laso.finance
D · 57/100
18 passed
16 warnings
0 failed
10 n/a
audit-mqm1s032
— Voice AI✓ x402 / Crypto✓ MCP
SSL / TLS
Valid HTTPS · 349ms
x402 discovery
/.well-known/x402 found · v1 · 1208ms
Agent discovery
/.well-known/agent.json returned HTTP 404 (should be 200) · 399ms
llms.txt
structured · API info · auth docs · limits/pricing · 17167 chars · 544ms
security.txt
Found · 448ms
CORS headers
origin: https://laso.finance (restricted) · 349ms
Security headers
5/5 present (all critical headers set) · 354ms
Response time
600ms avg · 600ms
MCP server
/mcp returns 200 (not JSON) · 480ms
API endpoints
2 endpoints found
Error handling
Returns 200 for unknown paths · 510ms
x402 compliance
No x402 payment gates found · 435ms
Rate limiting
No rate-limit headers (may still be rate-limited server-side) · 441ms
Documentation
/docs found · 541ms
robots.txt AI crawlers
6 AI crawlers configured: GPTBot, Claude-Web, ChatGPT-User, Anthropic, Google-Extended, PerplexityBot · 775ms
AI plugin manifest
/.well-known/ai-plugin.json — "Laso Finance" · 684ms
OpenAPI spec
/openapi.json — 3.1.0, 18 paths, servers defined, auth documented · 1791ms
Privacy / GDPR
/privacy found (6866 chars) · 658ms
Status / Health
/status found · 621ms
EU AI Act disclosure
No AI model card or disclosure endpoint
Travel Rule (FATF)
No Travel Rule endpoint or VASP disclosure
A2A Protocol (Google)
No agent.json for A2A discovery
DNSSEC
DNSSEC check failed
CAA Records
CAA check failed
DMARC / SPF
DMARC p=reject
Auth maturity
No authentication detected — open API or check failed
API versioning
/v1
Human oversight
/agent/stop — active (EU AI Act Art. 14) · 846ms
Terms of Service
/terms found (6866 chars) · 850ms
Content-Type
No application/json responses (1 paths tested)
OASF Classification
No OASF or agent service classification found
MCP Transport Security
/mcp active · HSTS · CORS · 780ms
Voice AI Disclosure
n/a
Synthetic Voice Labeling
n/a
Synthetic Content Labeling
n/a
Emotion Recognition Declaration
n/a
Call Recording Consent
n/a
FCC/TCPA Compliance
n/a
Operator Identity & KYB
n/a
Opt-out & Human Escalation
n/a
Voice Call Policy
n/a
Caller Identity Declaration
n/a
Wallet trust
No wallet address found in x402 or agent.json
ERC-8004 on-chain
No EVM wallet found to verify on-chain registration
57
16 issues to fix
Warning — 16
Agent discovery needs attention
/.well-known/agent.json returned HTTP 404 (should be 200)
Response time needs attention
600ms avg
Error handling needs attention
Returns 200 for unknown paths
x402 compliance needs attention
No x402 payment gates found
Rate limiting needs attention
No rate-limit headers (may still be rate-limited server-side)
EU AI Act disclosure needs attention
No AI model card or disclosure endpoint
Travel Rule (FATF) needs attention
No Travel Rule endpoint or VASP disclosure
A2A Protocol (Google) needs attention
No agent.json for A2A discovery
DNSSEC needs attention
DNSSEC check failed
CAA Records needs attention
CAA check failed
DMARC / SPF needs attention
DMARC p=reject
Auth maturity needs attention
No authentication detected — open API or check failed
Content-Type needs attention
No application/json responses (1 paths tested)
OASF Classification needs attention
No OASF or agent service classification found
Wallet trust needs attention
No wallet address found in x402 or agent.json
ERC-8004 on-chain needs attention
No EVM wallet found to verify on-chain registration
🔒
Probe trust badge — unlock at score 60+
Fix your failing checks to earn the Probe verified badge. Display it on your site footer and README to show compliance.
⚡ Autofix — Free
Current score: 57/100 → need 60+
2026-06-20 07:39:52 UTC · getprobe.xyz