Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Part of the Domain Web Trust family: live TLS handshake against a domain's HTTPS port, useful for confirming a domain has a valid, current certificate before an agent interacts with a website or merchant. Reports certificate validity, issuer/subject, and validity window (including days until expiry). Performed via a real TLS connection at request time -- no third-party certificate-transparency dataset or resale-terms question.
Cross-references a UK haulage operator's DVSA-declared licence holder name against that company's real, live Companies House officers and persons with significant control (PSC) -- flagging a mismatch, or a recent director/PSC change, the real pattern seen in distressed-acquisition cargo-theft fraud where a haulier's licence still shows the old, legitimate operator while control of the company has quietly changed hands.
Search official product safety recalls and alerts by product or brand keyword, across US FDA (food/drug) and UK OPSS (general product safety) -- the same already-cleared sources composed inside merchant-trust-check-v1, exposed here as a standalone product for use outside a merchant-domain context (e.g. checking a specific product name). EU Safety Gate non-food product alert data is licensed for inclusion (CC BY 4.0) but not yet technically integrated pending a documented access path.
Retrieve one sanitized archive metadata record by asset id, including content hash, readiness state, field inventory summary and evidence flags.
Search CVEs, CISA Known Exploited Vulnerabilities status, and GitHub Security Advisory package/ecosystem metadata in one call. Composes three separately licence-cleared sources: the NVD CVE API (CVSS scoring, descriptions), CVE Program data from cve.org (delivered via NVD), the CISA KEV catalog (CC0 1.0), and the GitHub Security Advisory Database's github-reviewed set (CC-BY-4.0), ingested only via a local git checkout of the public repository -- never the live GitHub Security Advisories API. Do
Website HTTP and metadata inspection report
Detect semantic changes in declared machine-use rights
Observe publisher-declared machine-use rights with evidence
Create a one-hour verification inbox for a single signup code (10 messages, no replies)
Checks email for security risks and suspicious signals.
Check up to 100 email addresses in one paid call, billed per address.
Instant disposable email detection — checks against 5,000+ known temporary email domains (Guerrilla Mail, Mailinator, Temp Mail, 10MinuteMail, and more). Returns boolean result. Maintaining this blocklist yourself requires weekly updates from multiple sources. Accepts USDC payments on Base and Solana
Email verification / email validation / bounce check before sending: verify one email address: syntax, MX records, mail provider (Google Workspace, Microsoft 365, ...), catch-all detection, role/free…
The Bouncer's log for ERC-8004 agents on Base, up to 100 entries an answer, newest first: fraud flags (self-hire, payment loops, shared funders, bursts, review farms) with severity and onchain receipts (tx hashes, wallets, the measured metric and its threshold), and reviewer cohorts (wallets that started reviewing within hours of each other, with their funding window and first-review txs). Call it to screen a counterparty's wallets or to audit the board's evidence yourself.
Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {"npm":["lodash@4.17.20"],"pypi":["django==3.2.0"]} or a package.json or requirements.txt, up to 50 packages. Returns only packages that have advisories: OSV and GHSA ids, CVE aliases, severity, summary, and the first fixed version, plus counts. Unpinned packages are checked at their latest version. Deterministic OSV data, no LLM.
Proof that a hash was stamped: when we received it, the Merkle path from its leaf to the root, and the Base network transaction that recorded the root, with step-by-step instructions to check it yourself without trusting us.
Remove personal information from a text before your agent stores or shares it: emails, phone numbers, names, street addresses, IDs and card numbers are replaced with labels.
Use before approving, depositing into or calling an unfamiliar contract: security pre-check for any Base network contract before your agent interacts with it (vault, router, token, bridge): built-in powers in its code (mint, pause, blacklist, upgrade, withdraw, self-destruct, delegatecall), proxy and who controls it (a single wallet or a multisig contract), whether the source is publicly verified, with red flags, a risk level and a plain-language verdict. Facts, not financial advice.
Decode a JWT without verifying it: header (algorithm, key id), payload claims, and issued, not-before and expiry times with whether it is expired now.
Fresh random identifiers from a secure generator: UUID v4 (up to 50) plus random hex bytes.
Hash a text with SHA-256, SHA-384, SHA-512 or SHA-1: hex and base64 digests, for checksums, deduplication and content fingerprints.
Cryptographically secure random integers in a range you choose (unbiased), up to 1,000 per call.
DNS and email-security check of a domain: A, AAAA, MX, NS, TXT and CAA records, plus SPF and DMARC presence and policy, with plain findings (e.g. 'no DMARC: mail can be spoofed').
Check an email address before sending: syntax, whether the domain exists and accepts mail (MX records), disposable or free-mail provider, role account (info@, support@), and a verdict.