We caught our own wallets buying from us — so we built a trust check for x402 services
说明与用途
agent.connskill.com 发现其自身钱包在购买服务,掩盖了自我交易。通过命名钱包、从收入报告中排除它们并发布信任检查端点,真实的付款者比例和自我交易比例现在变得透明。
问题
An x402 rating site flagged the service’s own wallets as customers, revealing self‑dealing that was hidden from external auditors.
结果
The trust‑check endpoint exposes self‑dealing, allowing rating sites and agents to accurately assess payer mix. Revenue reports now reflect true external revenue, improving transparency.
工作流
- 1. Create a wallets.json file listing all operator addresses.
- 2. Update revenue reports to split payments into own, dust, and external, and exclude own payments from external revenue metrics.
- 3. Implement a trust‑check endpoint that fetches a service’s discovery documents, probes a paid endpoint, parses the 402 challenge, reads Base USDC transfers, counts payers, and returns a self‑dealing share.
- 4. Publish the endpoint and OpenAPI spec for external use.
证据
Every endpoint has an end‑to‑end test that runs through the real payment path: an agent with its own wallet buys the product, and we compare the delivered file with what the provider charged us.
If a crawler can spot self‑dealing from the outside, so can an agent deciding which service to trust.
- 记录日期: 2026-09-08T07:45:21.983Z