CanaryGuard 402 | Prompt-Injection Firewall & Honeypot Scrubber for AI Agents

https://canaryguard-402.onrender.com/v1/sanitize

● healthy utility

Deterministic prompt-injection firewall and honeypot scrubber for autonomous AI agents. 0.003 USDC per call on Base via x402.

Paid verification

How it works

No sponsored paid call yet.

Pay this endpoint once from your own wallet (Base USDC, up to $1.00) and we call it and record what came back. Your wallet pays the listed recipient directly; Agent Tools never holds funds. Sponsored checks prove delivery; they do not count as demand.

Quality grade

How grading works

A 72.6 / 100

Availability 20.0 / 20

Endpoint responded (HTTP 402)

Payability 15.0 / 15

✓ Answers a real HTTP 402 challenge
✓ Publishes a /.well-known/x402 descriptor
✓ Payment address on record
✓ Settlement network declared
✓ Price declared

Demand 14.2 / 35

27 distinct payers, 477 USDC transfers in the last 30 days; the wallet is shared by 3 listings, so each is credited 1/3

Performance 9.6 / 10

Last probe answered in 268 ms (full marks at 200 ms or less)

Readiness 13.7 / 15

Agent readiness 92/100

Owner verified 0.0 / 5

Nobody has claimed this listing yet

Endpoint last checked 19 h ago. On-chain activity last read 3 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass. This grade sets search order and leaderboards; the readiness score below is shown for reference only.

x402 readiness

A · 92/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here A, 72.6/100), which weighs availability, payability and on-chain demand. How the two differ

Valid payment requirements	10/10	Payment requirements carry a payee, a mainnet network and a price.
Live 402 challenge	25/25	Paid endpoint answers with an HTTP 402 challenge (268 ms).
x402 version	n/a	x402 version not observed yet.
Signed descriptor	n/a	No x402 standard defines a signed descriptor.
Uptime (30 days)	13.59/15	29/32 probes succeeded over 30 days (91%).
Resource declaration	10/10	Declares 28 paid resource(s).
Verified identity	5/10	Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Freshness + modern flags	5/5	seen in a source within 7 days; declares x402.
Security declaration	n/a	Payment is the access control for an x402 resource.

Applicable criteria total 75 points, scaled to 100.

Responsiveness: Responsive (268 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).

Payment evidence: x402_challenge — We sent a request and got a live HTTP 402 challenge. Also: x402_manifest, bazaar_feed, catalog_listing. Qualifies the payment claim; adds no points.

Measured 2026-11-11.

Nine criteria, the same as the A2A readiness score, read from our daily probe of the paid endpoint, its payment requirements and 30-day probe history. Signed descriptor and security declaration are n/a for x402 (payment is the access control), as is an x402 version we have not observed; the remaining points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. It also feeds 15 points of the x402 quality grade.

Compared with peers

Against 10,082 reachable x402 APIs in our daily snapshot (2026-11-12 06:46 UTC). Display only; it does not change search order.

Readiness: Higher than 91% of peers; This listing 92 · peer median 78
Latency: Faster than 39% of peers; This listing 268 ms · peer median 205 ms

Where it loses the most points, and how to win them back

Verified identity −5 — Claim the listing and prove control of its domain.
Now: Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Uptime (30 days) −1.4 — Stay reachable in our daily probes.
Now: 29/32 probes succeeded over 30 days (91%).

How many agent tools actually work · All statistics

Paid endpoints

28 resource(s) advertised by this origin. Each price below is that resource's own x402 price; the headline price is the range across them.

POST https://canaryguard-402.onrender.com/v1/sanitize

Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion.

POST https://canaryguard-402.onrender.com/v1/base/token

Audits Base ERC-20 token contracts for honeypot risks, buy/sell transfer taxes, liquidity depth, and prompt injection traps in token metadata.

POST https://canaryguard-402.onrender.com/v1/security/wallet-drainer-check

Audits EVM wallet and counterparty addresses on Base for Permit2 drainer exposure, approval phishing history, and OFAC sanctions flags.

POST https://canaryguard-402.onrender.com/v1/security/mcp-tool-poisoning-audit

Inspects Model Context Protocol (MCP) tool definitions, descriptions, and JSON schemas for hidden prompt overrides, shadowing attacks, and exfiltration sinks.

POST https://canaryguard-402.onrender.com/v1/security/agent-memory-guard

Scans RAG context chunks, vector DB retrievals, and persistent agent memory payloads for delayed sleeper-agent instructions and cross-session poisoning.

POST https://canaryguard-402.onrender.com/v1/security/phishing-url-inspector

Audits target URLs, API endpoints, and Web3 dApp domains for IDN homograph spoofing, Angel/Pink/Inferno drainer scripts, and hidden DOM prompt injections.

POST https://canaryguard-402.onrender.com/v1/security/smart-contract-honeypot-check

Audits Base smart contracts for hidden transfer locks, owner blacklist modifiers, unverified proxy upgrades, and malicious fee-on-transfer hooks.

POST https://canaryguard-402.onrender.com/v1/security/eip712-signature-auditor

Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to prevent unauthorized token approvals and replay attacks.

POST https://canaryguard-402.onrender.com/v1/alpha/safe-base-trending

Returns top Base Mainnet tokens by 24h DEX volume and liquidity velocity that pass CanaryGuard zero-honeypot and prompt-injection safety gates.

POST https://canaryguard-402.onrender.com/v1/alpha/polymarket-verified-odds

Delivers CanaryGuard-sanitized Polymarket CLOB implied probabilities, bid-ask spread depth, and smart-money orderbook skew across high-volume markets.

POST https://canaryguard-402.onrender.com/v1/risk/full_audit

Enterprise 360-degree security audit bundle combining Base bytecode/proxy inspection, DEX liquidity rug-risk analysis, OFAC/Lazarus sanctions screening, EIP-712 permit verification, and deterministic prompt-injection firewalling.

POST https://canaryguard-402.onrender.com/v1/verify/agent-attestation

Generates a cryptographic attestation report verifying an autonomous AI agent wallet, x402 EIP-3009 payment capability, counterparty reputation score, and zero-drainer history on Base.

POST https://canaryguard-402.onrender.com/v1/ondemand/market-snapshot

On-demand institutional market intelligence snapshot combining Base DEX spot & TWAP prices, Aerodrome/Uniswap V3 liquidity depth, perpetual funding rates, and Polymarket whale orderbook divergence.

POST https://canaryguard-402.onrender.com/v1/tokens/history-and-spread

Returns multi-timeframe Base token price history (1h, 24h, 7d, 30d OHLCV summary), Chainlink vs. Uniswap V3/Aerodrome bid-ask spread in bps, and realized volatility skew.

POST https://canaryguard-402.onrender.com/v1/yield/safe-allocation

Computes an institutional risk-adjusted DeFi capital allocation matrix across multi-audited Base and Arbitrum liquidity vaults (Morpho Blue, Aave V3, Moonwell, Aerodrome) with smart-contract timelock and depeg stress scores.

POST https://canaryguard-402.onrender.com/v1/wallet-analysis

Comprehensive EVM wallet security profile on Base, analyzing transaction velocity, approval exposure, drainer interaction risk, and smart-account state.

POST https://canaryguard-402.onrender.com/v1/contract-info

Inspects Base EVM smart contract bytecode size, EIP-1967/UUPS proxy implementation slots, EIP-7702 delegation designators, and verified function selectors.

POST https://canaryguard-402.onrender.com/v1/wallet-sanctions-check

Screens EVM and Solana wallet addresses against OFAC SDN sanctions lists, Lazarus Group attributions, and known DeFi exploit/drainer blacklists.

POST https://canaryguard-402.onrender.com/v1/uniswap-pool-state

Audits Uniswap V3/V4 and Aerodrome liquidity pools on Base, returning tick liquidity depth, fee tier, price impact bps, and LP concentration rug-risk scores.

POST https://canaryguard-402.onrender.com/v1/crypto-price-onchain

Returns tamper-resistant on-chain USD spot prices, 24h volatility, and Chainlink/TWAP oracle deviation metrics for major Base and EVM assets.

POST https://canaryguard-402.onrender.com/v1/json-repair-and-sanitize

Deterministically repairs malformed or truncated LLM JSON payloads (missing quotes, trailing commas, markdown fences) while scrubbing embedded prompt-injection payloads.

POST https://canaryguard-402.onrender.com/v1/url-agent-readiness

Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps.

POST https://canaryguard-402.onrender.com/v1/tx-status-base

Decodes Base Mainnet transaction receipts, EIP-3009 transferWithAuthorization settlements, ERC-20 transfer logs, gas fees, and finality confirmations.

POST https://canaryguard-402.onrender.com/v1/polymarket-odds-pulse

Delivers sanitized Polymarket CLOB implied probabilities, bid-ask spreads, and 24-hour smart-money volume movers across crypto, macro, and geopolitics.

POST https://canaryguard-402.onrender.com/v1/defi-yields-safe

Curates top risk-adjusted USDC, EURC, and WETH DeFi yield pools on Base (Morpho, Aave V3, Aerodrome, Moonwell), pre-screened for TVL depth and audit status.

POST https://canaryguard-402.onrender.com/v1/llm-token-pricing

Calculates exact input, cached-input, and output token costs across frontier LLMs (OpenAI, Anthropic, Gemini, DeepSeek, Meta) and recommends optimal model routing.

POST https://canaryguard-402.onrender.com/v1/eip712-signature-audit

Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains.

POST https://canaryguard-402.onrender.com/v1/mcp-tool-auditor

Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors.

How to call

cURL · x402-fetch / x402-axios will auto-handle 402

curl -sS -i -X POST https://canaryguard-402.onrender.com/v1/sanitize  # expect HTTP 402 Payment Required (about $0.003/call)

/.well-known/x402.json

https://canaryguard-402.onrender.com/.well-known/x402

Listed in

Directories this entry was found in.

cdp-bazaar since 2026-10-11 x402scan since 2026-10-13