{"base_readiness_score":78,"commercial_next_step":{"billing_boundary":"Scope and deliverables are confirmed before any invoice; no wallet payload, subscription, SLA, or deployment is created by this handoff.","charged_now":false,"free_first":{"charged_now":false,"id":"free_scope","label":"Request a free scope decision","url":"https://ontarioprotocol.com/pricing?offer=free_scope&report_id=vrf_1b5a6c10a340f175#scope"},"human_required":true,"qualified_offers":[{"billing":"outcome_based_invoice_after_public_evidence","id":"catalog_publish","name":"Founding Agent Catalog Publish Pilot","price_interval":null,"price_usd":49,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=catalog_publish&report_id=vrf_1b5a6c10a340f175#scope","status":"first_10_qualified_providers"},{"billing":"one_time_invoice_after_scope","id":"launch_review","name":"MCP + x402 Agent Catalog Launch Pack","price_interval":null,"price_usd":199,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=launch_review&report_id=vrf_1b5a6c10a340f175#scope","status":"qualified_fixed_scope"},{"billing":"one_time_invoice_after_scope","id":"buyer_intent_rewrite","name":"x402 Buyer Intent Metadata Rewrite","price_interval":null,"price_usd":49,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=buyer_intent_rewrite&report_id=vrf_1b5a6c10a340f175#scope","status":"qualified_fixed_scope"},{"billing":"one_time_invoice_after_scope","id":"firewall_implementation","name":"Payment Firewall Implementation","price_interval":null,"price_usd":499,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=firewall_implementation&report_id=vrf_1b5a6c10a340f175#scope","status":"qualified_fixed_scope"},{"billing":"pilot_invoice_after_qualification","id":"readiness_watch","name":"Readiness Watch pilot","price_interval":"month","price_usd":99,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=readiness_watch&report_id=vrf_1b5a6c10a340f175#scope","status":"pilot_interest"}],"recommended_offer":{"billing":"one_time_invoice_after_scope","id":"launch_review","name":"MCP + x402 Agent Catalog Launch Pack","price_interval":null,"price_usd":199,"scope_request_url":"https://ontarioprotocol.com/pricing?offer=launch_review&report_id=vrf_1b5a6c10a340f175#scope","status":"qualified_fixed_scope"},"required_inputs":["contact_email","endpoint","requested_offer"],"schema":"ontario.report_commercial_next_step.v1","status":"scope_first","trust_boundary":"This commercial handoff is not part of the signed readiness evidence. It does not guarantee safety, traffic, ranking, listing acceptance, revenue, or future endpoint behavior."},"duration_ms":532,"evidence":{"homepage":{"reachable":true,"schema_org_present":false,"status_code":200},"openapi":{"body":{"info":{"description":"Smart contract risk triage via x402 Payment Protocol. $0.10/scan. Not an audit.","title":"HexScan API","version":"1.0.0"},"openapi":"3.1.0","paths":{"/health":{"get":{"responses":{"200":{"description":"OK"}},"summary":"Health check"}},"/scan":{"get":{"responses":{"402":{"description":"Payment required"}},"summary":"Get payment challenge (402)"},"post":{"description":"Returns composite risk score, honeypot detection, tax analysis, source verification, heuristic findings.","requestBody":{"content":{"application/json":{"schema":{"properties":{"address":{"type":"string"},"chain":{"type":"string"}},"type":"object"}}}},"responses":{"200":{"description":"Risk analysis result"},"402":{"description":"Payment required (x402)"}},"summary":"Scan a contract for risk"}}},"servers":[{"url":"https://hexscan.xyz"}]},"reachable":true,"url":"https://hexscan.xyz/openapi.json","valid_json":true,"version":"3.1.0","well_formed":true},"robots":{"excerpt":"User-agent: *\nAllow: /\nDisallow: /scan\n","reachable":true,"status_code":200},"target":{"challenge":{"accepts":[{"amount":"100000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra_keys":["name","version"],"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x841Ef35b7b7ee4C820BFF040369a8Ade4741b45d","scheme":"exact"}],"accepts_count":1,"accepts_missing_required_fields":[],"body_accepts_count":0,"body_accepts_missing":true,"body_valid_json":true,"header_accepts_count":1,"missing_accepts":false,"resource":{"description":"Smart contract risk triage - honeypot detection, tax analysis, source verification. Not an audit.","mimeType":"application/json","url":"https://hexscan.xyz/scan"},"resource_missing_required_fields":[],"source":"payment-required-header","x402Version":2},"method":"GET","payment_challenge":true,"payment_headers":{"payment-required":"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"},"reachable":true,"status_code":402},"x402_manifest":{"bazaar_metadata":false,"body":{"accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","category":"security","description":"Scan a smart contract for risk signals - honeypot, tax, source verification, heuristics","endpoint":"https://hexscan.xyz/scan","id":"hexscan-scan","method":"POST","name":"Contract Risk Scan","network":"eip155:8453","network_id":"eip155:8453","price_atomic":"100000","price_usdc":"0.10","tags":["security","defi","risk","honeypot","contract"],"x402_version":2}],"accepts_payment":true,"bazaar":{"input":{"body":{"address":"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","chain":"ethereum"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"riskLevel":"MINIMAL","riskScore":5,"tokenName":"USD Coin"},"type":"json"}},"contact":"glm-5.2@basecradle.com","default_asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","default_network":"eip155:8453","description":"Smart contract risk triage - honeypot detection, tax analysis, source verification, heuristic findings. Not an audit.","facilitator":"https://api.cdp.coinbase.com/platform/v2/x402","homepage":"https://hexscan.xyz","name":"HexScan","pay_to":"0x841Ef35b7b7ee4C820BFF040369a8Ade4741b45d","payment_protocols":["x402"],"resources":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","category":"security","description":"Scan a smart contract for risk signals - honeypot, tax, source verification, heuristics","endpoint":"https://hexscan.xyz/scan","id":"hexscan-scan","method":"POST","name":"Contract Risk Scan","network":"eip155:8453","price_atomic":"100000","price_usdc":"0.10","tags":["security","defi","risk","honeypot","contract"],"x402_version":2}]},"reachable":true,"service_count":0,"status_code":200,"valid_json":true,"well_formed":false}},"grade":"close","integrity":{"algorithm":"Ed25519","canonical_sha256":"a73ab12d7a682ce29f751175f9ed44971f4a0e2cc177336aadd9326bd3390a21","canonicalization":"json-sort-keys-no-integrity-v1","key_id":"ed25519:67e5239d2bfa367d","public_key":"t3nUNaV3/SIMUb0XIBCazNFdToM3hHEQHReQ71v40wU=","signature":"NTAbPVH9vyoBRpnkhJpOJsSukcSll6+loBtI1uLQDO9ZPVxToJcNXYDvJiwx7OKXZL7nKqKYM7EZyIlIuuCkCg==","signed_by":"ontario-protocol"},"max_score":100,"normalized_base":"https://hexscan.xyz","readiness_score":70,"recommendations":[{"detail":"The manifest should be JSON and include a services array with endpoint, method, price, network, and asset metadata.","docs_url":"https://ontarioprotocol.com/.well-known/x402.json","id":"x402_malformed","title":"Fix the x402 manifest shape"},{"detail":"Name, description, category, tags, owner URL, and contact fields make services usable in agent marketplaces.","docs_url":"https://ontarioprotocol.com/listings","id":"bazaar_metadata_missing","title":"Add listing metadata for Bazaar-style catalogs"}],"report_id":"vrf_1b5a6c10a340f175","report_url":"https://ontarioprotocol.com/verify/report/vrf_1b5a6c10a340f175","signals":{"accepts_entries":true,"bazaar_metadata":false,"endpoint_reachable":true,"facilitator_metadata":false,"homepage_reachable":true,"https":true,"manifest_fresh":false,"network_consistent":true,"openapi_schema":true,"payment_challenge":true,"price_format_valid":true,"robots_present":true,"schema_org_present":false,"x402_manifest_present":true,"x402_manifest_well_formed":false},"status":"ok","submitted_url":"https://hexscan.xyz/scan","target_url":"https://hexscan.xyz/scan","verified_at":"2026-07-24T05:02:10.023850+00:00","verifier":"ontario.x402-readiness.v1","warning_penalty":8,"warnings":[{"detail":"Expose facilitator details plus asset, payTo, scheme, timeout, and resource fields so clients can verify and settle payments deterministically.","docs_url":"https://ontarioprotocol.com/docs#facilitator","evidence":{"issues":["manifest.facilitator or service.facilitator is missing"]},"id":"facilitator_metadata_gap","severity":"warning","title":"Publish facilitator and settlement metadata"},{"detail":"A stale or missing manifest timestamp makes agents doubt whether prices, networks, and facilitator metadata still describe the live endpoint.","docs_url":"https://ontarioprotocol.com/.well-known/x402.json","evidence":{"issue":"manifest has no generated_at, updated_at, last_updated, or dateModified timestamp"},"id":"manifest_stale","severity":"warning","title":"Refresh the x402 manifest timestamp"}]}