fetchgate.dev x402 offerings

x402 Services & Facilitator Registry — 2026-10-04 edition: The x402 market, measured, refreshed for October: every resource in Coinbase's x402 Bazaar discovery index (27,681 paid endpoints, up 87% in five weeks) with the index's own 30-day counters (settled calls, unique payers, last call), one read-only probe per URL (live 402 or not, version, live price), an EIP-712 signing-domain check on every USDC-on-Base option, per-resource revenue proxy, payTo addresses, networks, schemes and prices — plus a month-over-month changes file (new and vanished domains, biggest gainers and losers), 21 facilitators with live /supported results and the curated 118-service table. JSONL + JSON + schema + README. Market sizing, competitor research, facilitator choice, pricing and listing validation from one file.

Prompt-Injection & Tool-Hijack Test Corpus: 156 structured, labeled adversarial test cases across seven categories (direct injection, indirect injection, tool hijacking, data exfiltration, system-prompt leaks, jailbreak/roleplay, encoding obfuscation) for evaluating whether an agent or LLM app resists prompt injection and tool-misuse attacks. Ships with a JSON Schema, a dependency-light Python evaluation harness, and a guide covering taxonomy, scoring, limitations, and responsible use.

MCP Server Registry Snapshot — 2026-08-22 edition: A curated, machine-readable snapshot of 400 production/community Model Context Protocol (MCP) servers as of 2026-08-22: category, transport, auth requirements, repo/package URLs, source-directory cross-references, and verification dates for every entry. Saves an agent or builder shopping for MCP tooling the work of crawling and reconciling multiple MCP directories (official registry, Smithery, Glama, PulseMCP, mcp.so) itself.

Agent Eval Harness Templates: A ready-to-use starter kit for evaluating an agent or LLM application fast: a JSON-Schema test-case format, 40 example cases across four suites (task completion, tool selection, refusal/safety, regression), a pointwise LLM-as-judge scorer with documented bias mitigations, and a dependency-light Python CLI runner that produces a scored JSON report plus a human-readable summary. Grounded in current agent-eval practice; bring-your-own-model via a one-file adapter interface.

Prompt-Injection Defenses Playbook & Detection Ruleset: The defense counterpart to our attack corpus: a layered playbook for hardening an agent/LLM app against prompt injection, tool hijacking, data exfiltration, system-prompt leaks, jailbreaks, and encoding obfuscation. Includes a 6-layer defense taxonomy mapped to attack categories, 119 machine-readable detection rules (85 base + 34 extended, each with honest false-positive notes), and a stdlib-only Python detector with two profiles (strict for tool arguments and output, content for web pages and documents), decode-and-rescan for obfuscated instructions, and hidden-HTML-text scanning. Measured: held-out recall 53% strict / 38% content on the 156-case corpus; 0.35% false positives on 1,714 unseen top-site homepages (the base rules as written flag 69%). Full method and limits in MEASUREMENTS.md. Grounded in OWASP LLM/MCP guidance.

x402 Quickstart Kit — 2026-08-23 edition: A dependency-minimal reference implementation of the x402 HTTP micropayment protocol ("exact" scheme, EIP-3009, EVM/USDC): seller-side payment middleware for Cloudflare Workers/Hono and plain Node/Express, generalized from a live production x402 seller, plus buyer-side client code in TypeScript (viem) and Python (eth_account/web3.py) that signs a real EIP-3009 payment authorization and retries a 402 automatically. Includes a practical guide covering facilitator selection, common integration pitfalls, and a go-live checklist.

MCP Live Tool Inventory — 2026-08-28 edition: Every remote server in the official MCP registry (15,329 URLs) probed read-only via initialize → tools/list, and everything the 8,235 live ones returned: 140,284 tool names, titles, full descriptions, input-schema keys and annotations; 5,462 server-level instructions strings verbatim; per-server reachability, protocol version and outcome; and 24k+ tool-poisoning audit flags with snippets. JSONL + summary.json + schema. The real-world base rate for allow-listing servers, name-collision checks, and building or testing tool-description detectors against live text instead of synthetic samples.

The Agent Web, Measured — 2026 Q3 edition: A 25-page analyst report on the machine-facing web, built entirely from first-hand measurement: all 15,329 remote MCP registry URLs probed (54% answer, 45.5% outside two template fleets; 140,284 tool descriptions scored — the textbook tool-poisoning payload appears zero times, 47 hosts carry concealment directives, all 51 quoted verbatim), all 14,820 x402 Bazaar endpoints probed and the index's own counters summed into the first published revenue ceiling for the CDP-facilitated x402 market (~$314/day), all 21 facilitators probed, and a 60-crawler census from a live storefront. 22 charts, 10 tables, twelve conclusions, every number generated from the underlying datasets. PDF + README + licence. Single-organisation licence; includes the +30/+60/+90-day re-probe summaries and the 2026 Q4 edition.

Fetch a URL server-side and return structured metadata.

Base token risk check before a swap: send a token contract address, get ok / caution / avoid with reasons. Reads the contract (ERC-20 metadata, owner, upgradeable proxy, mint / pause / blacklist / fee selectors in bytecode) and its DEX liquidity (Uniswap + Aerodrome pools, read on-chain). Deterministic, no LLM.

Should an agent pay this x402 endpoint? One live probe of its payment challenge plus its settled-call and unique-payer history, price consistency and domain reputation, returned as ok / caution / avoid with reasons. Use before paying an unfamiliar x402 endpoint.

Search x402 paid APIs that are live and actually bought: only endpoints that answered a real x402 challenge and had repeat, multi-payer settled demand in the last 30 days. Use to find a working paid API for a task without wading through dead and farmed listings.

Prompt-injection scan: fetch a URL (or POST text) and check it against 120 detection rules for injection, tool hijacking, data exfiltration and hidden instructions, including text hidden in HTML comments and attributes. Use before letting an agent act on untrusted web content.

Fetch a URL server-side and return clean Markdown.