pkgproof
x402.pkgproof.net · 1 paid endpoint · listed 2026-10-27
Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names. Answers safe, caution, block or does_not_exist; every reason is sourced and labelled fact or heuristic.
Paid endpoints
| Method | Endpoint | Price | Networks |
|---|---|---|---|
| POST | x402.pkgproof.net/v1/verify Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and reposito | $0.05 | Base |
Latest checks
| When | Endpoint | HTTP | ms | Result |
|---|---|---|---|---|
| 2 days ago | x402.pkgproof.net/v1/verify | 200 | 311 | HTTP 200 instead of 402 |
Income on Base (7 days)
| Day | Transfers | USDC | |
|---|---|---|---|
| No USDC received on Base in the last 7 days (or the payout address is on another network). | |||
Is this your API?
<a href="https://logicnodes.io/observatory/p/x402.pkgproof.net"><img src="https://logicnodes.io/observatory/badge/x402.pkgproof.net.svg" alt="x402 status"></a>
Claim it for free with
x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/x402.pkgproof.net