SpendPreflight changelog

https://spendpreflight.com/llms.txt

− - [Free OFAC Address Check](https://spendpreflight.com/tools/ofac-address-check/): Look up one public crypto address in a dated OFAC SDN snapshot. Exact address matching only; a non-match is not clearance. Free, one address per request. No account or payment. Limits: Exact SDN address fields only. Missing or stale data fails closed. Ownership, transaction exposure, geography and other lists are not assessed.− - [Seller Monitoring](https://spendpreflight.com/tools/seller-monitoring/): Monitor public x402 endpoint availability and best-effort daily listing-risk and confirmed index-removal observations, with opt-in email alerts. Includes a weekly passive Security Check with full fixes in private management. Basic: 9 USDC / 31 days, hourly, one endpoint. Pro: 19 USDC / 31 days, every five minutes, up to three endpoints. Manual renewal. Limits: First 10 eligible Basic registrations can receive 14 days fre− - [x402 Seller Index](https://spendpreflight.com/tools/seller-index/): Find cached public x402 endpoints by capability and compare dated unpaid availability, atomic price consistency, correct 402s and matching public Lint metadata. Top three matches free. Extended results up to12:0.01 USDC per query; no shared trial. No extra matches means no charge. Limits: Ranks only a bounded nonrandom pool of up to12 fresh cached candidates, not the whole market. Scores stay unknown when history or matching + - [ERC-8478 Payee Verification (Draft)](https://spendpreflight.com/tools/payee-binding/): Does an x402 payTo bind to the claimed ERC-8004 agent? Check the endpoint origin, registered wallet or signed delegation at one pinned registry block. 0.01 USDC per usable check; not-read is uncharged. Existing shared trial may apply. Limits: Implements the ERC-8478 Draft, which may change. Base and Robinhood Chain (4663) registry reads. Public RPC availability and history are not guaranteed. Exactly nine o+ - [Free OFAC Address Check](https://spendpreflight.com/tools/ofac-address-check/): Check up to 10 public crypto addresses free against a dated OFAC SDN snapshot. Exact address matching only; a non-match is not clearance. Free, 1–10 addresses per request. No account or payment. Limits: Exact SDN address fields only. Missing or stale data fails closed. Ownership, transaction exposure, geography and other lists are not assessed.+ - [Seller Monitoring](https://spendpreflight.com/tools/seller-monitoring/): Monitor public x402 endpoint availability and best-effort daily listing-risk and confirmed index-removal observations, with opt-in email alerts. Includes a weekly passive Security Check with full fixes in private management. Includes a weekly ERC-8478 Draft outcome re-check and change alert. Basic: 9 USDC / 31 days, hourly, one endpoint. Pro: 19 USDC / 31 days, every five minutes, up to three endpoints. Manual renewal. L+ - [x402 Seller Index](https://spendpreflight.com/tools/seller-index/): Find public x402 endpoints using cached availability, quote and Lint evidence, with a partial Base USDC wash-activity signal and disclosed ordering adjustment. Top three matches free. Extended results up to12:0.01 USDC per query; no shared trial. No extra matches means no charge. Limits: Bounded nonrandom pool of up to12 candidates. Wash-activity signal: low / elevated / unknown. Always partial, heuristic, not an accusation. + - [Three runnable examples](https://github.com/spendpreflight/examples): guarded x402 client, Claude/Cursor MCP and seller CI. Start with preflight_payment before signing.+ - [Verify a seller payment address before paying](https://spendpreflight.com/blog/verify-seller-payment-address-erc8478.html): ERC-8478 Draft announcement, free Lint line and 0.01 USDC signed observation.+ - [Reconcile a USDC wallet statement](https://spendpreflight.com/blog/reconcile-usdc-wallet-statement.html): UTC windows, complete/reconciled evidence, exact amounts and private CSV import workflow.+ - [Batch OFAC screening: Sheets, Python, Zapier](https://spendpreflight.com/blog/batch-screen-crypto-addresses-ofac.html): Bounded free 1–10-address API examples, paid Apify alternative, timestamps and non-match limits.+ ## This week’s launches+ - [Security, Quote, Seller Index, Token Safety and free OFAC checks](https://spendpreflight.com/blog/this-week-x402-tool-launches.html): Midweek October25–28 product notes, prices and limits.+ ## Tool comparisons+ - [SpendPreflight vs x402station.io](https://spendpreflight.com/blog/spendpreflight-vs-x402station.html): Compare documented endpoint-risk workflows, cached quote evidence and integration choices. Dated sources, prices and limits; no safety ranking.+ - [SpendPreflight vs x402-conformance](https://spendpreflight.com/blog/spendpreflight-vs-x402-conformance.html): Compare passive public x402 checks with controlled conformance and fault-injection testing. What each result can establish, with primary sources.+ - [SpendPreflight vs the CDP x402 validator](https://spendpreflight.com/blog/spendpreflight-vs-cdp-validator.html): Compare Coinbase discovery validation with SpendPreflight Lint, passive security coverage and spending observations. Official sources and clear limits.+ ## Our ERC-8004 payment identity+ SpendPreflight's payout wallet (0xBf4164e07552e4c1b1B1597E72C7acAA3F0a1c58) is verifiably bound to its ERC-8004 identity on Base, agent #1151628. Registered November 2, 2026 Pacific (November 3 UTC); the live self-check returned verified-wallet on 2026-11-03T13:18:52.000Z at Base block 53461275.+ Dated live observation, not continuous monitoring, reputation, delivery, safety or permission to pay.+ - [BaseScan registration](https://basescan.org/tx/0x93bb25e3d17c92a3c7e2392586c9cbbe9c3fcaa5ea826b40274ab9c33174f118)+ - [Dated live self-check](https://spendpreflight.com/tools/payee-binding/self-check-2026-11-03.json)+ The ERC-8478 draft author’s October 28, 2026 Robinhood Chain census found 5 matching payment addresses among 5,575 agents returning x402 payment requirements (fewer than 0.1%), from 20,046 registered agents. Almost all mismatches came from one legitimate shared-treasury operator. This is a dated, single-chain observation, not an ecosystem-wide rate, ranking or evidence of fraud. [Pinned census source](https://github.com/ethereum/ERCs/blob/8077443251fb6adc6c22afac6de258900d26ca8e/ERCS/erc-8478.md

• + verify_payee_binding

icon_url

— → https://spendpreflight.com/icon.svg

repository_url

— → https://github.com/spendpreflight/spendpreflight-js

version

1.2.0-metadata.7 → 1.2.0-metadata.8

description

Free x402 Lint and Seller Index top 3; paid Security Check, Quote Check and stablecoin tools. → Preflight x402 payments. Base ERC-8004 agent #1151628; wallet binding verified Nov 3, 2026.

version

1.2.0-metadata.4 → 1.2.0-metadata.7

https://spendpreflight.com/llms.txt

− > Pay-per-call risk checks for AI agents that spend money. Paid per request over x402 (USDC on Base). No account or API key.− API base: https://api.spendpreflight.com− ## Endpoints− - GET /v1/check?domain=&address=&name= — $0.01. OFAC SDN wallet-address and name screening plus domain registration age and DNS. Returns risk low|medium|high|unknown with flags.− - POST /v1/preflight — $0.02. Body: {challenge: <x402 PaymentRequired v1|v2> | cart: {merchant_domain,total_usd,pay_to,merchant_name}, rules?: {...}, context?: {spent_today_usd}}. Returns decision allow|hold|block, reasons, chosen_option, receipt.− - GET /v1/sample — free example response.− - GET /v1/rules/default — free default rule set.− - GET /health — free; shows sanctions data freshness.− ## MCP− - Remote MCP server: https://api.spendpreflight.com/mcp (tools: check_payee, preflight_payment, check_endpoint, get_service_info; 3 free calls/day, then x402)− - TypeScript client guard: npm i spendpreflight− ## Guides− - Before your agent pays: a preflight checklist for x402 — https://spendpreflight.com/blog/preflight-checklist.html (written by the service operator).− ## Notes− - Read-only: never signs, settles, or holds funds.− - Requests failing validation (HTTP 400) are not charged.− - Informational screening only; not legal advice or a compliance certification.− Contact: contact@spendpreflight.com− ## Endpoint Health Index− - Public index: https://index.spendpreflight.com/ (operated by SpendPreflight)− - Methodology: https://index.spendpreflight.com/index/methodology− - Rolling seven-day summary: https://index.spendpreflight.com/weekly− - Unpaid public GET observations only; unknown means missing or stale evidence. No third-party payments or delivery verification.− Cached endpoint lookup: GET https://api.spendpreflight.com/v1/endpoint?url= ($0.005; shared trial first). MCP tool: check_endpoint. Publicly listed URLs only; no on-demand fetch/payment. Unlisted or stale data is not charged. Free daily summary: https://api.spendpreflight.com/v1/index/summary.− Preflight index rules: max_price_multiple=5 (null disables), require_live=true (hold after 3 usable failed unpaid probes), hold_on_payto_change=true (7-day observed change or differing current quote). The index_evidence field reports unavailable/ambiguous/stale evidence; no invented liveness verdict. These rules apply to x402 challenges, not cart-only checkout.− ## Developer docs− - https://docs.spendpreflight.com/ — Live HTTP/MCP/SDK 0.2.0 guides. Scout/Seller and Python previews are labeled.− - https://docs.spendpreflight.com/llms-full.txt — complete machine-readable guides.− Signed preflight decisions: verifyReceipt in npm spendpreflight 0.2.0; trusted public keys at https://api.spendpreflight.com/.well-known/spendpreflight-keys.json. Index crawler coverage is not yet available; missing evidence is unknown.− Scout operator preview (staging only, partial observations): https://spendpreflight.com/blog/scout-preview.html− ## Payment-policy use cases− - Screen a payee before an x402 payment: https://spendpreflight.com/use-cases/screen-payee-before-x402-payment.html− - Block sanctioned wallets in AI agents: https://spendpreflight.com/use-cases/block-sanctioned-wallets-in-ai-agents.html− - Set x402 spending limits for AI agents: https://spendpreflight.com/use-cases/x402-spending-limits.html+ > SpendPreflight — trust and verification tools for stablecoin payments, built for AI agents and the people who run them.+ Operating since October 2026. Read-only tools; no custody, financial/legal/tax advice or safety guarantees.+ ## Catalog+ - [Tools JSON](https://spendpreflight.com/tools.json): machine-readable product names, prices, exact routes, MCP availability and limits.+ - [OpenAPI](https://api.spendpreflight.com/openapi.json): authoritative request schemas and payment discovery.+ - [MCP](https://api.spendpreflight.com/mcp): Streamable HTTP; paid execution requires explicit x402 authorization.+ - [Free OFAC Address Check](https://spendpreflight.com/tools/ofac-address-check/): Look up one public crypto address in a dated OFAC SDN snapshot. Exact address matching only; a non-match is not clearance. Free, one address per request. No account or payment. Limits: Exact SDN address fields only. Missing or stale data fails closed. Ownership, transaction exposure, geography and other lists are not assessed.+ - [Payee Screening](https://spendpreflight.com/tools/payee-screening/): Screen a payee wallet or name against the OFAC SDN list and check a merchant domain’s age and DNS before payment. 0.01 USDC per screen; spending-rule preflight is 0.02 USDC. Limits: A non-match is not clearance. Domain signals and possible name matches need human interpretation. No legal advice or compliance certification.+ - [Listing Guard](https://spendpreflight.com/tools/listing-guard/): Check public x402 discovery metadata with an unpaid CDP technical validation and inspect heuristic listing-risk flags and suggested rewrites. 0.05 USDC per detailed check. Limits: Heuristics can flag legitimate wording. A low score is not safety or policy certification. CDP validation does not promise Bazaar indexing or paid delivery.+ - [x402 Security Check](https://spendpreflight.com/tools/x402-security-check/): Inspect passive x402 security coverage: advertised resource binding, unpaid cache policy and explicit SDK version claims, with unknown areas disclosed. Free summary in Lint; 0.10 USDC for a full report with fixes. Weekly passive re-check included in Basic 9 / Pro 19 monitoring. Limits: Passive unpaid observation only. Paid-response caching, replay/idempotency, header parser behavior and settlement-before-delivery sta+ - [Quote Check](https://spendpreflight.com/tools/quote-check/): Compare a supplied x402 quote with the latest comparable cached public unpaid quote and disclosed observation count, without fetching the seller. 0.001 USDC per usable comparison. Missing, stale or ambiguous evidence returns unknown without charge. No trial. Limits: An informational comparison against the last observed quote, not a market price, seller identity, payment approval or loss-prevention guarantee. A suggested atomic cap d+ - [Seller Monitoring](https://spendpreflight.com/tools/seller-monitoring/): Monitor public x402 endpoint availability and best-effort daily listing-risk and confirmed index-removal observations, with opt-in email alerts. Includes a weekly passive Security Check with full fixes in private management. Basic: 9 USDC / 31 days, hourly, one endpoint. Pro: 19 USDC / 31 days, every five minutes, up to three endpoints. Manual renewal. Limits: First 10 eligible Basic registrations can receive 14 days fre+ - [Token Safety](https://spendpreflight.com/tools/token-safety/): Observe dated Base contract signals, OFAC address matches and bounded public verification facts before deciding what further review is needed. Basic: 0.02 USDC. Deep: 0.05 USDC. Limits: Assessment is incomplete. Sellability, full owner/mint/blacklist/proxy behavior, liquidity custody and locks, holders and qualified non-OFAC scam coverage remain unassessed. Never interpret this as safe-to-buy, a full audit or investment advice.+ - [Payment Receipts](https://spendpreflight.com/tools/payment-receipts/): Find a native Base USDC transfer and return payer, payee, exact amount, time, block, confirmations and OFAC flags in signed JSON with a printable page. 0.01 USDC per receipt. No free trial. Limits: A signed observation is not invoice ownership, commercial-purpose or irreversible-finality proof. Native Base USDC only. Ambiguous matches fail without charge. Informational, not tax advice.+ - [Wallet Statements](https://spendpreflight.com/tools/wallet-statements/): Export native Base USDC transfers with exact running balances, counterparties and OFAC flags as CSV or JSON for a selected past date range. 0.05 USDC per export. No free trial. Limits: Maximum 90 days, 1,000 transfers, 128 RPC calls and 25 seconds. Start is inclusive; end exclusive. Reconciliation relies on the RPC provider, not an independent completeness proof. Informational, not tax advice.+ - [x402 Lint + Action](https://spendpreflight.com/tools/x402-lint/): Inspect an unpaid public x402 challenge and heuristic listing score in the browser, API or GitHub CI. Reuse seven-day report snapshots in README badges. Free, subject to public-check quotas, robots rules and host pacing. Limits: No target payment or paid-delivery proof. An inconclusive result is not an endpoint failure. Reports expire after seven days. The Action makes one sequential free check per endpoint, at most five, with + - [Delisting Tracker](https://spendpreflight.com/tools/delisting-tracker/): Read anonymous aggregate Bazaar index-status observations and public-description wording patterns with explicit sample dates, denominators and unknowns. Free. Limits: A partial nonrandom sample is not market prevalence or ecosystem uptime. Removal needs an explicit paired active:true to active:false transition. Absence, a failed probe or unknown status is not removal; no cause is inferred.+ - [Data APIs](https://spendpreflight.com/tools/data-apis/): Use cached endpoint observations, historical FillPoint station proximity and an off-grid solar energy-balance calculator with explicit provenance and limits. Cached endpoint check: 0.005 USDC. Archived station query: 0.01 USDC. Solar estimate: 0.02 USDC. Complete dated station projection is free under ODbL. Limits: Endpoint evidence must be fresh and publicly listed; unknown is not paid delivery proof. FillPoint is a September 17, 2026 + - [x402 Seller Index](https://spendpreflight.com/tools/seller-index/): Find cached public x402 endpoints by capability and compare dated unpaid availability, atomic price consistency, correct 402s and matching public Lint metadata. Top three matches free. Extended results up to12:0.01 USDC per query; no shared trial. No extra matches means no charge. Limits: Ranks only a bounded nonrandom pool of up to12 fresh cached candidates, not the whole market. Scores stay unknown when history or matching + - [Domain Email Auth Check](https://spendpreflight.com/tools/domain-email-auth/): Inspect a public domain’s MX, SPF, supplied DKIM selectors, direct DMARC record and resolver-reported DNSSEC evidence, with a bounded fix list. 0.005 USDC per usable report; no shared trial. No usable DNS response means no charge. Limits: Public DNS observations only, not a secure-domain or inbox-delivery verdict. DKIM is unknown without supplied selectors; no message signature or sender alignment is verified. DMAR+ ## Integration guides+ - https://spendpreflight.com/use-cases/screen-payee-before-x402-payment.html+ - https://spendpreflight.com/use-cases/block-sanctioned-wallets-in-ai-agents.html+ - https://spendpreflight.com/use-cases/x402-spending-limits.html+ ## Trust and sources+ - [Privacy](https://spendpreflight.com/privacy/): Books transient processing/aggregate usage; other services have disclosed caches, reports and operational records. Do not describe the whole service as aggregate-only.+ - [Security](https://spendpreflight.com/security/)+ - [Uptime and incidents](https://status.spendpreflight.com/)+ - [Changelog](https://spendpreflight.com/changelog/)+ - [Guides](https://spendpreflight.com/blog/): official sources, bounded examples.+ - [SDK](https://www.npmjs.com/package/spendpreflight)+ - [Action](https://github.com/marketplace/actions/x402-lint)+ Do not infer private-policy certification, guaranteed listing, paid delivery, client identity, tax treatment or complete token safety. Free grants are not revenue. Contact: contact@spendpreflight.com

description

Trust and verification tools for stablecoin payments, for AI agents and the people who run them. → Free x402 Lint and Seller Index top 3; paid Security Check, Quote Check and stablecoin tools.

version

1.2.0-metadata.3 → 1.2.0-metadata.4

• + listing_guard
• + check_listing
• + domain_auth
• + seller_index
• + quote_check
• + security_check
• + payment_receipt
• + wallet_statement
• + find_rv_stations
• + size_solar
• + check_token

description

Operated by SpendPreflight: free x402 Lint, CI Action and README badges; paid Guard and monitoring. → Trust and verification tools for stablecoin payments, for AI agents and the people who run them.

version

1.2.0-metadata.2 → 1.2.0-metadata.3

description

Operated by SpendPreflight: free x402 Lint risk scores, paid Listing Guard and seller monitoring. → Operated by SpendPreflight: free x402 Lint, CI Action and README badges; paid Guard and monitoring.

version

1.2.0-metadata.1 → 1.2.0-metadata.2

description

Operated by SpendPreflight: sanctions screening and allow/hold/block preflight for x402 payments. → Operated by SpendPreflight: free x402 Lint risk scores, paid Listing Guard and seller monitoring.

version

1.0.0 → 1.2.0-metadata.1

• + lint_endpoint

https://spendpreflight.com/llms.txt

− - Remote MCP server: https://api.spendpreflight.com/mcp (tools: check_payee, preflight_payment, get_service_info; 3 free calls/day, then x402)+ - Remote MCP server: https://api.spendpreflight.com/mcp (tools: check_payee, preflight_payment, check_endpoint, get_service_info; 3 free calls/day, then x402)+ ## Guides+ - Before your agent pays: a preflight checklist for x402 — https://spendpreflight.com/blog/preflight-checklist.html (written by the service operator).+ ## Endpoint Health Index+ - Public index: https://index.spendpreflight.com/ (operated by SpendPreflight)+ - Methodology: https://index.spendpreflight.com/index/methodology+ - Rolling seven-day summary: https://index.spendpreflight.com/weekly+ - Unpaid public GET observations only; unknown means missing or stale evidence. No third-party payments or delivery verification.+ Cached endpoint lookup: GET https://api.spendpreflight.com/v1/endpoint?url= ($0.005; shared trial first). MCP tool: check_endpoint. Publicly listed URLs only; no on-demand fetch/payment. Unlisted or stale data is not charged. Free daily summary: https://api.spendpreflight.com/v1/index/summary.+ Preflight index rules: max_price_multiple=5 (null disables), require_live=true (hold after 3 usable failed unpaid probes), hold_on_payto_change=true (7-day observed change or differing current quote). The index_evidence field reports unavailable/ambiguous/stale evidence; no invented liveness verdict. These rules apply to x402 challenges, not cart-only checkout.+ ## Developer docs+ - https://docs.spendpreflight.com/ — Live HTTP/MCP/SDK 0.2.0 guides. Scout/Seller and Python previews are labeled.+ - https://docs.spendpreflight.com/llms-full.txt — complete machine-readable guides.+ Signed preflight decisions: verifyReceipt in npm spendpreflight 0.2.0; trusted public keys at https://api.spendpreflight.com/.well-known/spendpreflight-keys.json. Index crawler coverage is not yet available; missing evidence is unknown.+ Scout operator preview (staging only, partial observations): https://spendpreflight.com/blog/scout-preview.html+ ## Payment-policy use cases+ - Screen a payee before an x402 payment: https://spendpreflight.com/use-cases/screen-payee-before-x402-payment.html+ - Block sanctioned wallets in AI agents: https://spendpreflight.com/use-cases/block-sanctioned-wallets-in-ai-agents.html+ - Set x402 spending limits for AI agents: https://spendpreflight.com/use-cases/x402-spending-limits.html

• + check_endpoint