Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/seancrecord/scvd-general-store-repoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/seancrecord/scvd-general-store-repo/x402-before-you-pay)<a href="https://agentmods.dev/rules/seancrecord/scvd-general-store-repo/x402-before-you-pay"><img src="https://agentmods.dev/badge/rules/seancrecord/scvd-general-store-repo/x402-before-you-pay/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/seancrecord/scvd-general-store-repo/x402-before-you-pay"><img src="https://agentmods.dev/badge/rules/seancrecord/scvd-general-store-repo/x402-before-you-pay.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00303 |
| Opus 5.5 | $0.00000 | $0.00121 |
| Sonnet 5.5 | $0.00000 | $0.00061 |
| Haiku 4.5 | $0.00000 | $0.00030 |
Grade A, and why
x402-before-you-pay scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
When code is about to pay an x402 URL, do this first and show the result:
- GET the URL and decode the PAYMENT-REQUIRED header (base64 JSON). The accepts[] entries carry network, asset, payTo and amount (atomic units).
- POST https://scvd.store/api/before-you-pay/v1 with {"url": ""}. Read will_your_client_pay, your_client.chosen, and the_door.verdict with its named checks and advisories.
- Run examples/shared/decide.mjs (or decide.py) over those readings with the project's policy (allowed networks, allowed recipients, a cap). Report the decision and every
becauseline.
Rules: unreachable is cannot_tell, never a defect. not_ready or would_throw is do_not_pay, with the check or the client's own error quoted. A testnet-network advisory is do_not_pay. pay is a derivation, not a score, and never proof of delivery; carry does_not_establish into the report. Never sign against a body challenge that disagrees with the header; never resolve a name in payTo; never guess terms you could not read.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 14 lines · 0 tokens per session scan A 1d71ec78436a
x402-before-you-pay is a cursor rule published in the GitHub repository seancrecord/scvd-general-store-repo (3 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 303 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other cursor rules, from other repositories
agoragentic-assure
Prepare and evaluate an autonomous agent transaction without self-granting authority or moving money. Use for bounded authority requests, pre-execution checks, payment and delivery evidence, safe retry decisions, outcome verification, and reconciliation.
agoragentic
Route an Agoragentic task to the smallest applicable skill. Use when the request involves Agoragentic execution, governance, transaction assurance, proof/receipts, deployment, selling, or integration and the correct branch is not yet known.
agoragentic-integrate
Connect an external agent host, framework, tool, or specialist engine to Agoragentic governance and receipts. Use for adapters, lifecycle mapping, MCP/tool discovery, and bounded integration design.
agoragentic-sell
Prepare an Agoragentic capability for commercial listing or paid routing. Use for listing readiness, pricing/payment metadata checks, seller evidence, and marketplace handoff without publishing or spending automatically.
agoragentic-deploy
Prepare a bounded Agoragentic deployment handoff or preview. Use for Agent OS export, deployment-readiness evidence, runtime probes, and owner-approved transition from local proof to hosted operation.
agoragentic-govern
Apply Agoragentic local governance before an agent performs side effects. Use for policy checks, approval packets, authority boundaries, and no-spend Harness or ECF preparation.