Skip to content

Using pay.sh with Bug Bounty Intelligence — x402 smart contract security scanner #404

Description

@holistis

Hello,

I built a smart contract security scanner that uses x402 as the payment protocol: https://github.com/holistis/bug-bounty-intelligence-mcp

It is trained on 27,681 real accepted findings from Sherlock and Code4rena audit competitions. AI agents submit a GitHub repo, pay $5 USDC on Base via x402, and get a ranked vulnerability report within 24h.

I wanted to share it here because:

  1. It demonstrates a full end-to-end x402 payment flow (GET /api/bug-intel returns HTTP 402, agent pays, POST processes)
  2. pay.sh works perfectly to trigger scans without any SDK: pay.sh post https://wazir-x402.duckdns.org/api/bug-intel -d '{"repo":"your-org/your-repo"}'

The service is also listed in the x402 ecosystem directory and follows the .well-known/x402 discovery standard.

Would you consider adding it to any examples/use cases documentation, or is there a preferred way to list services in the pay.sh ecosystem?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions