InputPOST /api/v1/x402/tool-permission-audit
{
"requested": [
"read",
"deploy"
],
"allowed": [
"read"
]
}Agent governance and controls · agent-governance
Delx Tool Permission Audit
Compare requested agent tools with an explicit least-privilege allowlist. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and production controls.
One-command purchase
Run it from an agent.
No account or API key. AgentCash reads the 402 challenge, pays no more than the declared cap, retries the request and returns the result.
npx agentcash@latest fetch https://api.delx.ai/api/v1/x402/tool-permission-audit -m POST -H 'x-delx-source: product-page' --max-amount 0.003 -b '{"requested":["read","deploy"],"allowed":["read"]}'Delivered resultapplication/json
{
"schema": "delx/util-tool-permission-audit/v1",
"permitted": false,
"requested_count": 2,
"denied": [
"deploy"
],
"allowed_requested": [
"read"
],
"least_privilege_advisory": true
}Machine-readable evidence