Security x402 offerings

Offline validator for an Indian PAN (Permanent Account Number): normalizes input to uppercase, checks the 10-character AAAAA9999A pattern, and validates the 4th character against the known holder-typ…

Review permission changes before an agent release. Compare two explicit allow-only sets by tool, action and exact resource; report additions, removals and wildcard additions. Does not resolve IAM inheritance or wildcard containment, or authorize execution.

Review permission changes before an agent release. Compare two explicit allow-only sets by tool, action and exact resource; report additions, removals and wildcard additions. Does not resolve IAM inheritance or wildcard containment, or authorize execution. New modular adapter: retained result recovery for 24 hours, minimal receipt metadata for 90 days. Existing live route unchanged.

Ask whether a tool call should run automatically, need human confirmation, or be denied, given the user's request - returns allow/ask/deny with a probability. Advisory only: like any LLM-based judge it is sensitive to prompt injection in the request or tool call, so the calling agent must keep the final decision, not delegate it outright. Powered by Jev (TypeSafe System One). $0.001 per call, no OpenRouter or TypeSafe account needed. Try GET /guard/sample.

Prueft Text oder Quelltext auf 20 Arten von Geheimnissen: AWS, GitHub, GitLab, Slack, Stripe, OpenAI, Anthropic, Google, SendGrid, Twilio, npm, private Schluesselbloecke, JWT, Zugangsdaten in URLs, D…

Prueft eine Adresse auf Technik, Geschwindigkeit, Sicherheit, Auffindbarkeit und Barrierefreiheit. Je Abschnitt strukturierte Werte, dazu Punkte von 0 bis 100 und eine Befundliste, in der jeder Eintr…

Vertrauensprüfung fremder x402-Endpunkte

Findet E-Mail, Telefon, IBAN mit Pruefsumme, Kreditkarte mit Luhn-Pruefung, IP-Adressen, Steuer- und Umsatzsteuernummern, Kennzeichen, Sozialversicherungsnummern und Geburtsdaten mit Kontextwort. Lie…

Liefert ASN, Netzbetreiber, Land, Reverse-DNS, Bogon-Status, Tor-Exit-Erkennung und eine Rechenzentrums-Wahrscheinlichkeit. Grundlage für Betrugs- und Moderationsagenten.

Erkennt CMS, Shop, Framework, Server, CDN, Analytics, Consent-Tool, Zahlungsanbieter und Marketing-Stack aus Headern, HTML und Skript-URLs. Liefert Trefferliste mit Kategorie, Beleg und Sicherheit.

Syntax, Domain, MX-Einträge, Wegwerf-Anbieter, Rollenkonto, Freemailer, Tippfehler-Vorschlag und Zustellwahrscheinlichkeit. Optional SMTP-Handshake für Postfachprüfung.

Prüft MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS am Mailserver und DNSSEC einer Domain und leitet daraus Spoofing-Risiko, Punktzahl und Befunde ab. Jeder Befund trägt einen fertigen DNS-Datens…

Wertet robots.txt fuer 23 benannte KI-Agenten aus, mit korrekter Gruppenauswahl und der Regel, dass die laengste passende Anweisung gewinnt. Prueft zusaetzlich X-Robots-Tag, Meta-Angaben, noai, Bezah…

Bestimmt den tatsaechlichen Dateityp aus der Signatur, erkennt Office- und Archivinhalte am Verzeichnis, meldet Makros, eingebettete ausfuehrbare Dateien, Pfadwechsel im Archiv, JavaScript und Starta…

JWT Decode API. Decode JWT header and payload without verifying the signature. Returns algorithm, claims, expiration, issued-at, not-before timestamps, and token validity hints. Useful for agents, de…

Email validation for syntax, DNS/MX, disposable domain, role-based address, free provider and provider-typo checks. Returns normalized email, deliverability verdict, risk score, typo suggestion and s…

IP Lookup API. Enrich an IPv4 or IPv6 address with geolocation, ASN, ISP, organization, reverse DNS, timezone, and proxy/mobile/hosting indicators. Useful for security, fraud checks, abuse triage, bo…

Cryptographically shuffle 1..256 finite JSON scalar values. Price: $0.003 USDC per call.

Hash a string: sha256, sha512, sha1, md5, CRC32, base64 checksum - crypto hash API for UTF-8 text

Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.

Email verification and deliverability check without sending anything: syntax, MX records, disposable-domain detection (121k+ known domains), role-account and free-provider flags. JSON verdict with a bounce/deliverability risk level. Validate emails for signup fraud prevention, list hygiene and lead qualification. $0.004 USDC per call, pay via x402, no API key.

Due-diligence check on any domain: registration age via RDAP, registrar, DNS posture (A/MX/NS), SPF and DMARC presence, SSL certificate history, and risk flags like newly-registered or no-mail-setup. One call, one JSON verdict. $0.008 USDC per call, pay via x402, no API key.

Inspect a public URL: HEAD redirect trace, DNS A/AAAA observations and security headers in one report. At most 4 targets, no page body. Includes timestamps, partial-result warnings and factual findings; no safety or reputation verdict.

Complete vetting report for one service: trust score breakdown, daily uptime for 30 days, latency p50/p95, probe history, price and pay-to changes, security findings.