File Type Detect API
Detects a remote file's true type from its magic bytes, returning the canonical extension and media type.
- Endpoint
POST /v1/file-type-detect- Price
- $0.003 per call
- Family
- Archives & binary
01When to use it
- Trusting a URL extension or a server content-type is exactly how an agent mislabels a payload; deciding the type from the bytes needs a signature database and a hardened fetch an agent should not run inline.
When not to use it
- The input is over 32 MB (33,554,432 bytes): file-type-detect answers too_large (413).
- The destination needs more than 30 s to answer: the call ends with upstream_timeout (424).
- The destination is on a private or local network: the network guard refuses it with blocked_target (403).
02Parameters
| Field | Type | Required | Description |
|---|---|---|---|
| url | string | yes | Absolute http(s) URL of the file, up to 2048 characters; redirects are followed, the whole body (at most 32 MB) is downloaded, and the type comes from its magic bytes, ignoring the extension and content-type header. |
03Limits
| Limit | Value |
|---|---|
| Size cap | 32 MB (33,554,432 bytes) |
| Timeout | 30 s |
04Example
The published example of file-type-detect, verbatim: the request body and the response it returns.
Request
POST /v1/file-type-detect
content-type: application/json
payment-signature: <base64 x402 payload>
{
"url": "https://grist.tools/samples/archives/bundle.zip"
}Response
200 OK
payment-response: <base64 settlement receipt>
{
"source_url": "https://grist.tools/samples/archives/bundle.zip",
"bytes": 639,
"detected": true,
"ext": "zip",
"mime": "application/zip"
}Sample file: archives/bundle.zip. Tiny zip of five entries (a stored greeting, a deflated markdown note, a deflated five-row CSV and two directories), built with jszip at a pinned entry date.
| Response field | Type | In the example |
|---|---|---|
| source_url | string | "https://grist.tools/samples/archives/bundle.zip" |
| bytes | number | 639 |
| detected | boolean | true |
| ext | string | "zip" |
| mime | string | "application/zip" |
05Call it from code
JavaScript
// file-type-detect: $0.003 per call, paid in USD Coin on eip155:8453 via x402
// Install: npm install @x402/fetch@2 @x402/evm@2 viem@2
// Save as client.mjs (ES module, Node 18+), export EVM_PRIVATE_KEY with the paying wallet's key in your shell, then run: node client.mjs
// The wrapper reads the 402 (payment-required), signs and retries with payment-signature.
import { wrapFetchWithPayment, x402Client, decodePaymentResponseHeader } from '@x402/fetch'
import { ExactEvmScheme } from '@x402/evm/exact/client'
import { privateKeyToAccount } from 'viem/accounts'
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY)
const client = new x402Client().register('eip155:8453', new ExactEvmScheme(account))
const fetchWithPayment = wrapFetchWithPayment(fetch, client)
const body = {
"url": "https://grist.tools/samples/archives/bundle.zip"
}
const res = await fetchWithPayment('https://grist.tools/v1/file-type-detect', {
method: 'POST',
headers: { 'content-type': 'application/json' },
body: JSON.stringify(body),
})
console.log(res.status, await res.json())
const settle = res.headers.get('payment-response')
if (settle) console.log(decodePaymentResponseHeader(settle).transaction)Python
# file-type-detect: $0.003 per call, paid in USD Coin on eip155:8453 via x402
# Install: pip install "x402[requests,evm]>=2.24,<3"
# The session reads the 402 (payment-required), signs and retries with payment-signature.
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http import decode_payment_response_header
from x402.http.clients.requests import x402_requests
from x402.mechanisms.evm.exact import register_exact_evm_client
from x402.mechanisms.evm.signers import EthAccountSigner
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402ClientSync()
register_exact_evm_client(client, EthAccountSigner(account), networks="eip155:8453")
session = x402_requests(client)
payload = {
"url": "https://grist.tools/samples/archives/bundle.zip"
}
res = session.post("https://grist.tools/v1/file-type-detect", json=payload)
print(res.status_code, res.json())
settle = res.headers.get("payment-response")
if settle:
print(decode_payment_response_header(settle).transaction)curl
# file-type-detect: $0.003 per call, paid in USD Coin on eip155:8453 via x402
# 1. Unpaid call: HTTP 402, the requirements in the payment-required header (base64 JSON) and in the body.
curl -i -X POST 'https://grist.tools/v1/file-type-detect' -H 'content-type: application/json' -d '{"url":"https://grist.tools/samples/archives/bundle.zip"}'
# 2. Same call with the signed payment (an EIP-3009 authorization, EIP-712 signed: it cannot be
# typed by hand). x-payment is accepted as the v1 alternative. HTTP 200 carries payment-response.
curl -i -X POST 'https://grist.tools/v1/file-type-detect' -H 'content-type: application/json' -H 'payment-signature: <base64 x402 payload>' -d '{"url":"https://grist.tools/samples/archives/bundle.zip"}'06Errors
| Code | HTTP | For this service |
|---|---|---|
| invalid_input | 400 | The body does not match the schema; its fields are url. |
| blocked_target | 403 | |
| unreachable_target | 424 | |
| upstream_timeout | 424 | |
| too_large | 413 | |
| unprocessable | 422 | |
| internal | 500 |
Input that is rejected before the tool runs (malformed JSON, schema mismatch, body over the size limit) is never charged.
When each code is raised, and what it means for payment: /docs/file-type-detect.
07Questions
- How much does a file-type-detect call cost?
- $0.003 per call, paid in USDC on Base via x402, with no account and no API key.
- What does file-type-detect return?
- A JSON object with 5 top-level fields: source_url, bytes, detected, ext and mime. The example on this page is a real call over archives/bundle.zip.
- What happens when a file-type-detect call fails?
- The tool answers with a typed JSON error from the errors table. Payment is settled only after the tool has produced its result; a call that fails inside the tool is never settled. A 503 upstream_unavailable can follow a settled call; the x402 payments guide covers it, 429, 402 and an uncertain 500.