PaperPilot / Tools
For API builders · Agent-ready x402

Catch CSV mistakes before importing.

Check column counts, missing values, duplicate rows, type inconsistencies and spreadsheet-formula warning signals. Start with a free, entirely fictional example; authorize a real paid request only when you need a report on your own CSV.

Runs on our same-owner VM5 merchant at vm5-openapi-x402.onrender.com. The static page here collects no files, accounts or payment information.

What it checks

Structural errors

Missing cells, unexpected columns and row/column shape. Input up to 32 KB UTF-8.

Data anomalies

Duplicate rows and basic type-pattern inconsistencies to prioritize review.

Formula warnings

Flags suspicious spreadsheet formula prefixes. Not a malware scan or security certification.

Free & private · runs in your browser

Check your CSV locally before paying

Try a real structural preview at no cost. Paste a small, non-confidential CSV or choose a file. The content is processed only in this browser—no upload, network request, tracking, or wallet needed. Up to 32 KB of UTF-8 text.

No CSV checked yet.

The local preview counts rows, missing cells, duplicate values, column mismatches, and formula warning prefixes. It does not send data anywhere and cannot prove data correctness or eliminate injection risks. Avoid using confidential or regulated records even when testing locally on a shared device.

Want repeatable machine-readable preflight in an agent workflow?

The separate original merchant buyer quickstart explains its scoped x402 POST API, current 0.005 USDC price, and buyer-authorized payment. This local preview does not initiate a paid request.

For coding agents · free to install

Use the local CSV checker as an agent skill

Install the same bounded offline heuristic for compatible coding agents. The included Node.js script checks synthetic or authorized non-confidential CSV on your device, returning JSON counts of duplicate rows, missing values, inconsistent columns and formula-like cells. Free checks never access the network or a wallet.

npx skills add livastic-vm1-primary/paperpilot-tools --skill paperpilot-csv-preflight

The optional 0.005 USDC VM5 x402 remote API is a different product. Installing the skill does not authorize, sign, send a payment or upload anything. Only a buyer independently deciding to use an x402-capable client can initiate a paid call.

Start free. Decide whether to pay.

1 — Get a non-sensitive example

This GET returns a fictional CSV, expected headers and an actual sample POST body. It is not the paid report.

curl -fsS \
  https://vm5-openapi-x402.onrender.com/v1/csv-sample

Optional: also inspect machine-readable route documentation.

2 — Inspect the paid challenge

Use a public, made-up sample only. The first valid request quotes 5,000 USDC atomic units via the PAYMENT-REQUIRED response header.

curl -i -X POST \
  https://vm5-openapi-x402.onrender.com/v1/csv-preflight \
  -H "Content-Type: application/json" \
  -d '{"csvText":"id,name\n1,Ada\n2,Lin\n","expectedColumns":["id","name"]}'
3 — To purchase a real report

Follow the official owner-maintained buyer quickstart. Your own x402-compatible client presents the exact Base Circle USDC price, address and asset for your approval and retries with its authorized payment signature. We do not ask you to send a private key, seed phrase, credentials, funds to a different address or unrequested deposit.

For API discovery crawlers and coding agents: this paid resource is POST-only and schema-first. A GET/HEAD route check returns 404; POSTing {} returns 400 instead of a 402 because invalid inputs are rejected before quoting. To discover the actual x402 v2 price, submit ONLY the public fictional JSON above without a signature. The machine-readable POST quote-probe manifest includes the exact safe request/expected header, Base native Circle USDC asset and chain. An independent x402 contributor reproduced the genuine HTTP 402 + browser CORS response, not any successful paid buyer-owned POST. Neither this link nor an unpaid HTTP 402 creates revenue.

The merchant rejects malformed inputs before charging. A valid request receiving HTTP 402 is not itself a payment or a delivered report.

Privacy and scope, stated precisely

Request data for the paid API is sent to the VM5 hosted endpoint. The published implementation describes in-memory parsing, without application-side storage or echoing raw CSV row values. Do not submit personal identities, confidential financial data, account credentials, private keys or regulated records. HTTPS and a 402 payment gate do not make a data upload risk-free.

This is a limited, automated CSV structure preflight. It does not certify accounting truth, tax compliance, malware safety or GDPR compliance. For a custom review with an independently agreed scope, see our manual QA and documentation services or send an opt-in inquiry.

한국어 안내: 무료 예시는 실제 개인정보가 없는 가상 데이터입니다. 실제 CSV 검사는 별도 VM5 서비스로 전송되며, 정상 요청당 Base 네트워크의 Circle USDC 0.005 결제가 필요합니다. 요청만으로 자동 결제되지 않습니다. 주민번호·고객정보·비밀키를 보내지 마세요. 이는 구조 검사이며 세무·보안 인증이 아닙니다.

Evidence, not invented testimonials

The same original VM5 seller has a distinct paid synthetic CSV report GET. One independent NoHumans automated verification purchase of that GET, including successful delivery, is documented in a public receipt case study. That paid GET sample is not this POST route. As of October 20, 2026, there are zero independently verified paid POST /v1/csv-preflight customers. A further Base USDC incoming transfer has not been matched to its specific delivered API result and is not claimed as a POST sale.