Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Use when an agent needs x402 endpoint verify. Returns Verify and lint a third-party x402 endpoint: probes the URL (SSRF-guarded), confirms it answers with a well-formed HTTP 402 challenge, and reports protocol-conformance findings — accepts[] completeness, facilitator price floor on Base, PAYMENT-REQUIRED header/body consistency, timeout sanity. $0.02.
Check a URL before you cite, visit or trust it: liveness, final URL and redirect chain, soft-404 detection, page title, domain registration age (RDAP), robots.txt policy for AI agents, and Wayback Machine snapshot availability. $0.002 per check.
Bounty legitimacy check for a GitHub repo or issue: merge speed, payout signals, trap and pile-up red flags, and a verdict (likely_pays / unproven / avoid). Deterministic, public-data evidence.
Generate a SHA-256 cryptographic hash from UTF-8 text
Generate a SHA-512 cryptographic hash from UTF-8 text
Generate SHA-256 or SHA-512 hashes for multiple UTF-8 strings in one request
Micropayment one-page preflight for agents: HTTP/SEO/security evidence with BUY/REVIEW/SKIP verdict before deeper due diligence.
CycloneDX SBOM vulnerability check — analyze bounded JSON 1.5 software bill of materials components against OSV and prioritize exact CVE matches from CISA KEV without remote document fetches.
Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.
Package vulnerability check — check one exact open-source dependency version or purl against OSV, enrich CVE matches with CISA KEV known-exploited signals, and report fixes, severity, and provenance.
Verify an OpenTimestamps proof (.ots as base64, from btc-timestamp or any ots client): upgrades pending proofs from the calendars, checks each Bitcoin attestation against the real block's merkle root and returns status (confirmed, pending), block height and time, the upgraded proof, and whether your text, hash or URL matches.
Audit an agent-facing service for machine usability. Actually calls the endpoints: MCP (Streamable HTTP initialize + tools/list, schema checks), A2A agent card, x402 payment challenge, llms.txt, OpenAPI, robots/agents metadata and endpoint health. Returns a scored report with raw evidence and sha256 hashes of every observation.
Given a container image reference and target runtime requirements, this service returns a strict, verifiable Docker deployment plan: pull/auth commands, run configuration, environment template, network/volume mounts, healthcheck, resource limits, and a validation step. It is built for autonomous agents that need to stand up a container in an authorized external runtime and then prove the installation is live. Output is a machine-checkable JSON object with the exact docker commands, required envi
Deterministic calculator that takes an Agent Bounties task specification and returns a verified breakdown of solver reward, required external spend, bond, and net cash margin in base units. Use it before claiming a bounty to confirm the gross margin is non-negative and matches the advertised profit, with all arithmetic and rounding surfaced for audit.
Audit an agent-facing service for machine usability. Actually calls the endpoints: MCP (Streamable HTTP initialize + tools/list, schema checks), A2A agent card, x402 payment challenge, llms.txt, OpenAPI, robots/agents metadata and endpoint health. Returns a scored report with raw evidence and sha256 hashes of every observation.
Audit an agent-facing service for machine usability. Actually calls the endpoints: MCP (Streamable HTTP initialize + tools/list, schema checks), A2A agent card, x402 payment challenge, llms.txt, OpenAPI, robots/agents metadata and endpoint health. Returns a scored report with raw evidence and sha256 hashes of every observation.
Verifies whether an open-source project issue is a legitimate, funded, escrowed Agent Bounties task before you spend effort claiming it. Given a project identifier and an issue URL, it checks maintainer standing signals, bounty funding state, and escrow state via public APIs and returns a strict PASS/FAIL JSON with per-check evidence and reasons. Use it to gate work: only claim bounties that verify as funded and escrowed against a real, established project.
Validates Model Context Protocol (MCP) server manifests, tool definitions, and agent-to-agent JSON payloads against the MCP specification and JSON Schema (draft 2020-12). Submit a manifest URL, raw schema document, or a tool-call payload and receive a structured conformance report: which fields are missing, which types are wrong, which required properties are absent, and human-readable fix suggestions. Useful for MCP marketplace listing audits, agent interop checks, and CI gating before publishi
Given a raw task listing (title plus optional description, reward, and metadata), this service detects placeholder or canceled markers and returns a machine-readable skip/pursue decision with a confidence score and the matched evidence. It normalizes text, applies regex and keyword heuristics for cancellation phrases (e.g. 'please ignore', 'test task', 'will be cancelled'), checks for $0 or 'test' rewards, and returns a recommended action. Buyers use it to safely filter out low-value or trap tas
Fetch a CSV from a public URL, apply explicit cleaning and merging rules, and return both the cleaned CSV and a machine-readable JSON summary of every change (rows dropped, cells trimmed, duplicates collapsed, headers normalized, sources merged). Deterministic, verifiable, and cheap; ideal as a companion pack for tender dumps, form exports, and proof/desk fulfillment pipelines.
Agent Readiness Scan, full report: runs all 16 checks against a domain and returns the complete machine-readable results synchronously, plus a hosted report URL.
Agent Readiness Scan, full report: runs all 16 checks against a domain and returns the complete machine-readable results synchronously, plus a hosted report URL.