Agent

TollWarden

base|id 59586|owner 0x81be42dd3fa09208ddb368749715712ec26d44d7

Checks 1–7

Payment security firewall for x402 micropayments. Call TollWarden before settling any x402 payment to catch prompt-injection-triggered payments (attacker addresses planted in content the agent just read), replayed authorizations, overpayment, secrets leaking through payment metadata, fake/lookalike USDC contracts, and address poisoning. Returns allow/flag/block with machine-readable reasons and an Ed25519-signed, payment-bound verdict a wallet can enforce. Advisory and non-custodial — never touches keys or funds. Includes a shared counterparty reputation registry and a commitment-bound delivery-outcome ledger.

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded
Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.
  1. Registered?rung 1 · registered

    pass

    The agent exists in the on-chain registry, with an owner and a document URL.

    passed

    block_number
    52281733
    chain_id
    8453
    token_id
    59586

    checked at 2026-10-07T15:58:10.594662Z

  2. Reachable?rung 2 · resolvable

    pass

    The document URL it declared actually answers when fetched.

    passed

    elapsed_ms
    954
    http_status
    200
    scheme
    https

    checked at 2026-10-07T15:58:10.594662Z

  3. Readable?rung 3 · parseable

    pass

    What came back is valid JSON that a machine can read.

    passed

    body_bytes
    1458
    body_sha256
    e90930a5fe242929c22b20c440469ae1a9e6c4f5634616fea2a88db45dba4a54
    content_type
    application/json; charset=utf-8

    checked at 2026-10-07T15:58:10.594662Z

  4. Follows the spec?rung 4 · conformant

    pass

    The document meets what ERC-8004 requires of it.

    passed

    both_fields_present
    false
    legacy_endpoints_field
    false
    may_gaps
    (empty)
    must_violations
    (empty)
    registrations_checked
    1
    services_field_source
    services
    services_status
    present
    should_gaps
    services[].version
    spec_commit
    68fc6765761a10fb26f0692df21c8a6f9d12b1be

    checked at 2026-10-07T15:58:10.594662Z

  5. Claims its identity?rung 5 · bound

    pass

    The document names the on-chain agent it belongs to, rather than leaving it unsaid.

    passed

    declared_agent_id
    59586
    declared_chain
    8453
    declared_registry
    eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432
    match
    true
    registrations_seen
    1

    checked at 2026-10-07T15:58:10.594662Z

  6. Answers?rung 6 · live

    pass

    A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.

    passed

    endpoints
    {"declared":"https://tollwarden.com","elapsed_ms":1158,"final_url":"https://tollwarden.com/","http_status":200,"index":0… (1,364 chars — expand){"declared":"https://tollwarden.com","elapsed_ms":1158,"final_url":"https://tollwarden.com/","http_status":200,"index":0,"kind":"https","name":"web","outcome":"live","probed":true,"probed_url":"https://tollwarden.com"}, {"declared":"https://tollwarden.com/.well-known/x402","elapsed_ms":1105,"final_url":"https://tollwarden.com/.well-known/x402","http_status":200,"index":1,"kind":"https","name":"x402","outcome":"live","probed":true,"probed_url":"https://tollwarden.com/.well-known/x402"}, {"declared":"https://tollwarden.com/.well-known/agent-card.json","elapsed_ms":502,"final_url":"https://tollwarden.com/.well-known/agent-card.json","http_status":200,"index":2,"kind":"https","name":"A2A","outcome":"live","probed":true,"probed_url":"https://tollwarden.com/.well-known/agent-card.json"}, {"declared":"https://tollwarden.com/openapi.json","elapsed_ms":796,"final_url":"https://tollwarden.com/openapi.json","http_status":200,"index":3,"kind":"https","name":"OpenAPI","outcome":"live","probed":true,"probed_url":"https://tollwarden.com/openapi.json"}, {"declared":"https://registry.modelcontextprotocol.io/v0/servers?search=com.tollwarden/tollwarden","elapsed_ms":10449,"error":"timeout","index":4,"kind":"https","name":"MCP","outcome":"our_error","probed":true,"probed_url":"https://registry.modelcontextprotocol.io/v0/servers?search=com.tollwarden/tollwarden"}
    endpoints_answered_not_live
    0
    endpoints_declared
    5
    endpoints_live
    4
    endpoints_our_error
    1
    endpoints_payment_gated
    0
    endpoints_probeable
    5
    endpoints_probed
    5
    endpoints_refused
    0

    checked at 2026-10-07T19:37:51.488079Z

  7. Has feedback?rung 7 · attested

    pass

    At least one on-chain feedback entry names this agent.

    passed

    distinct_authors
    1
    feedback_count
    1

    checked at 2026-10-07T15:58:10.594662Z

Check it again, now

outside the census
Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.
Sends one request to the agent’s own server. Rate limited.

On-chain snapshot

base
token id
59586
owner
0x81be42dd3fa09208ddb368749715712ec26d44d7
block
52,281,733
observed
2026-10-07T15:58:10.598402Z
tokenURIopen →
https://paysafe-agent.com/.well-known/erc8004.json

What the fetch saw

https
scheme
https
http status
200
content type
application/json; charset=utf-8
size
1,458 bytes
sha256
e90930a5fe242929c22b20c440469ae1a9e6c4f5634616fea2a88db45dba4a54
elapsed
954 ms

This run

reproducible
Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.
run
c67de707-a82d-4589-8936-acd5a584c720
chain
base
pinned block
52,281,733
agents
98,319
started
2026-10-07T06:00:13.662398Z
finished
2026-10-07T19:18:37.899751Z
checker
0.7.0 · 10238dd9af44dfa032e6578390569a413a6bb393
spec commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
Reproduce
cargo run -p sweeper -- base   # at block 52281733

What each check measures →

TollWarden · base — AgentCount