---
title: "Verify an agent or x402 endpoint before payment"
method: POST
path: "/api/x402/agent-trust-scan"
tags: ["x402-verification", "agent-trust", "payment-preflight"]
---

# Verify an agent or x402 endpoint before payment

`POST /api/x402/agent-trust-scan`

Scan one public agent or paid API endpoint for observable identity, manifest, HTTP 402 challenge, network, asset, pricing, report-freshness, and risk signals. Returns evidence and flags, not a safety guarantee.

## Request body

- object
  - `agent_id` string
  - `target_url` string, required — Domain, agent card URL, or any URL inside the agent's surface area.

## Response `200`

Paid; structured trust report

- TrustReport
  - `payment` object
  - `report` object
    - `agent_id` string
    - `endpoint` string
    - `evidence` object
    - `issues` string[]
    - `scanner` string
    - `signals` object
    - `trust_score` integer

## Other responses

- `402` — Payment required

---

[API](https://skmtc.net/ontarioprotocol/apis/ontario-protocol-x402-api.md) · [All operations](https://skmtc.net/ontarioprotocol/apis/ontario-protocol-x402-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ontarioprotocol/ontario-protocol-x402-api/revisions/54384a1c4bf3/schema)