Critical-risk tools in ScorpTech x402 API
11 of the 1012 tools in ScorpTech x402 API are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
collatz_dropDestructiveHow many Collatz steps until the value is strictly below the start. 1 is already at the bottom and takes 0. 2 takes 1, 6 takes 1, 3 takes 6, and 7 takes 11. n runs from 1 to 100...
-
dedupe_recordsDestructiveFind and remove duplicate records (CRM contacts, leads, customers, products) in a JSON array. Modes: exact, normalized (emails: case, Gmail dots and +tags; phones: punctuation a...
-
evm_selector_decodeDestructiveDecode EVM function selectors, calldata and event topics: looks up 4-byte selectors (or 32-byte event topics) in 4byte.directory plus a built-in table of well-known signatures, ...
-
frames_timecodeDestructiveWrite a frame count since midnight as SMPTE timecode. Set drop for 30 fps drop-frame. The count has to land inside one day. 30 frames at 30 fps is 00:00:01:00. Price: $0.001 USD...
-
ip_reputationDestructiveIP blocklist reputation for up to 50 IPv4/IPv6 addresses: membership in the Tor exit list, Spamhaus DROP/DROPv6, abuse.ch Feodo Tracker botnet C2 and FireHOL level1 (cached publ...
-
led_resistorDestructiveSeries resistor for LEDs on one supply. Resistance is (supply − series × forward) / current, with volts and amperes. The part chosen is the next IEC 60063 E24 value at or above ...
-
ruler_oddDestructiveRemove every factor of 2 from n. The odd part of 12 is 3 and the valuation is 2. The odd part of 7 is 7. n runs from 1 to 1000000000000. Price: $0.001 USDC per successful call (...
-
sql_formatDestructiveFormat and lint SQL: consistent keyword case, one clause per line, indented select lists, joins, AND/OR conditions and subqueries, comments and string literals preserved; or min...
-
timecode_diffDestructiveHow many frames from one timecode to another, at the same rate. Positive means to is later. Both codes use a colon, or both use a semicolon. Mixing drop-frame with non-drop is r...
-
timecode_durationDestructiveExact length of a frame count. 24, 25 and non-drop 30 use 1/rate second per frame. Drop-frame 30 uses the NTSC frame, 1001/30000 second. Pass a timecode or a frame count, not bo...
-
timecode_framesDestructiveCount the frames in an SMPTE timecode from midnight. Rates are 24, 25 and 30. A colon is non-drop and a semicolon is drop-frame, which is only legal at 30. Drop-frame skips 00 a...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.