Security x402 offerings

Is this transaction, approval or signature safe to sign? Check it before your AI agent or wallet signs it: pre-sign verdict (green/orange/red + reason codes) for EVM and Solana transactions, token ap…

Analyzes projects for potential risk signals and red flags.

Preflight untrusted text for common prompt-injection, credential-exfiltration, and tool-abuse patterns. Deterministic heuristic scan; not a guarantee of safety.

Prompt Injection Guard — Keeps an AI agent from obeying instructions hidden in what it reads (indirect prompt injection). Web pages, e-mails, files, PDFs, API and tool output, other agents' messages and skill files under review are treated as content, never as orders. The agent is instructed never to pay, transfer, delete or reveal anything because content asked, to report the attempt with a quote and its source, and to still finish the real task. Use whenever the agent reads anything it did no…

prompt-injection risk scan: detects instruction override, tool abuse and secret exfiltration phrases before an agent consumes untrusted text.

Checks prompts for safety and policy risks before use.

Prompt-injection and manipulation scan for untrusted text, HTML, email, and tool output.

Before an AI agent trusts or pays a public API, inspect its public machine-readable evidence and x402 readiness. Submit a public HTTPS domain to check its agent card, OpenAPI, robots policy, and settlement-aware x402 signals, or submit a Base address for public onchain evidence. Returns a timestamped JSON report; not a security or compliance audit.

Before an AI agent trusts or pays a public API, inspect its public machine-readable evidence and x402 readiness. Submit a public HTTPS domain to check its agent card, OpenAPI, robots policy, and sett…

Deterministic RU/EN safety preflight for AI-agent prompts and tasks. Flags six risk families: prompt injection, secret exfiltration, wallet signing or spend, spam or impersonation, destructive operations, and credential harvesting. POST JSON {"text":"..."}; advisory signals only, no LLM, no request-body storage, no security guarantee.

Raw C2PA manifest-store dump for a media file, with no verdict wrapper. Returns every manifest in the provenance chain with its claim generator, signer, assertion labels, edit actions, AI-source flag, ingredient graph and the granular validation codes. For agents that want the full provenance tree rather than a go/no-go verdict. Heavy binary fields (thumbnails, hash blobs) are not echoed.

Cryptographic C2PA / Content-Credentials verdict for a media file. Parses the embedded manifest, verifies the signature chain and asset hash-binding against the C2PA production + Interim trust lists, and returns a go/no-go verdict (authentic-provenance, untrusted-signer, tampered, unsigned) with the distilled signed claims. Cryptographic provenance, not a deepfake detector.

Reads the EIP-1967 proxy slots live: is the contract upgradeable, what's the current implementation, and WHO can upgrade it. Flags the dangerous case — an EOA admin that can swap the logic at any block with no timelock/multisig. Upgradeability is a rug vector static scans miss.

Verify a bounded civic-ledger-1 public organizational decision suffix against declared checkpoints, including expected-head truncation detection. No Merkle proof or anchor. New modular adapter: retained result recovery for 24 hours, minimal receipt metadata for 90 days. Existing live route unchanged.

Public URL verification API for AI agents. Independently fetch one public HTTP(S) URL and return target HTTP status, final URL, raw response-body SHA-256 content fingerprint, content type/encoding, byte length, and UTC observation time. Use for URL integrity verification, website change detection, content fingerprints, and web evidence. Receipt v2 hashes content-encoded bytes without application decompression; 1 MB max, one 7-second fetch deadline, max three redirects, ports 80/443 only.

Check declared publication views before release. Compare 2-8 article, registry and API views against canonical URL, content, release and source-set digests; flag stale, withdrawn or substituted views. No live fetch, release promotion or semantic content verification.

Check declared publication views before release. Compare 2-8 article, registry and API views against canonical URL, content, release and source-set digests; flag stale, withdrawn or substituted views. No live fetch, release promotion or semantic content verification. New modular adapter: retained result recovery for 24 hours, minimal receipt metadata for 90 days. Existing live route unchanged.

The complete daily observation history of third-party x402 endpoints since first observation, with the Merkle root of each day. Each root is chained to the previous day and timestamped into Bitcoin via OpenTimestamps, with explicit historical integrity limitations. A timestamp alone does not verify the underlying records. The most recent 7 days are free at /v1/datasets/day/{day}; the manifest and verification method are free at /v1/datasets/manifest.

Fresh probe of your endpoint plus an Ed25519-signed quality attestation (compact JWS, 24h TTL) with explicit observation limits. A signature is not proof of paid delivery.

Is this x402 endpoint safe to pay? Vet an unknown seller BEFORE paying: pay/avoid verdict, 0-100 trust score, live 402 probe, scam flags (payTo hijack, bait-and-switch pricing, honeypot, wrong asset) and an on-chain check of the receiver on Base. Reads x402 v1 (body) AND v2 (PAYMENT-REQUIRED header) — body-only checkers call live v2 services dead. ?endpoint=url; omit for a trust-ranked catalog.

Delete a stored secret by id + access token.

Retrieve a stored secret by id + access token. Returns the decrypted value, label and read count.

PyPI package risk report for agents: package metadata, latest release recency, license, project links, yanked release and supply-chain risk flags.

Run a bounded deterministic preflight scan for possible private keys, secret assignments, permissive CORS, debug mode, insecure HTTP, and invalid JSON. Not a comprehensive security audit.