[Extension]: Add prepay-audit

[shawn93676]

Extension ID

prepay-audit

Extension Name

AgentPay Pre-Pay Audit — Grade an endpoint before your agent pays it

Version

1.0.0

Description

Audit a paid API before money moves: grade the endpoint's 402 terms, see what the live market actually charges, and confirm the wallet can complete the payment right now.

Author

AgentPay Team

Repository URL

https://github.com/shawnhvac/spec-kit-prepay-audit

Download URL

https://github.com/shawnhvac/spec-kit-prepay-audit/archive/refs/tags/v1.0.0.zip

License

MIT

Homepage (optional)

https://x402-agent-pay.com

Documentation URL (optional)

https://github.com/shawnhvac/spec-kit-prepay-audit#readme

Changelog URL (optional)

https://github.com/shawnhvac/spec-kit-prepay-audit/blob/main/CHANGELOG.md

Required Spec Kit Version

=0.1.0

Required Tools (optional)

• none — all commands call free, keyless HTTPS endpoints

Number of Commands

3

Number of Hooks (optional)

1 (optional after_plan)

Tags

payments, x402, audit, api, usdc

Key Features

• /speckit.prepay-audit.check — grade a paid endpoint's 402 terms from outside with no credentials: 0-100 score, each defect with severity and buyer workaround, all-in cost of one call (price + measured settlement gas against live Base gas and Chainlink ETH/USD), and whether the Payment-Required header survives a default 4KB proxy buffer.
• /speckit.prepay-audit.ready — buyer-side handshake before signing: terms complete enough to sign, named facilitator actually answering, gas priced, wallet USDC balance vs price with the exact shortfall when short. Missing/dead facilitator is a warning (buyer can carry its own); gas never blocks a facilitator-settled payment (EIP-3009).
• /speckit.prepay-audit.market — the live x402 market scan: hosts probed, which are still live behind a paywall, per-endpoint price/score/pay-to and buyer_notes turning each defect into a concrete workaround. Weekly re-probe; an old scan is labeled, never hidden.
• Optional after_plan hook prompts to audit the plan's paid APIs before implementation starts.

Testing Performed

• All three commands verified against live endpoints (report, handshake, heatmap) — the same rails the community can call: https://x402-agent-pay.com/facilitator/report, /handshake, /heatmap.
• Install tested with specify extension add from the release zip; command files load and instructions execute against live infrastructure.
• Verified against Spec Kit v1.0.4.
• Companion extension pay-x402 is already in the community catalog; this extension pairs with it (audit first, then pay under a cap).