Webhook SSRF & private IP guard.

Validate callback URLs against private IPs, CGNAT, and IMDS before dispatch — $0.002 Base USDC.

{
  "input": {
    "urls": [
      "http://0x7f000001:6379/",
      "https://hooks.example.com/ok"
    ]
  },
  "output": {
    "ok": true,
    "safe": false,
    "ssrfDetected": true,
    "riskScore": 100,
    "reasons": [
      "obfuscated_ip_encoding",
      "ssrf_loopback"
    ]
  }
}

import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
const acct = privateKeyToAccount(process.env.PRIVATE_KEY);
const payFetch = wrapFetchWithPaymentFromConfig(fetch, { schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(acct) }] });
const res = await payFetch("https://aso-x402-screen.asostudio.workers.dev/v1/screen/url", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ url: "https://hooks.example.com/callback" }) });

{
  "mcpServers": {
    "edgescreen": {
      "url": "https://aso-x402-screen.asostudio.workers.dev/mcp"
    }
  },
  "tool": "screen_url",
  "arguments": {
    "urls": [
      "https://hooks.example.com/callback"
    ]
  }
}