Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Use this when you need passive reconnaissance on internet infrastructure: a domain, an IP address, a website URL, an autonomous system (AS15169) or a CVE id. Price: $0.01 in USDC on Base or Solana, or $0.02 in USDG or $SWOGE on Robinhood Chain (tool price + settlement cost, minimum $0.02).
Use this before any draw other players must trust (a game between agents, a raffle, a giveaway): the server picks a secret seed and publishes its SHA-256 hash now, so it cannot change the seed later. Price: $0.003 in USDC on Base or Solana, or $0.02 in USDG or $SWOGE on Robinhood Chain (tool price + settlement cost, minimum $0.02).
chainpeek (Tanod) check a list of URLs for phishing: bulk screening of up to 1,000 links or domains against public phishing/scam domain lists. USD 0.0002 per item, at least USD 0.001 per call (1-1,000 items per call: USD 0.001-0.2). Use when an agent must match many URLs (up to 1,000) against phishing and scam domain lists in one call.
chainpeek (Tanod) address-poisoning check before a token transfer: is the recipient a lookalike (same first and last 4 hex characters) of an address in the sender's history or contacts? Use when an agent is about to send USDC or a token and must check the recipient is not an address-poisoning lookalike.
chainpeek (Tanod) phishing/scam URL screening against public domain lists (never fetched). Use when an agent is about to open or share a URL and wants it matched against phishing and scam domain lists.
imagepeek (Tanod) QR and barcode reader: decoded text, type and position of every code in an image. Use when an image holds QR codes or barcodes whose decoded text, positions or payment fields are needed.
pactlint (Tanod) contract scan, up to 3,000 nSLOC: static security analysis of Solidity code (solc + Slither + custom detectors), JSON report with file:line findings. Automated, not an audit. Use when an agent holds Solidity source and needs static-analysis findings before deploying or trusting it.
Scan a smart contract at a verified address for security issues (Ethereum or Base): static analysis of its Solidity source. Input: address, chain. Returns findings with file and line. Automated, not an audit. Use when an agent must check a contract before interacting.
pdfpeek (Tanod) PDF password protection: AES-256 encryption with permissions. Use when a PDF must be encrypted with a password and restricted permissions before sharing. Add output=url for a 24 h link.
pdfpeek (Tanod) PDF unlock: a password-protected PDF decrypted with its password. Use when an agent holds the password of a protected PDF and needs an unprotected copy to process.
sitepeek (Tanod) security headers: a score and grade (A-F) of one response's HSTS, CSP, framing, content-type, referrer, permissions, cross-origin and cookie headers. Read-only; not an audit. Use when an agent must check which security headers a site's response sets and what is missing.
toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vulnerable dependencies; JSON report. The package is never run. Use when an agent is about to install an agent skill or MCP package and wants its code scanned first.
utilpeek (Tanod) HMAC: sign a message or verify a webhook signature (sha256, sha512 or sha1). Use when an agent must sign a message with HMAC or verify a webhook signature.
utilpeek (Tanod) PII redaction: emails, phones, cards, IBANs, SSNs, IPs, crypto addresses; names and street addresses are not detected. Use when an agent must mask emails, phone or card numbers and other PII in text before storing or sharing it.
utilpeek (Tanod) cryptographic randomness: integers, floats, bytes, UUID v4, dice rolls, picks and shuffles from a CSPRNG. Use when an agent needs cryptographic random integers, floats, bytes, dice rolls, or a random pick or shuffle of a list.
utilpeek (Tanod) hashes: sha256, sha512, sha3_256, blake2b, keccak256, md5, sha1 or crc32 of text or bytes. Use when an agent needs a SHA-2, SHA-3, BLAKE2, Keccak, MD5 or CRC32 digest of text or bytes.
utilpeek (Tanod) JWT verifier: signature, expiry, audience and issuer checks with a secret, PEM key or JWK Set. Use when an agent must check a JWT's signature and exp, aud and iss with a secret, a PEM key or a JWK Set.
Decode a JWT: header, payload and claim times of a token, not verified (utilpeek, Tanod). Use when an agent must read a JWT's header and claims (exp, aud, kid) without verifying it.
utilpeek (Tanod) Unicode inspection: invisible, bidi and look-alike characters. Use when an agent must detect invisible, bidirectional or look-alike characters in a text.