Security x402 offerings

Verify a genesis402 signed receipt — signature and hash-chain position — Genesis402 / UnyKorn Operator Network

BLAKE2s-256 digest of text or raw bytes — Genesis402 / UnyKorn Operator Network

SHA-256 digest of text or raw bytes — Genesis402 / UnyKorn Operator Network

SHA-384 digest of text or raw bytes — Genesis402 / UnyKorn Operator Network

Deal red-flag scan: offer text checked against published regulator warnings on prime-bank and advance-fee schemes — Genesis402 / UnyKorn Operator Network

Canonical digests — sha256, sha512-256 and blake2b of text or canonical JSON — Genesis402 / UnyKorn Operator Network

Website security-headers audit with A-F grade, cookie flags and version leaks — Genesis402 / UnyKorn Operator Network

Signed page read (0.005 USDC): the URL as clean Markdown plus an Ed25519 receipt binding its SHA-256, the provider, and the observation time. Proves what your agent read. Body: {"url": "https://..."}. Sponsored Solana accepts require a payment client that honors accepts[].extra.feePayer (for example @x402/svm ExactSvmScheme); AgentCash cannot settle that Solana rail.

Seller wash risk and wallet reputation for a Solana x402 merchant: wash label, fleet %, payer count, plus tier + score. 0.001 USDC. No signed V7 receipt (use GET /v1/intel/trust for the portable proof). Free preflight is allow|warn|block only. Sponsored Solana accepts require a payment client that honors accepts[].extra.feePayer (for example @x402/svm ExactSvmScheme); AgentCash cannot settle that Solana rail.

Pre-sign safety verdict for a raw EVM transaction. Decodes the calldata against a known-signature registry, shows known-pattern effects (approval delta, transfer target), dry-runs eth_call for revert, checks scam-blocklist and approval-hygiene, and returns allow, warn or block plus a 0-100 risk. Risk indicators, not advice.

One pre-sign safety verdict (GREEN, REVIEW or BLOCK) fusing transaction, signature, address, URL and token checks for AI wallet agents.

Generate common typo and look-alike variations of a domain and check which are already registered — catches character swaps, omissions, additions, homoglyphs, and alternate TLDs so agents can detect typosquatting and brand-impersonation domains targeting a company.

German Shepherd — Atlas — Protective companion for security awareness and threat detection.

Cool-Down — Post-work recovery routine for transitioning out of high-performance mode.

Unicode normalization and confusables check: apply NFC, NFD, NFKC or NFKD, report which forms a string is already in, list the scripts present (all Unicode scripts), and flag confusable and homoglyph characters — Cyrillic а in a Latin word, fullwidth or mathematical look-alikes, all-look-alike words — plus zero-width joiners, bidirectional overrides, invisible and blank characters. Returns per-character detail with code points, names and the ASCII character each imitates.

untrusted_guard prompt-injection triage and fencing for agent inputs. A deterministic triage layer for text your agent did not write. Peer messages, inbound mail, buyer files and scraped pag First approved purchase: 0.01 USDC total where maker terms permit; later 1 USDC plus tax. Stored ZIP download; commercial use, no redistribution. Verified by Speedbot for this version. Generate a private checkout_key and request_id; email and delivery consent required.

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.

URL safety preflight: screen a link before an agent opens it — syntax, host/IP, patterns, redirects, optional threat intelligence.

Follow a short link's redirect chain (bit.ly, t.co, youtu.be, tracking links, …) without downloading any page body: returns the final URL, the final HTTP status, and every hop with its status code and Location target. Capped at 5 redirects; every hop is SSRF-re-validated, so chains that dive into private networks are blocked. Lets agents pre-flight links before fetching or citing them.

Trace an HTTP redirect chain to its final destination without downloading page bodies. Returns every hop (URL + status), the final URL, and safety warnings — link-safety grounding for agents before they visit or cite a URL. Clean JSON.

Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/BLOCK verdict before your agent trusts the link.

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry an…

Score how likely a URL is to be phishing or untrustworthy using offline lexical and structural heuristics (no network lookups). Checks raw-IP hosts, embedded credentials, punycode/homoglyph labels, b…

Estimates the risk of failure based on usage patterns.