Resource host mismatch
Quirk · GET /api/x402/resource-host-mismatch · Client Policy Gate (MCP)
The advertised resource origin differs from the server actually being called.
Explanation
The advertised resource origin points at a different host than the server actually being called — the kind of redirection a man-in-the-middle would introduce. A correct client policy gate verifies the resource matches the expected resource server and refuses to sign on a mismatch, so the check is the client's responsibility.
What to watch
An expected-resource-server policy check rejects the mismatched origin before signing.
Facilitator
Settled against the live Radius testnet facilitator (https://facilitator.testnet.radiustech.xyz). A valid payment runs a real /verify and /settle on-chain.
Metadata
- Status: Quirk
- Method: GET
- Price: 0.0001 (100 atomic)
- Responsible party: Client