# gpt55_x402_buyer_prepay_risk_score Fetch a target x402 endpoint without paying it, inspect the live 402 quote, optionally audit the service origin, compare expected payTo/network/asset/scheme/price, and return a buyer-facing go/no-go policy pack with runtimePolicyJson, mcpGuardConfig, flowiseGuardConfig, auditLogSchema, and pay/manual-review/skip guidance. This deterministic endpoint never sends a payment header to the target endpoint and does not call an upstream model. Pay up to $0.006 per request with x402 USDC on Base or choose the fixed-price Solana USDC option when advertised. Exact fixed-price payment and Base upto token-metered payment are both accepted when clients support them; upto settlements use actual response usage, a 0.0001 minimum, and the selected tier price as the cap. Canonical live prices: https://gpt55.558686.xyz/x402/live-prices.json. Agent View of the PolicyLayer registry record for `gpt55_x402_buyer_prepay_risk_score`. HTML page: https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-buyer-prepay-risk-score ## Facts - Tool: `gpt55_x402_buyer_prepay_risk_score` - Server: GPT 5 5 x402 Low Cost Agent Tools (`https://gpt55.558686.xyz/mcp`) — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway.md - Homepage: https://github.com/go165/gpt55-x402-gateway - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server CORS policy: * - Server rate-limited: yes - Parameters: 12 - Recommended policy verdict: Allowed ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `url` | string | no | | | `body` | object | no | | | `method` | string | no | | | `endpoint` | string | no | | | `resource` | string | no | | | `timeout_ms` | integer | no | | | `maxPriceUsd` | number | no | | | `maxLatencyMs` | integer | no | | | `expectedAsset` | string | no | | | `expectedPayTo` | string | no | | | `max_price_usd` | number | no | | | `allowedSchemes` | string | no | | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "gpt55_x402_buyer_prepay_risk_score", "arguments": {} } } ``` ## Why gpt55_x402_buyer_prepay_risk_score is rated Low The tool fetches and inspects a live endpoint to retrieve payment/quote metadata and returns a risk/policy assessment. It explicitly states it never sends a payment header, making it a read/audit operation. However, it does make outbound HTTP requests to external endpoints which could have side effects depending on the target, and it involves payment infrastructure context. From the tool's own definition: "Fetch a target x402 endpoint without paying it, inspect the live 402 quote, optionally audit the service origin... This deterministic endpoint never sends a payment header to the target endpoint and does not call an upstream model." Risk signals: Accepts URL/endpoint input (url) · Accepts raw HTML/template content (body) · High parameter count (20 properties) ## Use case AI agents call gpt55_x402_buyer_prepay_risk_score to retrieve information from GPT 5 5 x402 Low Cost Agent Tools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GPT 5 5 x402 Low Cost Agent Tools: ```json { "version": "1", "default": "deny", "tools": { "gpt55_x402_buyer_prepay_risk_score": {} } } ``` ## Other tools on GPT 5 5 x402 Low Cost Agent Tools (217) - `gpt55_html_strip` — Destructive — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-html-strip.md - `gpt55_x402_buyer_client_adapter_pack` — Destructive — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-buyer-client-adapter-pack.md - `gpt55_regex_match` — Execute — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-regex-match.md - `gpt55_url_parse` — Execute — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-url-parse.md - `gpt55_url_parse_get` — Execute — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-url-parse-get.md - `gpt55_wallet_signing_safety_pack` — Execute — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-wallet-signing-safety-pack.md - `gpt55_answer_professional` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-answer-professional.md - `gpt55_balance_topup` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-balance-topup.md - `gpt55_gpt55_plus_half_price_subscription` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-gpt55-plus-half-price-subscription.md - `gpt55_sub2api_balance_ledger_simulator` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-sub2api-balance-ledger-simulator.md - `gpt55_sub2api_official_metered_invoice` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-sub2api-official-metered-invoice.md - `gpt55_x402_agent_approval_workflow_compiler` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-approval-workflow-compiler.md - `gpt55_x402_agent_core_integration_kit` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-core-integration-kit.md - `gpt55_x402_agent_core_integration_kit_get` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-core-integration-kit-get.md - `gpt55_x402_agent_credit_line_underwriting_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-credit-line-underwriting-pack.md - `gpt55_x402_agent_data_leak_containment_plan` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-data-leak-containment-plan.md - `gpt55_x402_agent_market_data_procurement_firewall` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-market-data-procurement-firewall.md - `gpt55_x402_agent_payment_approval_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-payment-approval-pack.md - `gpt55_x402_agent_payment_authorization_ato_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-payment-authorization-ato-pack.md - `gpt55_x402_agent_payment_due_diligence_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-payment-due-diligence-pack.md - `gpt55_x402_agent_payment_due_diligence_pack_get` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-payment-due-diligence-pack-get.md - `gpt55_x402_agent_payment_policy_compiler` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-payment-policy-compiler.md - `gpt55_x402_agent_procurement_rfp_response_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-procurement-rfp-response-pack.md - `gpt55_x402_agent_runbook_compliance_attestation_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-runbook-compliance-attestation-pack.md - `gpt55_x402_agent_spend_recurrence_guard` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-spend-recurrence-guard.md - `gpt55_x402_agent_spend_simulator` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-spend-simulator.md - `gpt55_x402_agent_task_receipt_outbox` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-task-receipt-outbox.md - `gpt55_x402_agent_treasury_rebalancing_policy` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-treasury-rebalancing-policy.md - `gpt55_x402_agent_wallet_incident_response_pack` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-wallet-incident-response-pack.md - `gpt55_x402_agent_wallet_key_rotation_drill` — Financial — https://policylayer.com/tools/xyz-558686-gpt55-token-gateway/gpt55-x402-agent-wallet-key-rotation-drill.md - …and 187 more: https://policylayer.com/tools/xyz-558686-gpt55-token-gateway.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=xyz-558686-gpt55-token-gateway · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/xyz-558686-gpt55-token-gateway