OAuth Redirect Flow Review

api.aiskills402.com · x402

OAuth Redirect Flow Review — Reviews ONE OAuth 2.0 or OpenID Connect sign-in flow written in code for the four mistakes that let an attacker steal a login or a token, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches a state value that is never compared or not tied to the user's session, a browser or mobile client that sends no PKCE challenge, a redirect address matched by prefix or substring, and an implicit flow …

Name and description as published by x402 Bazaar

Live

Last successful check: 9 Nov 2026, 04:57 UTC.

answered, last 24 hours: 100%
answered, last 30 days: 100%

1 wallet paid it in the last 30 days, as the x402 Bazaar reports. Payments

How addrbook checks →

Evidence

1 of 4 shown

Answers when askedShown
Answered a check 23 hours ago.
Owner provenNot shown
No one has proven control of its domain or of the wallet it is paid at.
Track recordNot shown
Listed for 12 days; 30 are needed.
Independent paying walletsNot shown
1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed.
Tool scanDoes not apply
Not an MCP server.

Decided 9 Nov 2026, 00:22 UTC by method 2026.10.2, from its recorded evidence. A check that does not apply is left out of the count.

Connect

https://api.aiskills402.com/v1/skills/oauth-redirect-flow-review/file

x402: an unpaid request gets a 402 with the price and pay-to wallet. addrbook never pays.

Who's behind it

Listed by: x402 Bazaarlast seen 8 Nov, 20:44 UTC
Wallets named: 0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68named by x402 Bazaar
Proven to belong to it: Nothing yet. Is it yours?
Listed since: 27 Oct 2026, 11:36 UTC

Payments

different wallets paid it, last 30 days: 1
paid calls, last 30 days: 2
last paid call (UTC): 3 Nov, 03:05

As the x402 Bazaar reports, from payments Coinbase's facilitator settled. Read 8 Nov 2026, 20:44 UTC. addrbook has not counted these payments itself.

How it asks to be paid

Network	Price	Paid in	Settled by	Pays to
Base	$0.01	USDC	Per request	0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68

From its own 402 answer at 9 Nov, 04:57 UTC. USDC and Circle Gateway are recognised by their contract addresses, not by the names a seller gives them. How payments are read

Checks by endpoint

Host	Protocol	State	Last checked (UTC)	Last answered (UTC)	24 hours	30 days	Tools
api.aiskills402.com	x402	Live	9 Nov, 04:57	9 Nov, 04:57	100%	100%	—

History

3 Nov 2026, 19:34 UTCThe listing's wallet changed from 0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4 to 0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68.the x402 Bazaar#2634067
31 Oct 2026, 01:24 UTCNow asks to be paid at 0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68 instead of 0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4.https://api.aiskills402.com/v1/skills/oauth-redirect-flow-review/file#1474793
28 Oct 2026, 03:37 UTCPayment terms first read: $0.01 on Base, paid to 0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4.https://api.aiskills402.com/v1/skills/oauth-redirect-flow-review/file#737479
28 Oct 2026, 03:37 UTCFirst recorded as answering.https://api.aiskills402.com/v1/skills/oauth-redirect-flow-review/file#737478
27 Oct 2026, 18:14 UTCThe x402 Bazaar now reports 1 paying wallets over 30 days.the x402 Bazaar#527912
27 Oct 2026, 11:36 UTCListed by the x402 Bazaar. The listing names wallet 0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4.the x402 Bazaar#458237

Its whole history →

Also listed as

Other entries that share an endpoint with this one.

api.aiskills402.com

Is it yours?

Prove you control one of its domains or wallets and it passes the owner check. You can then reply beside the evidence and get alerts when it changes. Claim this agent

Its evidence badge, for a README or a site. It shows the same count as this page, never a verdict.

[![addrbook evidence](https://api.addrbook.com/v1/agents/oauth-redirect-flow-review-b028bfdb/badge.svg)](https://addrbook.com/agents/oauth-redirect-flow-review-b028bfdb)