Development x402 offerings

PHP Composer package wp-cli/wp-cli: latest version, description, license, repository and download/publish data from the packagist registry API. Pin, audit or compare wp-cli/wp-cli in one call, no token. $0.01 per call.

PHP Composer package yiisoft/yii2: latest version, description, license, repository and download/publish data from the packagist registry API. Pin, audit or compare yiisoft/yii2 in one call, no token. $0.01 per call.

Pad hex to a fixed byte width — Genesis402 / UnyKorn Operator Network

Split a web page's readable text into ~1024-token chunks with 50-token overlap, breaking on sentence boundaries, for embeddings and RAG. Returns the chunks in order with their approximate token counts, the page title and total chunk count. One preset, no parameters to get wrong. $0.01 per page.

Audit supplied HTML for metadata, canonical URLs, indexability directives, headings, image alternatives, form labels, link names, social metadata and JSON-LD validity. Returns evidence and practical fixes. Static checks are not a full WCAG certification or ranking guarantee.

Generate an invoice PDF from JSON. $0.02 USDC on Base per call. Computes line items, tax, discount and totals server-side; 12 currencies; multi-page. Validate free first at POST /v1/invoice/validate.…

Paired finite-state replay of onset/dwell and hysteretic release settings over at most 512 labelled offline scores. Timers and state carry across contiguous trials. At equal timestamps score changes precede timers; no event fires at the final endpoint. Reports paired false-event, miss and latency metrics. No hardware or live control.

Returns the full version history of a package from a single normalised schema that covers seven ecosystems. Versions are ordered by semantic version, not alphabetically and not in registry order, so …

Takes a file digest and answers which released package version it is. Useful for an artefact found in a container layer, a build directory or an attachment with no metadata attached. Hex and base64 input are both accepted and normalised, the digest length is checked against the declared algorithm before anything is fetched, and the response names every matching package version, since one artefact can be published under more than one coordinate.

Returns the full version history of a package from a single normalised schema that covers seven ecosystems. Versions are ordered by semantic version, not alphabetically and not in registry order, so 1.10.0 sorts after 1.9.0 — the mistake that quietly breaks naive comparisons. For each version you get the publication timestamp, whether it is the registry default, whether it is deprecated and the deprecation reason as the registry states it.

Analyzes code patches to estimate their impact and risk before deployment.

AI evaluator that analyzes code to score the applicability of software design patterns and provide rationale and suggestions.

package-lock.json license batch triage — coding-agent merge gate. Pass top-level lockfile packages as name@version (max 20). Returns per-package SPDX + permissive-default compatible, rollup counts, and overall yes|no|unknown. Not a compliance SBOM. Free taste: GET /license/lockfile/preview (max 2), then pay GET /license/lockfile for the full list. Single package: GET /license/check.

npm license check before install — call immediately before npm install, yarn add, or pnpm add. Returns npm-declared license, SPDX id, and permissive-default compatible (yes | no | unknown) so the agent can proceed, swap package, or escalate. Not SBOM, not legal advice. Free taste: GET /license/check/preview (same JSON, $0), then pay GET /license/check or MCP check_npm_license for the package you will install. Many packages: GET /license/lockfile/preview then /license/lockfile.

Repairs malformed LLM JSON: strips Markdown fences and prose wrappers, fixes trailing commas, converts Python literals (True/False/None) and single/unquoted keys, removes comments, recovers balanced …

Apply an RFC 7396 merge patch to supplied JSON with own-property-safe object construction; no stored data is changed.

Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one call. Params: ?names=a,b,c. Errors are not charged. JSON.

Use to discover npm packages by keyword or name: returns up to 20 hits with name, version, description, keywords, date, and the registry search score. Publisher and maintainer emails are never returned (names/usernames only when present).

Use when you have a likely PyPI project name (or a few tokens) and need to resolve it to live projects: tries the query as-is, PEP 503 normalization (lowercase, [-_.] → -), and hyphen/underscore/dot variants, then returns up to "limit" matching projects with summary, version, requires_python and license. This is name resolution, not full-text discovery — prefer exact package names when known. Author emails are redacted.

Use when you need the public npm registry card for a package (scoped or unscoped): returns description, homepage, bugs URL, repository, license, keywords, maintainers as names only (emails stripped), number of versions, latest dist-tag version, created/modified times, and last-week download count from the official downloads API. Private packages are not supported.

Use when you need the published artifacts for a specific PyPI version: each file with filename, packagetype (sdist/bdist_wheel…), size, upload time, yank flags, digests (sha256/blake2b/md5) and download URL. Give "latest" as version to use the project's current version.

Use when you need the public PyPI project card: summary, home_page, project_urls, license, requires_python, a subset of classifiers, requires_dist (capped), current version, and yank status. Author/maintainer emails are omitted or redacted; only display names remain when present.

Use when you need the exact published artifact for an npm version: dependencies, optionalDependencies, peerDependencies, bundledDependencies, engines, os/cpu, dist (tarball URL, integrity, shasum, unpacked size), and the version publish time. Give "latest" as version to resolve the current dist-tag.

Use to discover npm packages by keyword or name: returns up to 20 hits with name, version, description, keywords, date, and the registry search score. Publisher and maintainer emails are never returned (names/usernames only when present).