An open, independently-computed trust rating for x402 payment endpoints.
Standard v1.0 · range 0–100Before an AI agent pays an unknown x402 endpoint, it needs one honest answer: is this safe to pay? ~70% of x402 endpoints are dead, invalid, or scams. The PulseFeed Trust Score is a single 0–100 number — and a canonical band — that answers it, computed independently from continuous crawling, live probing, scam/anomaly scanning, and on-chain receiver verification.
| Band | Range | Meaning |
|---|---|---|
| Verified | 85–100 + safe | Live, valid x402, clean risk scan, and an on-chain-established receiver. Safe to pay. |
| Trusted | 70–84 + safe | Live and valid with solid reputation. Safe to pay. |
| Caution | 35–69 | Works, but has caveats (thin history, medium risk flag, or unproven receiver). Review before paying. |
| Avoid | 0–34 or high-risk | Dead, invalid, or flagged high-risk (payTo hijack, bait-and-switch, honeypot). Do not pay. |
| Unknown | not indexed | Not in our index yet — no cached verdict. Use a live /trust check. |
Bands are always consistent with the pay/avoid verdict: a high raw score never shows as "Verified" if a high-risk flag forces Avoid.
| Factor | Effect | Detail |
|---|---|---|
| Live & valid x402 challenge | base 55 | Эндпоинт реально отдаёт корректный x402 402-challenge при нашей независимой пробе. |
| Uptime / reputation | up to +30 | Доля healthy в нашей истории наблюдений (или внешний 30-дн uptime). |
| Multi-source corroboration | +10 | Листится в ≥2 каталогах (Bazaar + 402index). |
| Fast response | +5 | Отвечает быстрее 1.5с. |
| On-chain established receiver | +5 | payTo реально держит/получает USDC на Base (не свежий/пустой адрес). |
| Stable receiver over time | +5 / −5 | Устойчивый payTo усиливает; volatile — снижает (наш временно́й ров). |
| Medium-risk anomaly flag | cap 55 | Ползучее удорожание, неподтверждённый получатель и т.п. — потолок вердикта caution. |
| High-risk anomaly flag | cap 25 | payTo hijack, bait-and-switch, honeypot, чужой актив → вердикт avoid, даже если жив. |
GET /verify?endpoint= | Free cached score + verdict + band |
GET /trust?endpoint= | Live score + band + security scan + on-chain receiver (paid) |
GET /trust/dataset | Band per service, in bulk (paid) |
GET /badge.svg?endpoint= | Embeddable Trust Score badge |
GET /trust-score.json | This spec, machine-readable |
https://pulsefeed.dev/trust-score
Full scoring methodology: /methodology · Live ecosystem: /status · State of x402: /reports · Machine-readable: /trust-score.json
The PulseFeed Trust Score is versioned; changes to the formula bump the version. Independent, transparent, and free to reference.