# LockSmith
> Automated security checks for x402 endpoints — not a penetration test. Eight non-destructive, unpaid probes per audit; SECURE / FINDINGS / EXPOSED verdict with fix notes.

- POST https://lock-smith-production.up.railway.app/v1/audit ($0.50 USDC on Base, x402 v2): audit one endpoint URL {"endpoint_url": "..."}. Optional "mode": "compact" returns the same audit with headline pass summaries (findings keep full detail).
- GET https://lock-smith-production.up.railway.app/quote: free price quote.
- GET https://lock-smith-production.up.railway.app/.well-known/x402: service manifest.
- GET https://lock-smith-production.up.railway.app/.well-known/agent-card.json: A2A agent card (skills mirror the priced routes).
- GET https://lock-smith-production.up.railway.app/.well-known/stability-manifest.json: signed pinned-route stability manifest (prices + schema fingerprints).
- GET https://lock-smith-production.up.railway.app/.well-known/gradeability-report.json — Gradeability Self-Test Report (latest self-test: listed vs live 402 per priced route; signed, free)
- GET https://lock-smith-production.up.railway.app/.well-known/verdict-row.json — Verdict Row Fleet Discovery Bundle (signed index of all five stalls: discovery docs, stability manifests, agent cards, gradeability reports, MCP server.json, fleet tools/status and feeds; one fetch walks the whole row, free)
- GET https://lock-smith-production.up.railway.app/.well-known/a2a-agent-card.json — A2A agent card (registry-generated dialect twin of /.well-known/agent-card.json: skills mirror the priced routes at their registry prices, free)
- GET https://lock-smith-production.up.railway.app/llms-full.txt — llms-full.txt, the long-form companion to llms.txt (full route docs with worked request/response examples, pack mechanics, Recheck feed + hash-chain spec, watch/corrections policy; generated from the fleet route registry, free)
- MCP server (stdio, run it in your own MCP host): https://github.com/QuincyGB/lock-smith-mcp — manifest (server.json): https://github.com/QuincyGB/lock-smith-mcp/blob/main/server.json — tools wrap the priced route (/v1/audit)
- Inspector Quickstart Pack (curl / Python / TypeScript): https://stall-row-production.up.railway.app/quickstart/curl · https://stall-row-production.up.railway.app/quickstart/python · https://stall-row-production.up.railway.app/quickstart/typescript — one-page integration path: pin Recheck + RouteVerdict, read the feed, register a watch, fund a pack
- Verdict Row Tools Index: https://stall-row-production.up.railway.app/tools — every stall, every priced route + price, key surfaces (agent card, stability manifest, gradeability report, MCP, SDK status); machine-readable: https://stall-row-production.up.railway.app/tools.json
- Verdict Row Fleet Status: https://stall-row-production.up.railway.app/status — last-check status for every priced route in the fleet, rendered from the standing checker's own state (snapshot, timestamps on the page; JSON twin: https://stall-row-production.up.railway.app/status.json)
- Free samples: `GET https://lock-smith-production.up.railway.app/samples` — one sample response per priced route on this stall (recorded responses and schema-examples, labelled in-band: sample=true, live=false); `GET https://lock-smith-production.up.railway.app/sample/<route-slug>` for a single route
- Sandbox twins (free): `GET https://lock-smith-production.up.railway.app/sandbox` lists a free sandbox twin of every priced route on this stall — POST to https://lock-smith-production.up.railway.app/sandbox plus the priced route's path (same request schema and validation, no payment leg, deterministic fixture delivery marked sandbox=true, never a real delivery); edge-case scenarios normal / rotated_payto / drifted_schema / flagged_wallet via the X-Sandbox-Scenario header
- Verdict Row Public Changelog: https://stall-row-production.up.railway.app/changelog.atom — subscribable Atom feed of fleet route / price / stability-manifest changes (JSON twin: https://stall-row-production.up.railway.app/changelog.json)
- GET https://lock-smith-production.up.railway.app/skill.md: full agent documentation.