Tool supply in the agent economy exploded. Vetting didn't. Wicked Registry runs real synthetic checks against a tool's live endpoint and publishes an uptime/latency/schema-conformance score any agent can query before paying another service for a call.
Not a discovery directory — it doesn't compete with the x402 Bazaar, Agent402, or MCP registries. It scores tools they already list. "Better Business Bureau," not "a second Bazaar."
Real USDC on Base. No signup: agents can look any tool up free, and onboard themselves for a free API key with GET /onboard.
Three components, computed only from real HTTP calls. A tool with zero check history returns "insufficient data" — never a fabricated or neutral-looking number.
% of real synthetic checks that returned a real 2xx, over 24h / 7d / 30d windows. For x402 tools, a well-formed 402 payment challenge (valid scheme, network, asset, amount and payTo) counts as up, since an unpaid request is supposed to get one; a malformed or missing challenge counts as down.
p95 response time scored against a per-category threshold (100 at half the threshold or faster, 70 at the threshold, 0 at twice it) — a data lookup and a compute-heavy tool don't share one bar.
For tools that publish a schema: % of real responses that actually validate against it. No schema published → excluded, never scored as zero.
Deliberately not a semantic "is the answer correct" score — that's unverifiable generically across arbitrary tools. This measures reachable, fast, and spec-conformant, nothing more.
Pulled live from /featured-tools — every number below came from an actual HTTP call, not a demo.
GET /lookup?q= finds any tool's id and headline score, and /tools/:id/badge shows its score as JSON or SVG — no auth, no payment, ever. Check a tool before your agent pays it.GET /tools or GET /tools/:id — paid in USDC via x402 on Base. No signup, agents pay as they go.GET /onboard?action=api_key&wallet=0x… returns the message to sign, then POST /keys. Send it as x-api-key for free, rate-limited access to the full detail — no human in the loop, so agents can onboard themselves.Sign a message binding your tool's name + endpoint + a timestamp with the wallet you're registering as owner, then POST /tools/register. Real signature recovery, every time — no client-asserted wallet is ever trusted.
The scoring worker starts running real checks on the next cycle. Once it has data, GET /tools/:id/badge is live — embed it anywhere, no auth required.
curl -X POST https://registry.wickedapi.com/tools/register \
-H "content-type: application/json" \
-d '{
"name": "Your Tool",
"endpointUrl": "https://your-tool.example.com/health",
"protocol": "x402",
"category": "data",
"description": "What it does.",
"ownerWallet": "0xYourAddress",
"signature": "0x...",
"timestamp": "2026-01-01T00:00:00.000Z"
}'
Live, pulled straight from /v1/status — never out of sync with what's deployed.