{"url":"https://mach402.dev","verdict":"fail","trusted":false,"indexed":false,"auto_promoted":false,"quarantined":true,"advertised_key":"UGIZ0yVMpsAQBS1sLPq782GBjL5HnJZdI7SVrOQ3Xo4=","checks":[{"id":"llm_verdict","ok":null,"detail":"not consulted; well-known copy and capability descriptions are self-claims"},{"id":"url_public","ok":true,"detail":""},{"id":"well_known_schema","ok":true,"detail":""},{"id":"advertised_key","ok":true,"detail":""},{"id":"well_known_signed","ok":false,"detail":"unsigned well-known is allowed; gossip will not relay observations"},{"id":"manifest_schema","ok":false,"detail":"'ZGX8x3acJu0XDkcU58cT0FfgYU2p1lPOeTRCc7mW/zAIMC2l5E//rqwBs1gHHAjDvd9qfvRBQyOVR2k1NHJbAA==' is not of type 'object'"},{"id":"manifest_signed","ok":false,"detail":"signature is a string, not an object (spec §7.3.1): publish {\"algorithm\": \"ed25519\", \"public_key\": \"<base64>\", \"value\": \"<base64>\"}, with the base64 Ed25519 signature in value"},{"id":"manifest_fresh","ok":true,"detail":""},{"id":"invoke_same_origin","ok":true,"detail":""},{"id":"sandbox_probe","ok":true,"detail":"402 payment door: x402:eip155:8453"},{"id":"sandbox_receipt_signed","ok":null,"detail":"priced capability — nothing was bought, so there is no receipt"},{"id":"sandbox_price_matches","ok":true,"detail":""},{"id":"sandbox_analysis","ok":true,"detail":""},{"id":"sandbox_judge","ok":true,"detail":"Standard x402 v2 payment challenge: 402 status, USDC on Base, valid accepts array, bazaar extension. No exploit/SSRF execution — just protocol handshake."}],"sandbox":{"attempted":true,"endpoint":"https://mach402.dev/url/extract","capability_id":"url_extract","product_id":"","source_hub":"","direct_endpoint":true,"http_status":402,"bytes":2,"payment_challenge":{"price_usd":0.005,"recipient":"0x14B21d80bf5776437dD4f1043BDAf31e60B366AD","rails":["x402:eip155:8453"]},"evidence_kind":"payment_challenge","attempts":[{"capability_id":"url_extract","kind":"direct","endpoint":"https://mach402.dev/url/extract","http_status":402,"bytes":2,"ok":true,"detail":"priced capability — nothing was bought, so there is no receipt"}],"candidates_free":0,"candidates_tried":1,"probe_kind":"direct","evidence":{"capability_id":"","product_id":"","price_per_call_usd":0.005,"output_schema":{},"http_status":402,"bytes":2,"receipt_signed":false,"evidence_kind":"payment_challenge","payment_challenge":{"price_usd":0.005,"recipient":"0x14B21d80bf5776437dD4f1043BDAf31e60B366AD","rails":["x402:eip155:8453"]},"result":{"x402":{"x402Version":2,"error":"Payment required","resource":{"url":"https://mach402.dev/url/extract","description":"Extract readable content from any URL as clean Markdown. Strips navigation, ads, footers. Returns title, author, date, word count. 15-min cache per URL. Use when an agent needs webpage content as text.","mimeType":"application/json","serviceName":"Machina URL to Markdown","tags":["scraping","markdown","content"]},"accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"5000","payTo":"0x14B21d80bf5776437dD4f1043BDAf31e60B366AD","maxTimeoutSeconds":300,"extra":{"name":"USD Coin","version":"2"}}],"extensions":{"bazaar":{"info":{"input":{"type":"http","method":"POST","bodyType":"json","body":{"url":"https://example.com"}},"output":{"type":"json","example":{"title":"Article Title","markdown":"# Title\n\nContent...","word_count":1847}}},"schema":{"$schema":"http://json-schema.org/draft-07/schema#","type":"object","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"type":{"const":"http"},"method":{"const":"POST"},"bodyType":{"const":"json"},"body":{"type":"object","properties":{"url":{"type":"string","description":"URL to extract content from"}},"required":["url"],"additionalProperties":false}}},"output":{"type":"object","required":["type"],"properties":{"type":{"const":"json"},"example":{"type":"object"}}}}}}}}}}},"note":"Sandbox evidence only. Names and descriptions were not scored. Auto-admit needs a judge token (MiniMax via OpenRouter): the model may veto the live result; it cannot mint a pass from marketing copy. Without a token, a pass is a scorecard — an operator must Approve.","ran_at":"2026-10-29T18:09:57Z"}