Security x402 offerings

Purpose-bound Google reCAPTCHA observation (security) using the existing fresh Stack-Monitor. Returns stack_recaptcha_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s ti

Purpose-bound Mollie observation (payment) using the existing fresh Stack-Monitor. Returns stack_mollie_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Vimeo embed observation (media) using the existing fresh Stack-Monitor. Returns stack_vimeo_embed_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Fathom Analytics observation (analytics) using the existing fresh Stack-Monitor. Returns stack_fathom_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s time

Purpose-bound PayPal observation (payment) using the existing fresh Stack-Monitor. Returns stack_paypal_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Python observation (language) using the existing fresh Stack-Monitor. Returns stack_python_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Google Maps observation (media) using the existing fresh Stack-Monitor. Returns stack_google_maps_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound OneTrust observation (consent) using the existing fresh Stack-Monitor. Returns stack_onetrust_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Complianz observation (consent) using the existing fresh Stack-Monitor. Returns stack_complianz_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Usercentrics observation (consent) using the existing fresh Stack-Monitor. Returns stack_usercentrics_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s time

Purpose-bound CleverReach observation (marketing) using the existing fresh Stack-Monitor. Returns stack_cleverreach_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s time

Purpose-bound Alpine.js observation (library) using the existing fresh Stack-Monitor. Returns stack_alpinejs_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout.

Purpose-bound Font Awesome observation (fonts) using the existing fresh Stack-Monitor. Returns stack_fontawesome_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safeguards remain in the injected motor. One public HTTPS root domain, up to150 baseline technologies; 9s timeout

Fetch a URL and detect the full technology stack from HTTP response headers, HTML meta tags, cookies, and script patterns — returns CMS, framework, CDN, server, analytics, and security tool detections so agents can profile any web target without a browser.

Domain enrichment: firmographic data + SSL certs + subdomain enumeration + tech-stack fingerprint + verdict (domain age)

Domain age checker and RDAP trust signal: creation date, age, expiry, registrar, nameservers and DNSSEC, with machine-readable escalation into due-diligence and vendor screening.

CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.

Is someone preparing to attack this org, sector or country? Call before escalation decisions. Returns verdict escalate|watch|none, stage ladder with gaps, Dempster-Shafer belief/conflict, EWMA velocity, evidence IDs.

IOC feed from Telegram CTI channels. Filters: ip (exact lookup), type(ip|domain|url|md5|sha1|sha256|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].

Call before acting on a breach, ransomware or hacktivist claim. Tests it for recycling against earlier Telegram posts: verdict recycled|reused_template|previously_claimed|repost|no_prior_match with matching record IDs.

Call on a schedule to detect tempo changes. Acceleration of Telegram threat activity per preparation stage and category for a sector/country/org (or global): window counts, EWMA, trend accelerating|new|flat|decelerating.

Dark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset.

Call when an agent needs to know whether an organisation is being named on Telegram: access sales, credential leaks, targeting announcements, compromise claims. Deduplicated, with specificity, first/last seen and record IDs.

Breach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence.