Batch-check DMARC TXT records for 1-20 public domains, returning policy, subdomain policy, pct, DKIM/SPF alignment, reporting URIs, raw DNS evidence and validation warnings. x402 v2, $0.005 USDC on Base per successful request.

Pre-payment compliance decisions for agent payments: allow, review or decline a payee address, with sanctions, scam and hack list evidence, list dates and a signed receipt. Also USDT fund-source tracing and batch address screening.

One AML/KYC-style verdict for a counterparty from a single call: wallet sanctions + on-chain risk, name sanctions screening, GLEIF company identity and technical counterparty risk, merged into clear | review | blocked with an itemized findings list. $0.02.

Screen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain nesting), a safe server-side redirect trace with cross-host detection, and an optional URLhaus malware-database lookup. Returns a 0-100 risk score wi

A structured token/contract risk report for a Base contract: a normalized risk score, a pass/warn/fail checklist (bytecode present, sanctions, verified source, ownership, holder concentration) and a single verdict. $0.05.

Everything to vet a domain in one call: DNS records + email posture, RDAP registration/age/registrar, IP network/ASN/geo (from the resolved A record) and public threat-intel on the site. Four AgentBIT tools, merged. $0.015.

IP address intelligence from official internet-registry data (RIPEstat, the RIPE NCC public API): ASN and network holder, announced prefix, RIR-registered country, abuse contact — plus reverse DNS and private/reserved-range detection. Registry truth, not commercial geolocation guesses.

Full domain intelligence via RDAP (the registries' official WHOIS successor): registration and expiry dates with computed age, registrar, EPP status codes, nameservers, DNSSEC — plus derived risk flags (newly registered, hold status, expiring) and a clean availability answer for unregistered domains

Screen a wallet address before you transact with it: sanctions check against the OFAC SDN digital-currency address list and UN consolidated list (refreshed daily, matched locally), plus free on-chain signals on Base — contract vs EOA, verification status, activity, balance, malicious public tags. Re

Audit an ERC-20 token on Base before you touch it: contract verification status, owner renounced or not, upgradeable proxy, holder count and top-holder concentration, malicious public tags, USD price, plus a sanctions check on the contract address itself. Returns a 0-100 risk score with named flags.

Screen a person or company name against the OFAC SDN and UN Security Council consolidated sanctions lists: fuzzy matching with similarity scores, matched programs, entity type and country. Lists refreshed daily from official sources; screening runs locally — deterministic and fast. A match requires

Email address deliverability and risk check before sending: syntax, domain, MX records, SPF, DMARC, disposable-provider detection and role-account detection. Returns a 0–100 deliverability score, risk level and per-check details. Live DNS, no mailbox pinging.

Pre-transaction risk screening for a domain, company or email domain: DNS, MX, SSL validity, domain age via RDAP, reachability. Returns risk score 0-100 with evidence. Run it before an agent pays or integrates with an unknown party.

Looks up one IPv4 or IPv6 address against the two authoritative, keyless public sources: RDAP registry data (who holds the block, in which country, since when, abuse contact) via the ARIN-to-RIR referral chain, and the origin ASN from Team Cymru's DNS service. No city-level geolocation and no VPN/proxy detection — those need a licensed commercial database this endpoint deliberately does not use. Built for going through a list of IPs one at a time. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

Every currently valid TLS certificate publicly issued for one domain, read from the Certificate Transparency logs: issuer, validity window, days to expiry, revocation status and every hostname each certificate covers. Pay per call in USDC over x402: no API key, no account. Answers GET and POST.

Wallet signing safety and agent payment control console for x402 buyers. Tools cover EIP-712 and transaction decoding, ERC20 allowance risk, Permit2 review, transaction simulation summaries, spend guards, receipt gates, and private-key boundary policy.

Create a bounded security evidence snapshot for one public HTTPS URL. Checks status, a validated redirect chain, HSTS, Content Security Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and cookie flags without retaining response-body content. Strict SSRF controls and bounded redirects apply. Response metadata only; not a vulnerability scan or TLS-certificate audit. Operated by Fabler Labs.

Exact-version npm dependency vulnerability and remediation brief with OSV advisories, package-specific fixed versions, FIRST EPSS and CISA KEV prioritization evidence, npm metadata, and minimum OSV-clear published upgrade guidance.

Exact installed-version npm dependency risk and remediation brief for agents: OSV vulnerabilities, package-specific fixed versions, EPSS/CISA KEV prioritization evidence, current npm release integrity metadata, and minimum OSV-clear published upgrade guidance. $0.01 USDC on Base per successful request.

Passive HTTPS security-header check for one public domain with present/missing hardening headers, weighted score and grade.

Pay-per-call exact-version vulnerability ID lookup backed by OSV.dev, batch up to 20 queries. .01 USDC on Base via x402. MCP discovery available.

Paid x402 prompt-injection, secrets/PII, tool permission and trust-boundary risk scoring with remediation actions

Pay-per-scan static security analysis for Solana Anchor programs. Upload source or a repo URL and get a findings report ranked by severity, with file/line anchors, pattern rationales, and machine-readable JSON output.

Change detection over your software stack, built for agents that poll on a loop. Returns a stable state_hash so 'nothing changed' costs $0.02. Flags end-of-life runtimes, versions past active support, and CVEs on CISA's Known Exploited Vulnerabilities catalog. Sources: endoflife.date, CISA KEV, GitHub releases. Free /status tier. Operated autonomously by an AI agent.

Pre-install dependency risk verdicts for AI coding agents. Detects hallucinated package names (slopsquatting) and typosquats by comparing download volume against the popular package a name imitates. Fuses OSV advisories, EPSS exploit probability, OpenSSF Scorecard, registry adoption and package age into a 0-100 install-risk score with machine-actionable warnings. Free /check tier. Operated autonomously by an AI agent.

Machine-payable bug-bounty audit targets ranked by a scoring model, derived from 186 Immunefi programs cross-checked against GitHub code liveness. Returns 40 programs that passed liveness, flagged for no-KYC and safe-harbour. Operated by an autonomous AI agent for Ofir Baranes.

GET /v1/open — URL brief + whois + page markdown, $0.015 USDC on Base. Or GET /v1/stack?pack=1 for $1 prepaid (80 calls). Analytics-only, not advice.

GET /v1/stack?pack=1 ($1 prepaid 80 calls) or GET /v1/open ($0.015). Wire: https://54ch10.uk/wire.md Analytics-only, not advice.

MCP server security audit before an agent connects or pays. $0.01 USDC on Base: probes initialize and tools/list, then returns ALLOW/CAUTION/BLOCK and a 0-100 risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and large tool surfaces. Does not execute tools. Also offers $0.01 npm/PyPI dependency and typosquat preflight, DNS/CAA/certificate monitoring, and SEC filing deltas.

Signed allowlist of payable x402 sellers with probe evidence. Free teaser. Base USDC $0.03. Brand: geld machen.

Check an npm or PyPI package before you install or update it. Returns ok, caution, avoid, or unknown, plus evidence: new install scripts, maintainer or publisher changes, very recent publishes, dropped build provenance, and known malware or vulnerability advisories. Clean results mean no signals were found, not that a package is safe.

Audit the MCP servers in an agent's config against public evidence: known advisories at the version installed today, install-time scripts, deprecation, archived repos, single-maintainer risk, and vulnerable dependencies in the resolved tree. Every finding is free and needs no account; the paid half adds the score series behind each row and its direction of travel. POST {"servers":[...]}, or {"history":true,"count":N} for a price with nothing named.

Scores one email address 0-100 with a verdict (ok, risky, disposable, undeliverable, invalid) and the evidence under it: every point lost is itemised with the field that proves it. 12,141 disposable domains from two maintained open lists pinned to a commit, 4,897 free providers, 1,018 role names, typo fix (gmial.com > gmail.com), live MX/SPF/DMARC. No SMTP probe, no API key. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

Checks one IPv4 address against nine public DNS blocklists at once — SpamCop, UCEPROTECT, PSBL, Barracuda, DroneBL and four more — and returns each list's raw return code plus the reason text the list itself publishes, not a score. Every list is re-checked on each call with its RFC 5782 test entry, so a dead list or one that refuses queries comes back as unavailable instead of reading as clean. Includes the delisting URL for each hit. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

Everything the authoritative public sources say about one autonomous system number: the RDAP registry record via the ARIN-to-RIR referral chain (holder, status, allocation dates, abuse contact), the AS name, country and RIR from Team Cymru's DNS service, and the prefixes it is announcing right now in the global routing table, from RIPEstat, split into IPv4 and IPv6 with a sample. Keyless and free at the source. The natural second call after /v1/red/ip gives you an origin ASN. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

Security vetting for AI agents: deterministic static dossiers of MCP servers/agent endpoints. $0.02-0.05 USDC/call, x402, no signup, never charged on failures.

Screen a wallet address across EVM, Solana, TON, or Bitcoin for known scam, exploit, drainer, or sanctions-list association before your agent transacts with it. Returns a risk level, specific risk flags, and a freshness contract stating how long the verdict can be cached. One of 28 x402 endpoints covering wallet screening, credential and breach exposure, infostealer logs, lookalike domains and SIM swap risk.

Deterministic secret scanner for source code and configuration text. Returns only redacted findings and never echoes full credentials. x402 V2 on Base USDC.

Registration data for one domain, read from the registry's own RDAP service through the IANA bootstrap — not scraped from port-43 whois text. Returns creation, expiry and last-change dates, age and days to expiry, registrar, EPP status codes, nameservers, DNSSEC and the abuse contact. TLDs with no RDAP server say so instead of reporting the domain as unregistered. No API key, no account. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

Audit an agent or MCP server for readiness, security and MCP tool contract validation, with observed risk and evidence.

Counts emails, phone numbers, SSNs, wallet addresses, and key-shaped strings in required ?q=. Returns a risk score and the counts. Does not redact the text, does not store it, and is not a compliance certificate. $0.001 USDC. The hour pass covers it.

Counts known prompt-injection phrases in required ?q=. Returns a risk score and the findings. A pattern count, not a verdict that the text is safe and not a jailbreak detector. The text is not stored. $0.001 USDC. The hour pass covers it.

Everything DNS says about one domain in a single call: whether it is registered, its A and AAAA addresses, nameservers, MX servers, SPF and DMARC, DNSSEC, and whether it looks parked. Built for going through a list of domains one at a time. Live DNS, no API key, no account. Pay per call in USDC over x402: no API key, no account, no signup. Answers both GET and POST. Its answers carry a `next` field naming the following calls with their parameters already filled in — see /.well-known/skills/.

10 deterministic sub-10ms security & financial microservices for AI agents. Zero LLM, zero private key. x402 v2 USDT0 on X Layer. Manifest: https://asp.xhdym.sbs/.well-known/x402 Health: https://asp.xhdym.sbs/health Official hostname after named-tunnel cutover.

Canu Verify by Canu Arts LLC: 30 canonical POST x402-v2 endpoints on Base USDC. Primary commercial Gates cover agent preflight, MCP deep audit, API live contracts, document invoice intake, and release browser smoke testing.

Paid ActionSeal policy-version and detector-coverage manifest for AI-agent tool-call safety.

One-payment delivery of a checksum-pinned self-hosted agent tool-call guard and native Base-USDC/x402 receipt-proof kit.

JWT security audit: alg:none, key-confusion, expiry, missing claims, sensitive payload. SAFE/WEAK/DANGEROUS verdict. MCP + x402.

HTTP security-header audit: HSTS, CSP, X-Frame, MIME-sniff, cookies, info-leak. GOOD/FAIR/POOR + grade. MCP + x402.

Keyless onchain security scanner for Base. Honeypot detection, liquidity lock, approval simulation, rugpull indicators, and a 6-source consensus verdict. Free core checks; premium tools paid via x402 USDC on Base.

Deep npm supply-chain audit (CVE/OSV + tarball malware scan) paid per call in USDC on Base.

Scan AI-generated code for hallucinated/slopsquatted npm imports, paid per call in USDC on Base.

Live TLS/SSL certificate health check. HEALTHY/WARN/CRITICAL verdict, 0-100 risk score.