
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@agentgate-builder/x402fix
Advanced tools
x402 endpoint doctor for sellers and agent builders: point it at any paid x402 URL and get a graded list of what will break payments or Bazaar / x402scan listing (402 on GET/HEAD/POST, CORS, v2 header + v1 body, CAIP-2, USDC asset + EIP-712 domain, Solana
Point x402fix at any paid x402 URL and it tells you, in order of severity, what will break payments or keep the route out of the Bazaar / x402scan, and how to fix each problem. It probes the route without paying: GET, HEAD, an empty POST, POST {} and a CORS preflight. Then it grades the route A to F.
Access-Control-Expose-Headers: PAYMENT-REQUIRED; cacheable 402s; redirects; auth walls; latency.resource.url; CAIP-2 networks; amount given as a string of atomic units; canonical USDC asset; the EIP-712 domain (extra.name and extra.version) for each chain; payTo format; Solana extra.feePayer; maxTimeoutSeconds.maxAmountRequired; network names; whether v1 and v2 terms agree.extensions.bazaar info and schema. It validates info against schema (JSON Schema 2020-12), flags external $ref and old drafts, and checks method and input/output consistency.validate verdict and Bazaar index status, payee checks (EVM contract vs wallet, whether the Solana USDC token account exists, CounterpartyCheck screening), drift between /openapi.json and /.well-known/x402, a generated, self-validated extensions.bazaar block, and a multichain accepts snippet for Hono, Express or Next.Live API: https://api.youraitools.co/x402fix (origin: https://x402fix.agentgate.workers.dev)
| Route | Price (USDC) | Returns |
|---|---|---|
GET /v1/preview?url= | free, 10/min | grade, score, status, counts, detected versions and networks |
| `GET | POST /v1/lite?url=` | $0.005 |
| `GET | POST /v1/check?url=&framework=hono` | $0.02 |
| `GET | POST /v1/site?url=https://origin` | $0.05 |
Payment: x402 v2 or v1, exact USDC on Base, Polygon, Arbitrum One or Solana. Prepaid credits (Authorization: Bearer) are also accepted, via https://api.youraitools.co/credits.
https://api.youraitools.co/x402fix/mcp (tool check_x402_endpoint, free preview)npx -y @agentgate-builder/x402fix. Set X402FIX_X402_PRIVATE_KEY to a Base wallet key holding a little USDC, and it pays for check reports ($0.02 each).docker build -t x402fix-mcp . && docker run -i --rm x402fix-mcpcurl -s "https://api.youraitools.co/x402fix/v1/preview?url=https://your.api/v1/paid" | jq -e '.status != "broken"'
Develop: npm test; npm start (Node, port 8795); npx wrangler deploy. MIT.
FAQs
x402 endpoint doctor for sellers and agent builders: point it at any paid x402 URL and get a graded list of what will break payments or Bazaar / x402scan listing (402 on GET/HEAD/POST, CORS, v2 header + v1 body, CAIP-2, USDC asset + EIP-712 domain, Solana
We found that @agentgate-builder/x402fix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.