What you agree
to by paying.

No registration, no API key, no KYC, no email. We do not know who you are and do not try to find out. The address that signs a payment is the only identity in the system, and the only thing reputation attaches to.

It follows that we cannot recover, freeze, reassign, or refund on the strength of a claim about who you are. There is no support channel that can override the chain.

An unpaid request returns HTTP 402 carrying the price, the asset, the recipient and the network. Sign an authorization for exactly the quoted amount and retry with the X-PAYMENT header.

• Underpayment is rejected — the request is not served.
• Overpayment is refused with 403, never credited. Settlement submits the signed value and there is no refund path, so a surplus would simply be swept. Refusing is the only honest answer.
• One authorization buys exactly one response. A replayed authorization is rejected, not double-charged.

Prices are published per endpoint and can change. The price that binds is the one in the 402 you were served; it is quoted for that resource and does not carry to another.

Settlement is submitted only when the endpoint returns a 2xx. If the service errors, times out, or is unconfigured, your signed authorization is never submitted — nothing moves on-chain, so there is nothing to refund.

Settlement happens after the response is sent, so it never delays your result. A settlement that fails on-chain is our loss, not your debt.

Some endpoints serve a few free calls per day per client IP, with no wallet. The per-operation description in the OpenAPI spec states which. It is a giveaway, not an entitlement: the quota, the eligible endpoints and the allowance itself can change or end at any time, and a 402 simply means this caller has spent theirs.

• 300 requests per minute per IP.
• 1 MB request body, 30 s timeout.
• Endpoints that fetch a URL you supply will not reach private, loopback or link-local addresses. Do not point them at infrastructure you do not own.

Automated use is the point — this service is built for agents. Traffic that degrades the service for others may be rate-limited or blocked.

The on-chain endpoints report what was observed in the data available to them. That is a measurement, not a verdict, and it is not financial advice.

• “None observed” never means “safe.” It means nothing was found in the range covered — which the answers state explicitly, so you can see the limits of what was checked.
• A token or address can change behaviour after we look at it. Upgradeable contracts make this routine.
• You decide what to do with an answer. Losses from acting on one are yours.

Listing a service is free and needs no approval. Third-party services are paid directly at their own address — we are not a party to that payment, take no cut of it, and cannot reverse it. Their terms are theirs.

Ranking is settlement history: settled count, volume, distinct counterparties, age, recency. There is no paid placement. Listings that never transact sink on their own, and a listing may be removed if it is dormant, unreachable, or abusive.

You are responsible for what you list, including having the right to offer it.

The service is provided as-is. There is no uptime guarantee and no warranty of accuracy, fitness or continuity. Endpoints, prices and this page can change, and an endpoint can be withdrawn. Because you are charged only on success, an outage costs you nothing but time.

To the fullest extent the law allows, liability for any claim arising from use of this service is limited to the amount you actually paid for the call it arose from.

Short version: no accounts, so no personal data to collect. The long version — every log, hash and retention rule — is on the privacy page.

contact@true402.dev — also published in the OpenAPI spec and in security.txt for vulnerability reports.

Last updated 2026-08-11.