TrustAgent

The filtered ERC-8004 directory: which registered agents are actually alive, and which accept x402. Roughly 15% of registrations on Base have both a compliant registration file and a declared service — this returns those, rather than making you screen sixty thousand addresses one at a time to find them. 100 agents per page.

Is this x402 endpoint safe to pay? Reads the endpoint's own payment challenge under BOTH protocol versions — v1 body and v2 PAYMENT-REQUIRED header, so a live v2-only service is not reported as dead — extracts the payout wallet it advertises, and screens that wallet: OFAC sanctions, sybil-filtered ERC-8004 reputation, on-chain behaviour. Flags an endpoint that names different recipients under the two versions. Scores the wallet, not the service behind it, and says so.

Where did this address get its money? Walks the funding chain upward and returns the account that ultimately paid for the wallet, plus a cluster id. Two addresses funded from the same account are not independent parties, however new and unremarkable each looks alone — the strongest cheap signal there is that an identity was manufactured. Works on any address, not only registered agents.

What is this agent's reputation actually worth? 92.6% of ERC-8004 feedback on Base is coordinated. This clusters reviewers by funding provenance and caps each cluster at one effective vote, returns every record with its evidence class and flag reasons, and refuses to average ratings that use incompatible scales.

Which live agents can do X? Searches what ERC-8004 agents DECLARE about themselves — skills, domains, name — across the registrations this service fetches on a rolling sweep, and returns only the ones actually answering. Each row carries the service endpoint to call and the wallet a payment would go to. Roughly 8% of registrations on Base are live at all; the alternative is fetching sixty thousand files yourself.

Screen up to 10 addresses in one call: OFAC sanctions check, trust score, risk band and recommendation for each. For vetting a counterparty set before a run of payments, maintaining an allowlist, or auditing wallets you already pay.

Should you approve this contract? Everything in quick, plus static analysis of the bytecode: privileged functions (mint, pause, blacklist, arbitrary withdrawal), proxy and upgradeability detection, dangerous opcodes, DeFi protocol classification and source-verification status.

Is this counterparty safe to pay? Screens the address against the OFAC sanctions list, reads its ERC-8004 reputation with coordinated feedback filtered out, and returns an explainable 0-100 trust score with a proceed / hold / block recommendation. Reports insufficient_data rather than guessing when the evidence is not there.