Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / anti-phishing readiness for any sending domain.
Check a URL against URLhaus malware database and heuristic phishing pattern analysis — returns threat classification, malware family if known, threat confidence, and risk score so agents can screen links before following them or sharing them in automated workflows.
One call vets a URL end to end — traces its full redirect chain, checks it against the URLhaus malware database plus phishing heuristics, audits its security headers, and inspects its SSL certificate — concurrent with graceful partial-failure handling, so agents get a complete safety verdict before following a link.
Full routing-security report for an IPv4 address or prefix: the origin AS, the RIR allocation of the block (who, when, country, status), the RPKI ROA status against that origin, and more-specific and less-specific ROA coverage.
Full routing-security report for an IPv4 address or prefix: the origin AS, the RIR allocation of the block (who, when, country, status), the RPKI ROA status against that origin, and more-specific and less-specific ROA coverage.
RPKI Route-Origin Validation for an IPv4 prefix and origin AS, computed per RFC 6811 from the bulk Validated ROA Payload set. Returns the ROA status, the covering ROA count and the matching ROAs with their origin, max length and trust anchor.
RPKI Route-Origin Validation for an IPv4 prefix and origin AS, computed per RFC 6811 from the bulk Validated ROA Payload set. Returns the ROA status, the covering ROA count and the matching ROAs with their origin, max length and trust anchor.
Composite 0-100 trust/risk score for a domain in one call — blends domain age, SSL/TLS, DNS health, email auth (SPF/DKIM/DMARC), IP reputation, and certificate transparency into a single "safe to do …
Moderate text content using Claude Haiku — flags categories like harassment, hate, sexual content, violence, self-harm, and spam with per-category severity and an overall allow/flag/block recommendat…
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deduct…
One call combines domain email authentication (SPF/DKIM/DMARC), email-address intelligence (deliverability, disposable/role detection), and an optional password breach check into a single email-trust report — each section run concurrently with graceful partial-failure handling — so agents can fully vet an email and its domain in one request.
NomiCheck batch verification. Ed25519-signed output with the legal-rules hash and the date they were verified.
Fetches https://domain/.well-known/nostr.json with the name query parameter and reads the mapping the domain publishes. The answer states the resolved public key in hex and as npub, the relay hints the document lists for that key, and the HTTP status and final URL after redirects, so a redirect to a login page is distinguishable from a genuine answer. Given an expected public key, the comparison is made and the result is reported as an explicit match or mismatch rather than left to the caller.
Three modes over the same event structure. In preimage mode the caller supplies a public key and the event fields; the answer holds the exact NIP-01 serialisation, the SHA-256 event id derived from it and the 32 bytes to sign, so the caller signs locally and no secret key ever crosses the connection.
Notarize a public URL: we fetch it ourselves and return a signed snapshot (final URL, HTTP status, content-type, sha256 of the body, server timestamp, upstream host) with TWO cryptographic attestations — a plain EIP-712 signature and an EAS off-chain (Version2) attestation. Proves what this endpoint observed at fetch time (integrity + timestamp + non-repudiation). mode=hash (default) returns metadata + hash only; mode=full also returns the body.
Notarize a public URL: we fetch it ourselves and return a signed snapshot (final URL, HTTP status, content-type, sha256 of the body, server timestamp, upstream host) with TWO cryptographic attestations — a plain EIP-712 signature and an EAS off-chain (Version2) attestation. Proves what this endpoint observed at fetch time (integrity + timestamp + non-repudiation). mode=hash (default) returns metadata + hash only; mode=full also returns the body.
Notarize AI output: a signed Ed25519 attestation of the model response plus sha256 content hash, receipt token, and Merkle anchor status for one AI inference — a cryptographic receipt for inference t…
Notarize AI output in bulk: one signed Ed25519 attestation of the model response per record for up to 20 AI inferences in a single call — same content hash, receipt token, and anchor status as single…
Notarize AI output in bulk: one signed Ed25519 attestation of the model response per record for up to 20 AI inferences in a single call — same content hash, receipt token, and anchor status as single notarization, giving you a cryptographic receipt for inference across an entire audit-trail pipeline.
Notarize AI output: a signed Ed25519 attestation of the model response plus sha256 content hash, receipt token, and Merkle anchor status for one AI inference — a cryptographic receipt for inference that lets you prove an AI said X and verify model output authenticity, checkable free by anyone, anytime.
Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no_license, not_found). A package with 12 weekly downloads pretending to be a popular library is the classic supply-chain attack on coding agents. Pairs with the package-vulns endpoint for CVE checks.
Signed extractability score (0-100) + breakdown + fixes for a URL. Free preview: GET /extractability/preview Blocked or bad input returns 400; a failed fetch returns 502; you are never charged for an error.
Quote only: send this request as a JSON POST. Bulk phone list scrub: up to 100 US numbers per call. Per-number validity, in-service possibility, line type (mobile/landline/VoIP), SMS likelihood, carrier and timezone, plus summary counts. Clean SMS and outreach lists before sending.
Miller-Rabin primality test (with witnesses that are exact for all 64-bit integers) on an arbitrary-precision integer. Returns { prime }.