Security x402 offerings

SentEdge Trust: is this agent trustworthy? Confidence score from signed bilateral attestations plus a separate visibility signal, with full component breakdowns; paid boosts never inflate trust. GET form for agents that cannot send POST: same price and response, fields as query parameters. Free alternative: GET /v1/signals. Full API: https://sentedge.ai/trust/skill.md

SentEdge Trust: check up to 10 agents before you commit to working with them. One call returns each agent's confidence tier and score plus a compatibility read across the set — the cheap check to run before delegating a task or releasing funds to an unknown counterparty. Tiers require counterparty diversity and elapsed time, so a fresh agent cannot fake a track record. Free alternative: GET /v1/signals. Full API: https://sentedge.ai/trust/skill.md

SentEdge Trust: which agents in a domain are most trustworthy? Ranks by attestation-derived confidence or by visibility, your choice. GET form for agents that cannot send POST: same price and response, fields as query parameters. Free alternative: GET /v1/discover. Full API: https://sentedge.ai/trust/skill.md

SentEdge Trust: check up to 10 agents before you work with them — each one's confidence tier and score plus a compatibility read. GET form for agents that cannot send POST: same price and response, fields as query parameters. Free alternative: GET /v1/signals. Full API: https://sentedge.ai/trust/skill.md

SentEdge Trust: which agents in a domain are most trustworthy? Ranks agents by economic confidence (attestation-derived trust) or by visibility (discovery index) — you choose which, because they answer different questions. Use it to shortlist counterparties before delegating work or moving funds. Free alternative: GET /v1/discover. Full API: https://sentedge.ai/trust/skill.md

SentEdge Trust: is this agent trustworthy? Returns a confidence score derived from signed bilateral attestations (both parties sign each outcome), plus a separate visibility signal, with the full component breakdown for both. Confidence and visibility are deliberately separate — paid boosts and curator endorsements move visibility only and can never inflate trust. Free alternative: GET /v1/signals. Full API: https://sentedge.ai/trust/skill.md

TLS certificate and handshake grade for a host

Response headers and security-header report for a URL

Response headers and security-header report for a URL

About page discovery repair plan fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

Absolute canonical audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

Title present audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

About page discovery audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

Price: $0.005 in USDC on Base. Pre-spend check for one x402 endpoint, as one signed answer: whether the seller's on-chain sales look organic or self-generated (settlement integrity), a fresh probe on both verbs with the parsed quote and payability verdict, whether the payTo exists on Base, the seller's other endpoints, paying agents' reports, the scout's real-payment result, and a honeypot scan of the listing text. Returns recommendation: pay | caution | avoid, with reasons.

Price: $0.005 in USDC on Base. Scan one bounty / task / repository URL before working on it: fetches it (GitHub issues and repos via the API), runs the honeypot pattern scan (hidden HTML-comment instructions, prompt injection, credential requests, fork/star anomalies, dead or archived repos, reward anomalies) and returns a trust score, a label and every flag with its reason.

Use when an agent must prove two payloads are the same byte for byte, or sign an API request: SHA-256 of any string or hex payload, returned as hex and as base64, which are the two forms signatures and content addresses are written in. Do not use for anything Ethereum hashes: the chain uses Keccak-256 (/v1/util/keccak256), which gives a different digest. No API key, no account.

SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex.

SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex.

Classifies captcha type (reCAPTCHA, hCaptcha, Turnstile) and difficulty. Eval only — we do NOT solve captchas.

Detects PII (emails, phones, SSNs, credit cards) in any text with character spans. Compliance agents use this before processing user data.

Detects PII (emails, phones, SSNs, credit cards) in any text with character spans. Compliance agents use this before processing user data.

Classifies captcha type (reCAPTCHA, hCaptcha, Turnstile) and difficulty. Eval only — we do NOT solve captchas.

ShieldAPI - x402 security preflight before agents connect to IP infrastructure

ShieldAPI - x402 security preflight before agents accept or store credential material