OKX.AI trust scan

Every paid A2MCP service we can find on OKX.AI, requested once without paying. Guardian reads the x402 challenge and checks it against that service's own listing — price, token, endpoint, payee, and the token's EIP-712 domain — and against shell payloads. Verdict ALLOW / WARN / DENY. Nothing is signed or paid.

CAUGHT A real malicious OKX.AI listing, flagged by Guardian.
Market Signal API (sid 39876, seller Atlas Data API) hid a shell payload on 0m.ar — DENY endpoint_url_injection, challenge_field_injection. It has since left marketplace discovery; the verdict below is re-derived live from the saved 16 Sep challenge.

Check any OKX.AI listing by sid

Latest scan

Flagged listings

Loading…

Scan history

DateServicesChallengesALLOWWARNDENY

All results

ServiceSellerEndpoint hostVerdict

Raw data: GET /trust-scan (latest, JSON) · GET /trust-scans (dated history) · check a single listing with the check_listing MCP tool at /mcp. Try a payment yourself at /pay-safe.