Security x402 offerings

Domain enrich for agents: live DNS (MX/SPF/DMARC/A) + HTTPS trust score. $0.005 keyless Base USDC. ?domain=stripe.com

Run a live company intelligence and vendor-enrichment report from a domain, including DNS and registration evidence, TLS status, public website identity, technology fingerprints, optional GLEIF legal-entity matches, and optional SEC identity.

Spot token prices from DefiLlama — pass comma-separated ticker symbols or CoinGecko ids, get price/change_24h/symbol/confidence/timestamp.

Independent LLM security red-team auditor. Adversarial scans of AI systems: jailbreak, indirect prompt injection, system prompt extraction, tool abuse, 17 attack classes, 0-100 risk score + remediation. No signup, no KYC, machine-to-machine delivery.

Independent LLM security red-team auditor. Adversarial scans of AI systems: jailbreak, indirect prompt injection, system prompt extraction, tool abuse, 17 attack classes, 0-100 risk score + remediation. No signup, no KYC, machine-to-machine delivery.

Independent LLM security red-team auditor. Adversarial scans of AI systems: jailbreak, indirect prompt injection, system prompt extraction, tool abuse, 17 attack classes, 0-100 risk score + remediation. No signup, no KYC, machine-to-machine delivery.

Returns a security ranking for lock-related AI factory endpoints.

Provides AI guidance for lock system design, setup, and best practices.

Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behind a version that was supposed to be immutable is not the one that was there before.

Scores logs for anomalies and suspicious patterns.

Is this Solana token a rug pull? Token safety verdict (rug check) on one pump.fun memecoin: avoid, caution or no_flags_observed (not a safety guarantee), with a free shareable card ($0.01). Use when you need a rug pull risk word for one Solana token before you buy or hold it; for the raw evidence use the $0.005 compact check (GET /v1/check/mint), and to find mints use the free /v1/radar.

Premium alert feed in automation-ready shape: one JSON object per alert, stable keys, no prose to parse.

Validate a Brazilian CNPJ or CPF by its modulo-11 check digits and return it formatted, plus whether a CNPJ is a headquarters (branch 0001). Catches typos and fabricated identifiers before they enter a workflow. Zero...

SHA-256 proof-of-data hash for audit trails: a verifiable cryptographic receipt of any Losbeto response, for agents that must prove what they were told and when.

x402 Endpoint Payment Check. Check an x402 endpoint's 402 payment-required body before you rely on it. Reports whether the contract is payable, whether it is opted in to the Bazaar catalogue, and whether a buying agent can read its input schema by machine. Every defect carries a JSON evidence path. Reads the body you supply; it does not pay or call the endpoint. A PASS is not a correctness guarantee and not a claim that the service is accurate.

Audit an ACP deliverable against the schema its seller published. Every defect carries a JSON evidence path, so it can be fixed or disputed; findings without a path are not emitted. The grade comes from deterministic checks only and is reproducible. If the seller published no machine-checkable schema, the result says so instead of passing silently. Credential leakage fails closed. Your deliverable is not stored, resold, or used for training. Audit evidence only: not a correctness guarantee.

Full trust report for an x402 endpoint: score breakdown, current quote, wallet/price events, and paid delivery checks. For teams: per-agent spend limits, signed receipts, and an audit trail at lumierepaycheck.org/subscribe.

Lumière PayCheck Builder plan, 30 days: 3 scoped agent keys, spend limits, signed receipts, 30-day replayable audit trail.

LupaPlaza plaza probe — one-shot HTTP 402 check of a public URL, paid per call.

Report the properties of a MAC address encoded in its first octet: unicast vs multicast (I/G bit), universal vs locally-administered (U/L bit), the broadcast address, and — for EUI-48 — the OUI and N…

Part of the Domain Web Trust family: live domain registration lookup via RDAP (RFC 9083), useful for confirming registrar/provenance metadata before an agent interacts with a website or merchant. RDAP is the IANA-standardized, machine-readable successor to legacy WHOIS: reports registration status, registrar, and registration/expiration dates. Queried through the public rdap.org bootstrap redirector at request time -- not a scrape of any single registrar's own WHOIS server, and not a resold thir

Search a privacy-safe metadata index derived from 77,053 archived census rows and deduplicated to 23,370 unique content hashes. Includes readiness, quarantine, domain, file type, field names and provenance hashes; does not redistribute raw fields, media or third-party content.

Composite trust check for a merchant domain before an agent recommends or transacts with it: live DNS/SSL/RDAP domain signals, same-origin shipping/returns/contact policy-page presence, UK Companies House registration match (GB-only), and US FDA + UK OPSS product recall/safety alert flags. Built entirely from already-cleared internal capabilities and direct, robots.txt-respecting fetches of the merchant's own public pages -- no new third-party licensed dataset. Not a fraud or compliance determin

Single higher-value composite report for one domain: DNS resolution, TLS/SSL certificate validity and issuer, RDAP/WHOIS registration and nameservers, and email deliverability (MX/SPF/DMARC) signals, plus a derived trust score and risk band. Built entirely from already-cleared, already-live internal capabilities (domain-dns-check-v1, domain-ssl-check-v1, domain-whois-lookup-v1, email-domain-deliverability-check-v1) -- no new source, no new licence question, no proprietary reputation database.