Preview
Inspect a registered product and its live x402 challenge without loading a wallet.
NONCUSTODIALPOLICY-CONTROLLEDEVIDENCE-FIRST
Audit before your agent pays.
Keep the power to say no.
Andromalius checks x402 payment challenges and discovery documents for recipient, amount, network, token, timeout, and metadata risks. Machine-readable reports start at $0.01 in native Base USDC.
8x402scan operations listed
2paid audit products
0known dependency vulnerabilities
Basemainnet-native settlement
01 / THE SYSTEM
Policy before payment.
Evidence after.
The model is simple: narrow what an agent may buy, make each decision inspectable, and treat every uncertain transaction as spent until independently reconciled.
Bind
Pin the exact service, origin, payee, token, amount, mode, and budget decision.
Approve
Present one bounded signature or transaction for explicit wallet confirmation.
Prove
Verify settlement, preserve signed evidence, and reconcile a hash-chained ledger.
02 / HARD BOUNDARIES
Eight checks between intent and spend.
Any drift denies the payment. The policy does not “helpfully” choose another route.
01Wallet allowlist✓
02Exact payee✓
03Base mainnet✓
04Native USDC✓
05Per-call ceiling✓
06Daily ceiling✓
07Cumulative ceiling✓
08No silent fallback✓
03 / PRODUCT STACK
Free at the edge.
Paid where control compounds.
One technical foundation supports five commercial layers—from open-source adoption to metered audits, catalog intelligence, team governance, and private deployments.
Open source
The secure client
A free CLI and MCP server that verifies every quote, holds the line on policy, and keeps wallet authority on your machine.
Read-only first · explicit approval before spend · Explore →Pay per result
Independent x402 audits
Machine-buyable challenge and discovery checks for teams shipping x402 services. No arbitrary URL fetching. No submitted artifact retention.
$0.01 challenge audit · $0.02 discovery audit · Explore →Design partner
Catalog seller-health pilot
Versioned baseline and recurring catalog diffs from a customer-side, checksum-pinned private CLI. Catalog artifacts remain in the buyer's environment.
$299 / 30 days · up to 10,000 items · no automatic renewal · Explore →Design partner
Team control plane
Short-lived signed policy bundles, entitlement controls, and sanitized usage summaries—without sending wallet keys to a central service.
Proposed pilot · $299/month · manually provisioned · Explore →Private deployment
Enterprise operations
A hardened deployment profile, evidence-backed change control, backup and recovery procedures, and a path to managed production support.
Custom scope · security review required · Explore →04 / SEE THE DECISION
A small mismatch can redirect real money.
This deterministic synthetic example expects one recipient and a $0.10 ceiling. The supplied challenge asks for $0.25 at a different address. Andromalius blocks both mismatches before the target merchant is contacted.
- 01 Supply a decoded x402 v2 challenge or payment-required header.
- 02 Add the network, asset, payee, scheme, and maximum you expect.
- 03 Receive a scored JSON report with precise blocking findings.
CHALLENGE-AUDIT / REPORT V1BLOCK
RISK SCORE30/ 100
CRITICAL
PAYEE_POLICY_MISMATCH
Pay-to differs from the caller's expected policy.
CRITICAL
AMOUNT_POLICY_EXCEEDED
250,000 atomic USDC exceeds the 100,000 maximum.
USDCBASE
SETTLED
IDEMPOTENT
HASH-CHAINED
05 / REVENUE INTEGRITY
Money lands in the wallet. Evidence lands in the ledger.
Merchant revenue settles directly to the configured Base wallet. Andromalius records a privacy-minimized, transaction-bound accounting trail—without storing payer identity or customer audit inputs.
- 01 Duplicate transaction retries never inflate totals.
- 02 Edited or partial records fail verification.
- 03 Revenue summaries open the ledger read-only.
- 04 Operators reconcile against Base and facilitator records.
06 / CURRENT STATUS
Founding beta live.
Hard limits stay visible.
COMPLETE Source, package, tests, audits, and revenue ledger
COMPLETE Hosted container qualification
COMPLETE Domain, public website, DNS, and managed TLS
COMPLETE Dedicated merchant API and Base USDC payment gate
COMPLETE Canary, backups, telemetry, and accounting alerts
COMPLETE x402scan registration and bounded paid beta
LIMITED Public sole-proprietor identity and owner-approved US-business beta policies
PENDING New York assumed-name classification and counsel review before expanding the beta
07 / STRAIGHT ANSWERS
What the system does—and what it does not.
Does Andromalius hold customer funds?
No. The buyer uses a locally controlled, explicitly allowlisted wallet. The team service receives policy and sanitized usage data—not private keys or payment authorizations.
Can an agent pay any URL?
No. The client exposes a closed registry of services pinned by policy. Origin, route, network, token, payee, price, timeout, and response shape must all match.
Where does merchant revenue go?
Independent-audit revenue settles as native USDC directly to the configured Base wallet. A transaction-idempotent, hash-chained ledger provides a separate application accounting trail.
Is the public service live?
Yes. The paid founding beta is live with $0.01 challenge audits and $0.02 discovery audits settled in native Base USDC. It is deliberately single-node and bounded by hard cumulative call and revenue ceilings, so it is not presented as highly available or million-call qualified.
ANDROMALIUS / SECURE X402 INFRASTRUCTURE
Autonomy needs boundaries.
Audit an x402 payment challenge for $0.01 or validate discovery metadata for $0.02. Both settle directly in native USDC on Base. The founding beta is single-node and capped; the interim legal policies are owner-approved for United States business users and remain subject to counsel review.
View the live x402 API ↗