Security x402 offerings

SEAL: witnessed cryptographic stamp + timestamp. POST body: {"content":"..."} (hashed and forgotten) or {"hash":"<sha256 hex>"} — content never leaves your machine. Returns seal_stamp + payment_seal.

ATTEST: certificate of existence. POST body: {"ref":"0x<txHash>" | "<sha256 hex>" | "<16-hex stamp>"} — exact match against the ledger. Returns CONFIRMED + entry, or honest NOT_FOUND.

SEALCHECK: does this sha16 exist in our deploy rosette? Authenticity verdict.

Analyzes child-focused social scenarios to flag safety risks, detect problematic interactions, and recommend responses for caregivers or moderators.

x402 proves payment; this answers whether the wallet should be recognised. Resolves a wallet's onchain identity — Coinbase verification (a KYC'd attestation), Basename, and an ERC-8004 registry entry when configured — and corroborates with its payment track record. One verdict: recognised / named / anonymous / unknown. The identity leg alongside x402-seller-check (endpoint) and agent-reputation (behaviour). Identity is not intent; a degraded read is 'unknown'. Not financial advice.

Review a built-in risky Kubernetes deployment and ClusterRole against Pod Security Standards, RBAC least privilege, secret handling, image pinning, resource bounds, and network exposure without contacting a cluster

Signed verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.

Verify a business is real and get a legitimacy verdict plus a 0-100 risk score. Give one of name, lei, cik, ticker, isin or qid and get a verdict (real, likely_real, inactive, dissolved or not_found), a risk category, per-dimension flags, reasons, the official registry and which registries corroborated. Deterministic scoring, no LLM. Legitimacy indicators, not legal or credit advice.

Secure authentication endpoint for token issuance, validation, and session management to control API access.

Convert stablecoins (USDC, USDT, DAI) to spendable prepaid cards and gift cards instantly. Works with Google Pay. Multi-chain: Ethereum, Solana, Stellar, Arbitrum, Base, Polygon.

LEGIT: trust scores and organic demand intelligence for the x402 agentic economy. Created by GONNA.

LEGIT: trust scores and organic demand intelligence for the x402 agentic economy. Created by GONNA.

LEGIT: trust scores and organic demand intelligence for the x402 agentic economy. Created by GONNA.

LEGIT: trust scores and organic demand intelligence for the x402 agentic economy. Created by GONNA.

Validate a Legal Entity Identifier (LEI, ISO 17442): 20-character format and mod-97 check digits, split into LOU prefix and entity part. Computed locally; does not query GLEIF.

Exact full-release and section hashes plus deterministic bounded line changes for explicitly licensed original Maha section versions; no semantic equivalence claim. New modular adapter: retained result recovery for 24 hours, minimal receipt metadata for 90 days. Existing live route unchanged.

IP geolocation + ASN/ISP intel: country, region, city, coordinates, timezone, ISP, org, AS number/name for any public IP address. Price: $0.002 USDC on Base, Monad, Arbitrum, Optimism, Polygon, Avalanche or Solana.

Per-entity report built from one real check's signals: identity, sanctions and PEP screening, domain signals, trust score (risk.trust_score, 0-100, 100 = best), correlations with the caller's earlier reports, sources and an evidence hash. A source that did not answer is shown unavailable, never clean.

MCP tool: Screen a wallet: OFAC SDN address match, on-chain signals (contract check, native and USDC balance, transaction count, first seen on Base) and named risk rules with up to 3 advice items. On Base, also reports any ERC-8004 agent the wallet owns and its open on-chain reputation as descriptive signals, never scored. Accepts EVM (0x...) and Solana (base58) addresses.

MCP tool: entity trust check for LLM agents. Runs the /v1/entity/check engine on entity_name, country, kvk_number and domain only, so up to 5 sources (no IBAN, VAT or wallet).

MCP tool: quick risk score for entity name + country pair.

Quick risk score (0-100) for entity name + country. Lightweight check without full data source scan.

Link Header Parse: parses bounded Link header targets and relation parameters using only bounded caller-supplied values. Call when you need a bounded link header parse result before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for Link Header Parse as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base or Solana. First-party, stateless, memory-only executi…

Live domain trust signals: DNS (MX/SPF/DMARC/A) + HTTPS probe via Cloudflare DoH. Keyless $0.005.