Api x402 offerings

Bulk URL-to-markdown research pack (1-25 URLs per call). Pairs with /v1/web-search: pipe results[].url straight in for LLM synthesis.

avalanche address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.

DNS resolution for any domain. Returns A, AAAA, MX, TXT, NS, CNAME, SOA, CAA,...

Search/list live prediction markets (Polymarket): odds, volume, liquidity, outcomes. Filter by query, sort by volume/liquidity, markets or events.

Fetch a counterparty agent's armored PGP public key + fingerprint so you can encrypt or verify before you trust.

npm/package-lock dependency risk scan: known_vulnerabilities, maintainer/supply-chain risk signals, install-script risk. Fully automated: delivered inline in the paid call (no operator queue).

Malware/suspicious-code triage for agent workflows: suspicious_behaviors, network/file/process indicators, safe containment notes. Fully automated: delivered inline in the paid call (no operator queue).

Generate UUIDs (v1, v3, v4, v5). For distributed agent ID generation.

Scrub PII/secrets (emails, keys, cards, tokens) from any payload before third-party calls. Deterministic tokens + signed vault certificate for client-side restore.

Audit a ROS2/robot config for unrevoked authority, missing TTLs, over-broad topic grants (wildcards), and authority that outlives the task. Flags delegation that persists after the job ends (consent-chain degradation).

Buyer-side certification: the sub-agent says its work product is at https://... -- fetch that .tine artifact (SSRF-guarded: https only, ports 443/8443, private/reserved/loopback blocked, resolve-then-connect pinning; 10s timeout; 512KB cap), run the full four-check certification and optionally compare expect_sha256 against the canonical content digest or the exact-body digest. Returns a signed certification carrying source_url, so the buyer pays only for output whose provenance chain actually verifies. An expectation mismatch is a request-level rejection (expect_sha256_mismatch) that issues no certificate and never touches the artifact's registry entry. Zero custody: bodies are fetched, digested and dropped, never stored.

Get HTTP response headers for a URL, including security header analysis.

Multi-engine web search: query decomposition (up to 5 variants), SearXNG 20+ engine fan-out, URL dedupe, diversity ranking, 5-min cache. $0.01.

Probe a live model endpoint once and get a signed latency/availability/consistency verdict vs the provider's claimed SLA.

MCP/tool permission and auth-boundary audit: tool-risk matrix, dangerous capability flags, prompt-injection exposure. Fully automated: delivered inline in the paid call (no operator queue).

Server-side PGP cleartext signature of your payload with the DDG edge identity - verifiable with plain GnuPG. For signing DDG-issued artifacts.

Encode or decode base64, with URL-safe variant support.

Stored probe history for one URL, newest first, windowed to the last 30 days: ts, verdict, price, payTo, network, latency_ms. Probe rows only (cache hits are not replayed as history) and never any target response body.

Get latest commodity futures prices for oil, gold, silver, copper, wheat, and related instruments.

bnb address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.

optimism gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.

avalanche read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.

Deterministic claim-vs-source verification (CVE real? package vulnerable/exists? domain resolves? TLS cert valid? URL reachable?) against authoritative sources. Boolean verdict + evidence, no LLM.

Owner inbox listing for the calling X-Agent-Id: metadata only (no bodies), optional kind/unseen/since filters, limit <=100, and a lazy purge of expired messages. Marks nothing as seen.