{
  "product": "Datum OpenAPI Contract Audit",
  "status": "available",
  "endpoint": "https://datum-audit-csv-json-20260802.estoyaburido7.chatgpt.site/api/products/openapi-audit",
  "method": "POST",
  "protocol": "x402 v2",
  "price": {
    "amount": "6.00",
    "asset": "USDC",
    "network": "Base mainnet"
  },
  "input": {
    "contentType": "application/json",
    "accepted": [
      "An OpenAPI 3.x JSON object",
      "A { document: <object-or-JSON-text> } wrapper",
      "A JSON string whose contents are an OpenAPI 3.x JSON document"
    ],
    "maximumBytes": 1000000
  },
  "output": {
    "mediaType": "application/json",
    "deterministic": true,
    "fields": [
      "score",
      "summary",
      "findings",
      "coverage",
      "limitations",
      "payment"
    ],
    "returnedFindings": 500,
    "checks": [
      "Missing and duplicate operationId values",
      "4xx, 5xx, 429, and Retry-After response contracts",
      "Idempotency signals on mutations",
      "Request and response schemas",
      "Authentication and security scheme references",
      "Pagination contracts for collection responses",
      "Tags, summaries, and descriptions",
      "Server URL safety and placeholders",
      "x402 response and metadata consistency",
      "Unresolved references, path parameters, and other contract risks"
    ]
  },
  "limitations": [
    "JSON only; YAML is not parsed.",
    "Static structural review only; endpoints are not called and example payloads are not executed.",
    "Local JSON Pointer references are checked; external references are reported but not fetched.",
    "Pagination, idempotency, and x402 checks are documented-contract heuristics, not runtime proofs.",
    "The audit cannot prove authorization strength, business invariants, or server implementation behavior."
  ],
  "payment": "Send POST once to receive HTTP 402 terms, then retry with PAYMENT-SIGNATURE. A report is returned only after verify and settle both succeed."
}