
            "body"
          ],
          "properties": {
            "body": {
              "type": "object",
              "required": [
                "plan"
              ],
              "properties": {
                "plan": {
                  "type": "string",
                  "maxLength": 4194304
                },
                "stateful_type_patterns": {
                  "type": "array",
                  "items": {
                    "type": "string",
                    "maxLength": 128
                  },
                  "maxItems": 200,
                  "minItems": 1
                }
              },
              "additionalProperties": false
            },
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "POST"
              ],
              "type": "string"
            },
            "bodyType": {
              "enum": [
                "json",
                "form-data",
                "text"
              ],
              "type": "string"
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog

2026-10-04 08:28Z

Last indexed by Roundhouse

2026-10-05 00:20Z

Last enriched (probe, favicon, geo)

2026-10-05 02:45Z

x402 version

2

Max timeout

60s

Liveness probe

HTTP 402