sicher.halowerk.com
Decodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: HMAC with a shared secret, or RSA, RSA-PSS and ECDSA against a PEM key or a JWKS you point at, with the kid matched to the right key.
OtherLiveeip155:8453Exactvia cdp
Calls · 30d
1→ 0%
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 17 snapshots so far.
$11.49
Verified settled volume
2,661 settlements proven x402 by their on-chain EIP-3009 marker.
$0.0020
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-08-11 11:38Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5EThe wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"docs": "https://sicher.halowerk.com/llms.txt",
"name": "jwt_verify",
"error": "payment_required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"asset": "USDC",
"version": "2",
"eip712Domain": {
"name": "USD Coin",
"chainId": 8453,
"version": "2",
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"network_name": "Base Mainnet",
"assetTransferMethod": "eip3009"
},
"payTo": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E",
"amount": "2000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
}
],
"pricing": "https://sicher.halowerk.com/pricing",
"resource": {
"url": "https://sicher.halowerk.com/v1/jwt-verify",
"mimeType": "application/json",
"description": "Decodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: HMAC with a shared secret, or RSA, RSA-PSS and ECDSA against a PEM key or a JWKS you point at, with the kid matched to the right key."
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2V4YW1wbGUuaW52YWxpZC9oYWxvd2Vyay1zeW50aGV0aWMiLCJzdWIiOiJzeW50aGV0aWMtZXhhbXBsZSIsImF1ZCI6InN5bnRoZXRpYy1leGFtcGxlIiwiaWF0Ijo5NDY2ODQ4MDAsImV4cCI6OTQ2Njg4NDAwfQ.RyBcYWZR8Bd7xTj_QqASWo1SGVw16vZR2EhIG6tAjiw",
"secret": "HALOWERK-public-synthetic-example-never-use-for-authentication",
"expected_issuer": "https://example.invalid/halowerk-synthetic",
"expected_audience": "synthetic-example"
},
"type": "http",
"method": "POST",
"bodyType": "json"
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"token"
],
"properties": {
"token": {
"type": "string",
"maxLength": 20000,
"minLength": 10,
"description": "The JWT in compact form."
},
"secret": {
"type": "string",
"maxLength": 2000,
"description": "Shared secret for HS256/384/512."
},
"jwks_url": {
"type": "string",
"maxLength": 2000,
"description": "JWKS endpoint; the key is picked by kid."
},
"public_key_pem": {
"type": "string",
"maxLength": 8000,
"description": "PEM public key for RS/PS/ES algorithms."
},
"expected_issuer": {
"type": "string",
"maxLength": 500,
"description": "Issuer the token must carry."
},
"expected_audience": {
"type": "string",
"maxLength": 500,
"description": "Audience the token must name."
},
"clock_skew_seconds": {
"type": "integer",
"default": 60,
"maximum": 3600,
"minimum": 0,
"description": "Tolerance for exp and nbf."
},
"max_lifetime_seconds": {
"type": "integer",
"minimum": 1,
"description": "Flag tokens valid for longer than this."
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
}
}
}
}
},
"price_usdc": "0.002",
"description": "Decodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: HMAC with a shared secret, or RSA, RSA-PSS and ECDSA against a PEM key or a JWKS you point at, with the kid matched to the right key. On top of that it names the attacks that live in this exact spot: alg set to none, an HMAC algorithm where an asymmetric key is expected which is the classic key-confusion path, a token with no expiry at all, and an audience that does not name you. Without a key or secret the token is decoded and its claims judged, and the signature is reported as unverified rather than assumed good. The published example uses a public synthetic test key and a deliberately expired token: its signature is valid, but its claims must be rejected.",
"inputSchema": {
"type": "object",
"required": [
"token"
],
"properties": {
"token": {
"type": "string",
"maxLength": 20000,
"minLength": 10,
"description": "The JWT in compact form."
},
"secret": {
"type": "string",
"maxLength": 2000,
"description": "Shared secret for HS256/384/512."
},
"jwks_url": {
"type": "string",
"maxLength": 2000,
"description": "JWKS endpoint; the key is picked by kid."
},
"public_key_pem": {
"type": "string",
"maxLength": 8000,
"description": "PEM public key for RS/PS/ES algorithms."
},
"expected_issuer": {
"type": "string",
"maxLength": 500,
"description": "Issuer the token must carry."
},
"expected_audience": {
"type": "string",
"maxLength": 500,
"description": "Audience the token must name."
},
"clock_skew_seconds": {
"type": "integer",
"default": 60,
"maximum": 3600,
"minimum": 0,
"description": "Tolerance for exp and nbf."
},
"max_lifetime_seconds": {
"type": "integer",
"minimum": 1,
"description": "Flag tokens valid for longer than this."
}
},
"additionalProperties": false
},
"price_model": "per_call",
"x402Version": 2,
"instructions": "Sign the accepted terms with an x402 client and repeat the request with the payment header.",
"payment_header": "PAYMENT-SIGNATURE",
"capability_request": {
"url": "https://bedarf.halowerk.com/capabilities/request",
"cost": "free",
"method": "POST",
"description": "Missing a capability, or does the scope not fit? Report the need here - no payment required. Similar reports are bundled; the response returns an id you can check back on.",
"body_example": {
"max_price": 0.01,
"description": "what exactly is needed",
"requested_capability": "short label"
}
}
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.002USDC≈ $0.002 USD
on Base · exact scheme
Pay 0.002 USDC on Base to 0x2880…C4E5E. The signed payment is good for 5 minutes.
- Paid to
- 0x2880…C4E5E
- USD Coin contract
- 0x8335…02913
- Payment window
- 5 minutes
- As published
- 2000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"asset": "USDC",
"version": "2",
"eip712Domain": {
"name": "USD Coin",
"chainId": 8453,
"version": "2",
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"network_name": "Base Mainnet",
"assetTransferMethod": "eip3009"
},
"payTo": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E",
"amount": "2000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"body": {
"token": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"type": "http",
"method": "POST",
"bodyType": "json"
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"token"
],
"properties": {
"token": {
"type": "string",
"maxLength": 20000,
"minLength": 10,
"description": "The JWT in compact form."
},
"secret": {
"type": "string",
"maxLength": 2000,
"description": "Shared secret for HS256/384/512."
},
"jwks_url": {
"type": "string",
"maxLength": 2000,
"description": "JWKS endpoint; the key is picked by kid."
},
"public_key_pem": {
"type": "string",
"maxLength": 8000,
"description": "PEM public key for RS/PS/ES algorithms."
},
"expected_issuer": {
"type": "string",
"maxLength": 500,
"description": "Issuer the token must carry."
},
"expected_audience": {
"type": "string",
"maxLength": 500,
"description": "Audience the token must name."
},
"clock_skew_seconds": {
"type": "integer",
"default": 60,
"maximum": 3600,
"minimum": 0,
"description": "Tolerance for exp and nbf."
},
"max_lifetime_seconds": {
"type": "integer",
"minimum": 1,
"description": "Flag tokens valid for longer than this."
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-08-11 11:38Z
- Last indexed by Roundhouse
- 2026-09-10 11:30Z
- Last enriched (probe, favicon, geo)
- 2026-09-24 08:15Z
- x402 version
- 2
- Max timeout
- 300s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 17 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service sicher.halowerk.com and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=sicher.halowerk.com' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://sicher.halowerk.com/v1/jwt-verify, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402, or use an organization key from https://roundhouseai.io/dashboard/team. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.