# QuietProof x402 API QuietProof sells deterministic, read-only audits over HTTP 402 using USDC on Base. - Network: eip155:8453 - Payout address: 0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A - OpenAPI: /openapi.json - Pricing: /pricing.json - Health: /health - Report schema: QPReport/1 - Payment: x402 exact scheme on Base USDC - Inputs: public or synthetic artifacts only - Uploaded code is parsed, not executed - No API keys, accounts or subscriptions ## OAS-01 — OpenAPI structure and reference audit POST /v1/oas/structure Price: $0.15 Validate OpenAPI 3.x structure, operations, responses, duplicate operationIds and local $refs. ## OAS-03 — OpenAPI example conformance audit POST /v1/oas/examples Price: $0.25 Validate inline OpenAPI request and response examples against their declared JSON Schemas. ## APID-01 — OpenAPI breaking-change audit POST /v1/oas/breaking Price: $0.50 Compare two OpenAPI documents for removed operations, parameters and responses. ## JSON-02 — JSON Schema instance validation POST /v1/json/schema-validate Price: $0.15 Validate one JSON instance against one JSON Schema and return machine-readable errors. ## JSON-03 — JSON request Schema compatibility diff POST /v1/json/schema-request-diff Price: $0.40 Detect request-breaking changes between two JSON Schemas. ## GQL-02 — GraphQL SDL breaking-change audit POST /v1/graphql/breaking Price: $0.40 Compare two GraphQL SDL documents for removed types, fields, enum values and changed field types. ## PB-02 — Protocol Buffers wire compatibility audit POST /v1/protobuf/wire-diff Price: $0.50 Compare message field numbers, types and cardinality in two .proto sources. ## CI-01 — GitHub Actions safety audit POST /v1/ci/github-actions Price: $0.40 Inspect workflow permissions, pull_request_target, action pinning and shell-expression injection. ## K8S-01 — Kubernetes workload security audit POST /v1/k8s/workload-security Price: $0.25 Check pod and container privilege, root user, capabilities, image pinning and resources. ## SCA-02 — OSV vulnerability lookup POST /v1/supply-chain/osv Price: $0.50 Query the current OSV database for package versions supplied directly, in CycloneDX or npm lockfiles. ## SCA-03 — CycloneDX or SPDX SBOM quality audit POST /v1/supply-chain/sbom Price: $0.50 Validate SBOM format, component identity, versions, licenses and duplicate component records. ## CSV-02 — CSV data-contract audit POST /v1/csv/contract Price: $0.15 Check row width, duplicate headers and contract-defined required, type and enum rules. ## CSV-05 — CSV formula-injection scan POST /v1/csv/formula-injection Price: $0.10 Find cells that begin with spreadsheet formula or control prefixes without modifying the file. ## SEO-01 — robots.txt structural audit GET /v1/seo/robots Price: $0.10 Fetch one public origin's robots.txt and report groups, rules, sitemap declarations and syntax issues. ## SEO-02 — Sitemap structure audit GET /v1/seo/sitemap Price: $0.15 Fetch one sitemap and report type, loc count, duplicates, invalid URLs, limits and lastmod syntax. ## SD-04 — Schema.org Product and Offer audit GET /v1/schema-org/product Price: $0.20 Extract JSON-LD from one public page and check Product and Offer required fields. ## A11Y-05 — Static ARIA and duplicate-ID audit GET /v1/html/aria-static Price: $0.20 Check one public page for unknown roles, unknown ARIA attributes, duplicate IDs and hidden interactive elements. ## HDR-01 — Content-Security-Policy audit GET /v1/http/csp Price: $0.10 Fetch one public response and inspect CSP presence, required directives, unsafe tokens and wildcards. ## LNK-01 — Single-page broken-link audit GET /v1/links/broken Price: $0.50 Extract up to 20 links from one public page and report unreachable, error and redirecting targets. ## SHOP-01 — Merchant product-feed basic audit POST /v1/shop/feed-basic Price: $0.30 Check required product fields, ID uniqueness, URLs, availability and price syntax in JSON or CSV. ## X402-01 — x402 payment challenge audit GET /v1/x402/challenge Price: $0.10 Inspect one public x402 endpoint's unpaid 402 response, payment options, networks, amounts and payees. ## DOCKER-01 — Dockerfile security and reproducibility audit POST /v1/container/dockerfile-security Price: $0.30 Review Dockerfile instructions for root execution, unpinned images, embedded secrets, unsafe downloads and cache hygiene. ## TF-01 — Terraform security configuration audit POST /v1/iac/terraform-security Price: $0.50 Inspect Terraform HCL for public exposure, broad ingress, wildcard IAM, hardcoded secrets and disabled audit controls. ## SQL-01 — SQL migration risk audit POST /v1/sql/migration-risk Price: $0.35 Review SQL migration statements for destructive DDL, unbounded DML, locking index changes and unsafe column alterations. ## LLMS-01 — llms.txt structure audit POST /v1/llms/structure Price: $0.15 Check llms.txt title structure, section headings, absolute resource links, labels, anchors and duplicate targets. ## MCP-01 — MCP server configuration audit POST /v1/mcp/config-audit Price: $0.25 Inspect MCP client configuration for missing transports, unpinned package runners, insecure HTTP and literal credentials. ## SEC-01 — Environment secret exposure scan POST /v1/secrets/env-scan Price: $0.20 Scan .env-style text for literal secret-like variables, credential-bearing database URLs and known token patterns. ## LIC-01 — Package license metadata audit POST /v1/license/package-metadata Price: $0.15 Review package metadata for missing, deprecated or non-SPDX license declarations and absent license files. ## GHMETA-01 — GitHub repository metadata audit POST /v1/github/repository-metadata Price: $0.20 Inspect exported GitHub repository metadata for archived state, missing discovery fields, security settings and admin permissions.