Verify an agent or x402 endpoint before payment

Scan one public agent or paid API endpoint for observable identity, manifest, HTTP 402 challenge, network, asset, pricing, report-freshness, and risk signals. Returns evidence and flags, not a safety guarantee.