Browse indexable security x402 offerings, including provider, method, and service details.
4282 indexable offerings in this category.
Verify a Sign-In-With-Ethereum (EIP-4361) signature. Stateless oracle: checks the signature against the message and returns the wallet address + chainId. Never mints sessions or consumes nonces. Get a checksummed address first via wallet_checksum.
Verify a World ID 4.0 proof via the Worldcoin Developer Portal API. Generates an RP signature server-side, then proxies the full IDKit proof to developer.world.org. Returns { valid, nullifier, worldcoin_response }.
Batch Semaphore Proof Verifier: Batch verify up to 10 Semaphore proofs in a single request. Returns per-proof results with total count and average duration. Pay per call in USDC on Base via x402 — PO…
Semaphore ZK Proof Verifier: Verify a Semaphore ZK proof locally using Groth16 (embedded official vkey). No external dependency. Send the proof object from @semaphore-protocol/proof generateProof(). …
NIP-98 Nostr Auth Verifier: Verify a NIP-98 Nostr HTTP auth event. Returns the signer pubkey. Stateful replay protection: each event id can only be verified once. Pay per call in USDC on Base via x40…
Healthcare text de-identification engine (demo endpoint — SYNTHETIC/TEST DATA ONLY, never send real PHI; nothing is stored). Strips names, DOBs, member/claim IDs, phones, emails, addresses, SSNs; dat…
Hash: SHA-256, Keccak-256 (the Ethereum hash) or BLAKE2b-512 of UTF-8 text or hex bytes, as hex and 0x-hex. Use when you need to answer: What is the SHA-256, Keccak-256 or BLAKE2b hash of this input? Input up to 2 KB; over that is a 400, never billed.
Prompt injection check: no_injection_found, suspicious or malicious for up to 4,000 characters, with the matched rules (role tags, hidden Unicode, encoded payloads) and a model's view. Use when you need to answer: Does this text contain a prompt-injection attempt?
Email verification: syntax, MX, disposable-domain, role-account and free-provider checks with a deliverable_likely, risky or undeliverable verdict and its reasons. Use when you need to answer: Can this email address plausibly receive mail? No SMTP probe.
Get detailed intelligence about a phone number including carrier, line type, location, risk score, and breach data.
Verify an email address. Uses one verifier credit on all attempted verifications.
Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated o…
Safely follow bounded public HTTP redirects and compare the final URL with the expected target; return a deterministic verdict and reason code.
Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.
Up to 25 counterparty risk checks in one call, billed per item, each with a signed ES256 attestation.
Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signe…
Up to 25 counterparty risk checks in one call, billed per item, each with a signed ES256 attestation.
x402engine — OpenAI's higher-compute Luna tier for efficient long-context reasoning
Exact-match OFAC SDN wallet screening for sanctioned digital currency addresses. Screens one wallet address against Treasury's public SDN advanced XML and returns hit or clear status, asset coverage, sanctioned entity metadata, sanctions programs, list source, listing date, and a manual-review signal for onchain payment and treasury controls
Domain & email audit — SPF, DMARC, DKIM, MX, TLS certificate, HSTS and security headers, scored 0-100
x402 seller trust leaderboard — every catalogue origin probed outside-in and scored 0-100, with the verdict spread and the most common reasons points were lost
x402 seller trust leaderboard — every catalogue origin probed outside-in and scored 0-100, with the verdict spread and the most common reasons points were lost
Check an x402 endpoint before paying it. Give it any x402 URL: it makes the unpaid request, decodes the 402 challenge, reads the origin's .well-known/x402 and openapi.json, inspects the payTo address on-chain (USDC inflows, distinct senders, EOA vs contract vs smart-wallet delegation), and returns a 0-100 trust score with buy/watch/avoid plus the evidence and the penalties behind every point ...
Domain & email audit — SPF, DMARC, DKIM, MX, TLS certificate, HSTS and security headers, scored 0-100