asterpay.io
D · 56/100
17 passed
17 warnings
0 failed
10 n/a
audit-mtvcsztu
— Voice AI✓ x402 / Crypto✓ MCP
SSL / TLS
Valid HTTPS · HTTP/3 · 119ms
x402 discovery
/.well-known/x402.json found · v2 · 3 protocol(s) · 114ms
Agent discovery
/.well-known/agent.json — AsterPay · has capabilities · 114ms
llms.txt
structured · API info · auth docs · limits/pricing · 7091 chars · 114ms
security.txt
Found · 114ms
CORS headers
origin: * (open — OK for public APIs) · 142ms
Security headers
5/5 present (all critical headers set) · 139ms
Response time
165ms avg · 165ms
MCP server
/mcp returns 200 (not JSON) · 397ms
API endpoints
2 endpoints found
Error handling
404 returned · 139ms
x402 compliance
No x402 payment gates found · 151ms
Rate limiting
No rate-limit headers (may still be rate-limited server-side) · 156ms
Documentation
/docs found · 421ms
robots.txt AI crawlers
7 AI crawlers configured: GPTBot, ClaudeBot, ChatGPT-User, Anthropic, Google-Extended, PerplexityBot, Bytespider · 221ms
AI plugin manifest
/.well-known/ai-plugin.json — "AsterPay - EUR Settlement for AI Agents" · 226ms
OpenAPI spec
/openapi.json — 3.1.0, 62 paths, servers defined, auth documented · 652ms
Privacy / GDPR
No privacy policy or GDPR endpoint
Status / Health
No status or health endpoint
EU AI Act disclosure
No AI model card or disclosure endpoint
Travel Rule (FATF)
No Travel Rule endpoint or VASP disclosure
A2A Protocol (Google)
Agent Card — url, 5 skills, capabilities, v3.1.0, AELIRA LTD, auth: x402,MPP, streaming · 177ms
DNSSEC
DNSSEC check failed
CAA Records
CAA restricted to: comodoca.com, digicert.com, letsencrypt.org, pki.goog, ssl.com
DMARC / SPF
DMARC p=quarantine
Auth maturity
No authentication detected — open API or check failed
API versioning
No versioned paths or version headers found
Human oversight
No human oversight / kill switch endpoint (EU AI Act Art. 14)
Terms of Service
No Terms of Service endpoint found
Content-Type
No application/json responses (1 paths tested)
OASF Classification
No OASF or agent service classification found
MCP Transport Security
No MCP endpoint found
Voice AI Disclosure
n/a
Synthetic Voice Labeling
n/a
Synthetic Content Labeling
n/a
Emotion Recognition Declaration
n/a
Call Recording Consent
n/a
FCC/TCPA Compliance
n/a
Operator Identity & KYB
n/a
Opt-out & Human Escalation
n/a
Voice Call Policy
n/a
Caller Identity Declaration
n/a
Wallet trust
No wallet address found in x402 or agent.json
ERC-8004 on-chain
No EVM wallet found to verify on-chain registration
56
17 issues to fix
Warning — 17
x402 compliance needs attention
No x402 payment gates found
Rate limiting needs attention
No rate-limit headers (may still be rate-limited server-side)
Privacy / GDPR needs attention
No privacy policy or GDPR endpoint
Status / Health needs attention
No status or health endpoint
EU AI Act disclosure needs attention
No AI model card or disclosure endpoint
Travel Rule (FATF) needs attention
No Travel Rule endpoint or VASP disclosure
DNSSEC needs attention
DNSSEC check failed
DMARC / SPF needs attention
DMARC p=quarantine
Auth maturity needs attention
No authentication detected — open API or check failed
API versioning needs attention
No versioned paths or version headers found
Human oversight needs attention
No human oversight / kill switch endpoint (EU AI Act Art. 14)
Terms of Service needs attention
No Terms of Service endpoint found
Content-Type needs attention
No application/json responses (1 paths tested)
OASF Classification needs attention
No OASF or agent service classification found
MCP Transport Security needs attention
No MCP endpoint found
Wallet trust needs attention
No wallet address found in x402 or agent.json
ERC-8004 on-chain needs attention
No EVM wallet found to verify on-chain registration
🔒
Probe trust badge — unlock at score 60+
Fix your failing checks to earn the Probe verified badge. Display it on your site footer and README to show compliance.
⚡ Autofix — Free
Current score: 56/100 → need 60+
2026-09-10 09:57:37 UTC · getprobe.xyz