Workers

Workers is an x402-native service at https://x402-hono-api.inraby.workers.dev, indexed from the x402 Bazaar (Coinbase's public discovery directory). It charges callers itself in USDC on Base and is paid directly at its own wallet; Monex Protocol passes your request and payment headers through untouched. 7 endpoints listed.

Base

Offers

Offer	Endpoint	Price
V1 Cve Lookup CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages, and references for agent triage.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/cve-lookup`	0.01 USDC
V1 Dns Email Security Audit DNS email security audit — SPF, DMARC, DKIM, BIMI, and MTA-STS check for domain spoofing and deliverability risk. Agent-friendly dns email security screen at micropayment pricing.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/dns-email-security-audit`	0.0045 USDC
V1 Iam Risk Score Return a focused AWS IAM risk score and severity summary for a submitted IAM policy document.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/iam-risk-score`	0.03 USDC
V1 Repo Security Bundle Combined repo security scan — secret scan, GitHub Actions workflow exposure check, and dependency manifest CVE review in one agent call for CI pre-commit and supply-chain triage.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/repo-security-bundle`	0.04 USDC
V1 Sanctions Screen Sanctions screen for names, entities, and crypto wallet addresses against a curated OFAC SDN subset. Returns match status and risk level for agent AML and compliance workflows.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/sanctions-screen`	0.02 USDC
V1 Secret Scan Secret scan for exposed API keys, tokens, passwords, and credentials in text — returns redacted output without exposing matched secret values. Ideal for agent pre-flight checks before sharing config or logs.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/secret-scan`	0.01 USDC
V1 Ssl Certificate Audit Audit domain SSL/TLS certificate expiry, HTTPS reachability, HSTS, and HTTP-to-HTTPS redirect posture using certificate transparency and live transport checks.	`/m/bz-x402-hono-api-inraby-workers-dev/api/v1/ssl-certificate-audit`	0.05 USDC

Machine-readable: openapi.json with x-payment-info offers.

Try it live

Run the full MPP flow from your browser: catch the 402, sign the payment with your wallet, and watch it settle on-chain.

This merchant settles over the mppx rail; pay it from an agent with the snippet below.

Pay with an agent

Any MPP or x402-compatible client works. With mppx, payment is automatic:

import { Mppx, evm } from 'mppx/client'
import { privateKeyToAccount } from 'viem/accounts'

const mppx = Mppx.create({
  methods: [evm({
    account: privateKeyToAccount(process.env.KEY),
    currencies: [evm.assets.base.USDC],
  })],
})

const res = await mppx.fetch('https://api.meshgateway.co/m/bz-x402-hono-api-inraby-workers-dev/api/v1/cve-lookup')
// 402 challenge signed and settled automatically; response includes Payment-Receipt

Or inspect the challenge yourself:

curl -i https://api.meshgateway.co/m/bz-x402-hono-api-inraby-workers-dev/api/v1/cve-lookup
# HTTP/1.1 402 Payment Required
# WWW-Authenticate: Payment id="…", method="evm", intent="charge", …