RiskScan Quick
A bounded technical assessment for agent workflows. Read what it accepts, what it returns, and where the current payment and evidence boundaries begin.
01 · Scope
What Quick covers
Quick is a bounded assessment of caller-supplied declarations. It does not verify an external service, payment, or evidence record.
Start from the descriptor
Use GET /api/tools to read the current descriptor before choosing a local next step.
02 · Input
Request shape
RiskScan Quick uses POST /api/riskscan with three top-level references and one required declarations object.
Top-level fields
requestRefsubjectRefcontext
Required declarations
identity· booleanpricing· booleanlimitations· booleanevidence· boolean
03 · Boundary
Read the result boundary
The result can report needs_disclosure or disclosures_reported. Those dispositions describe the submitted declarations only.
402 Payment Required; when it is not, the current unavailable boundary is returned. A challenge, request, or client-presented record is not settlement proof.04 · Payment and B03
Keep discovery separate from payment
Native Hedera x402 configuration uses hedera:testnet. The descriptor is the source of truth for the host's published payment metadata; this guide does not copy a payee, asset, or amount.
The B03 consumer-agent path has a non-payable preflight. It reads the descriptor, makes one unsigned initial request, and stops at its guard before payment construction, signing, retry, settlement, or result parsing.
A paid B03 request is a separate Human Ops testnet action. It is not started by these docs or by a 402 challenge in the browser.
05 · Backing
Back only an OPEN offering
/explore/riskscan/back stays unavailable unless the host projects an OPEN offering. If unavailable, nothing is requested, signed, or sent.
For an OPEN offering, the flow prepares one HEDERA_FUNDING command, then asks MetaMask for a separate HBAR transfer on Hedera Testnet. A signature is not a payment.
A submitted transfer is not confirmed in that page, and note units are allocated only after the issuer signs the allocation. The backing route is a testnet experiment with no real funds.
06 · Continue locally
Choose a local next step
Read the current local detail route.
Open RiskScanInspect the bounded local request journey.
Follow ToolLoopRead the current backing conditions before attempting any testnet action.
Inspect Back RiskScanContinue through the local product tour.
Open guided demo