Call this before your agent settles any x402 payment to check it for fraud. TollWarden answers 'is this payment safe to send?' and 'is this 402 offer safe to pay?' — catching payments to attacker-controlled addresses injected into content the agent just read (prompt-injection-triggered payments), r…
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"tollwarden-tollwarden","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Not distributed through a package registry we index.
| when | check | result | http | latency | detail |
|---|---|---|---|---|---|
| 5 h ago | a2a card | ok | 200 | 192 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 12 h ago | a2a card | ok | 200 | 191 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 19 h ago | a2a card | ok | 200 | 211 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 26 h ago | a2a card | ok | 200 | 177 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 33 h ago | a2a card | ok | 200 | 193 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 2 d ago | a2a card | ok | 200 | 617 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 2 d ago | a2a card | ok | 200 | 485 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 2 d ago | a2a card | ok | 200 | 186 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 2 d ago | a2a card | ok | 200 | 203 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
| 3 d ago | a2a card | ok | 200 | 563 ms | protocol 0.3.0 · card: TollWarden · 3 skills |
Attributed to the source that supplied each field. Treated as claims, not facts.
Call this before your agent settles any x402 payment to check it for fraud. TollWarden answers 'is this payment safe to send?' and 'is this 402 offer safe to pay?' — catching payments to attacker-controlled addresses injected into content the agent just read (prompt-injection-triggered payments), replayed authorizations, overpayment vs the quote, secrets leaking through payment metadata, fake/lookalike USDC contracts, and address poisoning. Returns allow/flag/block with machine-readable reasons and an Ed25519-signed verdict a wallet can enforce. Non-custodial: never holds keys or funds; wraps whatever wallet/facilitator the agent already uses.
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.