Security x402 offerings

Lookup registered caller name (CNAM identity), real-time line status (active vs. inactive), telecom carrier, and line type via Twilio. Provide ?phone=+14157012311.

STIX IOCs, CVE lookups w/ EPSS/KEV, ATT&CK dossiers, OFAC wallet sanctions, domain age checks.

Bounded direct observation of a public company website with hashes, injection screening and signed delivery

Bounded low-cost inference with a signed delivery receipt

Bounded direct observation of a public company website with hashes, injection screening and signed delivery

Signed integrity, provenance and freshness receipt for AI-agent JSON

Bounded low-cost inference with a signed delivery receipt

Independent, prompt-injection-screened, hashed and signed web evidence for AI agents

Phone number intelligence: validates a phone number and returns its normalized international form, country, region, line type (mobile, landline, or VoIP), carrier, organization, time zone, and a risk assessment. For fraud prevention, contact data verification, lead qualification, and call routing.

Phone-number intelligence in one call: validity and E.164 normalization, line type (mobile, fixed line, VOIP, toll free, premium rate), country and region, carrier hint, timezones, and a deterministic 0-100 fraud/KYC risk score with a band and reasons. Offline number-plan metadata from Google libphonenumber. Risk indicators only, not a definitive fraud verdict; no live status and no owner identity; the input number is not stored.

Phone-number intelligence in one call: validity and E.164 normalization, line type (mobile, fixed line, VOIP, toll free, premium rate), country and region, carrier hint, timezones, and a deterministic 0-100 fraud/KYC risk score with a band and reasons. Offline number-plan metadata from Google libphonenumber. Risk indicators only, not a definitive fraud verdict; no live status and no owner identity; the input number is not stored.

PII redaction for agent pipelines: remove personal data from text before it goes to another model, a log, a ticket system or a dataset. Emails, IBANs (checksum verified), card numbers (Luhn verified), phone numbers and IP addresses are found by exact patterns; names of people, street addresses, birth dates and ID numbers by Claude Haiku 5.5.

Redact personal data from text without AI: emails, phone numbers, IBANs, card numbers (Luhn-checked), Spanish DNI/NIE, IPs, crypto addresses and URLs, replaced by labels ([EMAIL_1]) or asterisks. Before sending text to an LLM or sharing logs. Text is not stored.

PII detection: flag whether text contains personally identifiable information (name plus contact details, email, phone, address, government ID, financial account) with a confidence score. Powered by Jev, with an automatic Groq-hosted LLM fallback if Jev is slow or unavailable - under 4.5s guaranteed. Try GET /pii-check/sample.

Detect and transform structured PII in a text blob. Returns the sanitized text plus a findings report. Modes: redact, mask, hash, or reversible tokenize (the token map is returned in the response — nothing is stored). Optional per-type mode overrides and an allow-list. Structured PII indicators, not legal advice.

Detect and redact PII in text or JSON. Recognizers are pure pattern/checksum matching (regex + Luhn/mod-97/SSN-area validation) — no LLM calls, no external services. Person names and dates of birth a…

Detect and redact PII in text or JSON. Recognizers are pure pattern/checksum matching (regex + Luhn/mod-97/SSN-area validation) — no LLM calls, no external services. Person names and dates of birth are matched only via nearby context (e.g. 'Mr. Smith', 'DOB: ...'), not general NER, to keep false positives low.

Detect structured PII in a text blob: emails, phones, credit cards, bank and tax ids, IP and MAC addresses, crypto addresses, dates of birth, geo coordinates and secrets. Returns findings with a confidence score plus a compliance summary. No transformed text. Structured PII indicators, not legal advice.

Audit an x402 seller origin as indexers see it: reads /openapi.json, flags missing x-payment-info, examples and apiKey-modelled payment; probes up to 12 paid routes unpaid with your own examples (valid 402? oversized header? description over CDP limit?); lists paid routes the CDP Bazaar has not indexed. Nothing is paid to the audited origin.

Look up a domain before trusting it: registrar, creation date and age in days, expiry, status flags and nameservers from RDAP, plus A/AAAA/MX/CAA records and email authentication (SPF, DMARC policy). Flags young domains (under 30 days), near expiry, missing SPF/DMARC and p=none. Useful for phishing and vendor checks, outreach hygiene and incident triage.

Inspect a public HTTPS URL for redirects, metadata, content type, word count, and content hash.

Returns verdicts and signals for package feed entries.

Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.

Install-safety preflight for one dependency BEFORE pip install / npm i. Returns a safe / caution / block verdict fusing existence, OSV malware flags, typosquat distance to a popular package, a known-hallucination corpus, and freshness metadata. Supply-chain indicators, not a guarantee.