Security x402 offerings

Verify email validity. 🆓 5 free trial calls per signed wallet

AI-powered analysis of mini-app permission requests to detect privacy, security, and overreach risks and provide clear remediation guidance.

HISTOR pre-flight for an MCP server: its signed record in the HISTOR transparency log — when the tool set was first seen, whether it changed, what the pattern scan found. Never contacts the server as…

WARDEN verdict on an MCP server's tools/list: allow or block, a 0-1 score and every finding with the matched text (prompt injection, secret requests, exfiltration, hidden Unicode). Deterministic publ…

MCP security: catch a rug pull or tool poisoning between two tools/list results of the same MCP server — the version you approved and the one it serves now. Flags instructions aimed at the model, ove…

Verifiable random bytes for a draw, raffle or tie-break: an ECVRF output over your seed plus a proof anyone can check offline. The same seed always gives the same output, so publish the seed first.

TLS certificate status for pypi.org: issuer, common name, valid-from/valid-to, days until expiry and whether it is valid now, from certificate-transparency logs and a live HTTPS check, plus HSTS and redirect-to-HTTPS. Expiry watch for a site you depend on. $0.01 per check.

TLS certificate status for bbc.com: issuer, common name, valid-from/valid-to, days until expiry and whether it is valid now, from certificate-transparency logs and a live HTTPS check, plus HSTS and redirect-to-HTTPS. Expiry watch for a site you depend on. $0.01 per check.

Full AI verdict on a Solana token combining holders, snipers, dev history, bonding curve, freeze/mint authority — single comprehensive risk score. Sources: Solana RPC + PumpPortal.

Full AI verdict on a Solana token combining holders, snipers, dev history, bonding curve, freeze/mint authority — single comprehensive risk score. Sources: Solana RPC + PumpPortal.

Full AI verdict on a Solana token combining holders, snipers, dev history, bonding curve, freeze/mint authority — single comprehensive risk score. Sources: Solana RPC + PumpPortal.

Full AI verdict on a Solana token combining holders, snipers, dev history, bonding curve, freeze/mint authority — single comprehensive risk score. Sources: Solana RPC + PumpPortal.

Compute MD5, SHA-1, SHA-256, SHA-512, and CRC32 checksums of a string in a single call. Useful for verifying file or payload integrity across different checksum standards without needing five separate tools.

Detect upgradeable proxy patterns (EIP-1967, UUPS, Transparent, Beacon) for any contract and return the current implementation address. Essential before trusting or calling an unknown contract.

Scores names or domains using NameIntel intelligence signals.

WHOIS domain lookup via RDAP — domain registration data: registrar, registration and expiry dates, last-updated date, nameservers, and status flags from the authoritative registry, plus an actionability score so agents can assess domain trustworthiness, ownership, or availability risk.

One call combines domain email authentication (SPF/DKIM/DMARC), email-address intelligence (deliverability, disposable/role detection), and an optional password breach check into a single email-trust report — each section run concurrently with graceful partial-failure handling — so agents can fully vet an email and its domain in one request.

Query the crt.sh certificate transparency log database to enumerate all SSL certificates ever issued for a domain — returns subdomains discovered, certificate issuers, validity periods, and a risk score flagging wildcard certs, expiring certs, and suspicious issuance patterns.

One premium call returns a complete five-part IP profile — geolocation, ASN/network ownership, multi-DNSBL blacklist status, threat reputation, and an aggregate risk verdict — run concurrently with graceful partial-failure handling, so agents get a full IP workup and a block/allow decision in a single request.

SSL certificate check for any domain — issuer, subject, SANs, valid from/to, days until expiry, expired/self-signed flags, TLS version, chain length. One TLS handshake, sub-2-second answer. The light, cheap tier under /ssl/analyze (full analysis, grading). No API key.

Validate an email address — email verification before you send: syntax + MX + disposable/role/free-provider detection in one call, boolean-first (deliverable, safe_to_send) with a machine-readable reason. DNS-level check only — does not confirm the individual mailbox exists (no SMTP probe). For a scored trust report instead of a yes/no gate, see /email-intel/analyze.

One call returns a complete risk profile for an IP address — geolocation, ASN/network owner, blacklist status across multiple DNSBLs, and proxy/VPN/hosting classification — aggregated into a single verdict so agents can make a block/allow decision without calling four separate IP endpoints.

Moderate text content using Claude Haiku — flags categories like harassment, hate, sexual content, violence, self-harm, and spam with per-category severity and an overall allow/flag/block recommendation, so agents can screen user-generated content before publishing or storing it.

One premium call returns a complete six-part domain profile — DNS records, SSL certificate, WHOIS registration, cloud fingerprint, technology stack, and security headers — each section run concurrently with graceful partial-failure handling, so agents get an entire domain workup in a single request instead of orchestrating six.