Security x402 offerings

Call before paying an unfamiliar x402 endpoint to see whether anyone actually pays it. Pass ?url=<endpoint URL>. ProvenPaid reads public Base data for the endpoint's receiving address: distinct payers, x402-style payments, repeat-payer share, payer concentration and coverage over 30 days. It also validates the x402 challenge (v1/v2; MPP detected) without paying. Each item has source and timestamp. Evidence, not a verdict. Not charged for invalid or unsafe URLs.

Has a ransomware group claimed this company or vendor? Input: ?q=acme.com or ?q=Acme Corp (domain or company name). Returns found, claim_count and each claim's group, claimed/first-seen dates, country, sector and source with license. $0.01 USDC on Base. Useful for vendor due diligence. These are unverified claims from criminal leak sites, not proof of a breach. For many domains at once use /v1/batch ($0.05).

Dragons Eye Lookup: Bulk vendor check: up to 100 vendor domains or company names for ransomware leak-site claims. One call checks up to 100 vendors (domains or company names, separated by newlines or semicolons; commas work for a list of domains) and returns, per vendor, matching ransomware-group claims (group, dates, sources). Claims only: risk levels, summary and actions are in /v1/vendor-report. Unverified claims from criminal leak sites; commercially reusable sources only. If the source fail

Get the newest ransomware leak-site victim claims, optionally for one group. $0.01 USDC on Base per call. Returns up to 10 of the newest claims. Country and sector are often null. Commercially reusable sources only. Don't use this for checking a specific company; use /v1/lookup.

Dragons Eye Lookup: Batch vendor exposure check: up to 25 domains for ransomware leak-site claims. One call checks up to 25 vendor/supplier domains (comma-separated) and returns, per domain, any matching ransomware-group claims. Unverified claims from criminal leak sites; commercially reusable sources only. found:false is not proof of absence.

Look up a ransomware group profile: aliases, first seen and newest claims. $0.02 USDC on Base per call. Returns aliases, first observation by RansomLook and a sample of newest claims. Unknown groups return 404, not charged. Don't use this for tools, TTPs or momentum; use /v1/group-intel.

Look up passive DNS resolution history and reputation for a domain or IP address. For a domain: which IPs it has resolved to over time. For an IP: which hostnames have resolved to it, plus malicious/suspicious vendor detection counts. Call to pivot from an indicator to its infrastructure history during an investigation.

Check whether a phone number appears in criminal marketplace infrastructure or pivots to known scam wallets, kits, or actors, and whether its SIM was recently swapped (Twilio Lookup v2, cached 24h). Returns a high, medium, or unknown verdict with timestamped evidence reasons.

Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis. Returns an async analysis ID to poll. Call before an agent clicks, fetches, or shares a link from an untrusted source.

$0.0001/call. Decode a JWT's header and payload (no verification) — inspect claims fast. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

$0.05/document. Parse a government ID (passport, license) into typed fields (Textract AnalyzeID). Parsing only — for verification + liveness use /v1/idverify. 155 tools, one balance — relaystation.ai

$0.005/image. Flag unsafe or inappropriate image content (Rekognition moderation) — categories with confidence. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

$0.001/page. Password-protect a PDF with 256-bit AES and set permissions. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

$0.0002/MB. Compute a keyed HMAC (SHA-256/512/1, MD5) — the key is never logged. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

$0.005/image. Detect protective equipment — face, hand, head covers — on people in an image. Site-safety audits by API. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

Complete AI-powered smart contract security audit - analyzes code against checklist and provides detailed findings with severity levels. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} every 5-10 seconds until status is 'completed'. Estimated time: ~120 seconds. PRICING (based on model): DeepSeek: $0.15 USDC, Sonnet: $0.25 USDC, Fable: $0.70 USDC. Payment must match selected model.

AI-powered smart contract audit checklist matching - analyzes contract code and returns relevant security checklist items. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} every 5-10 seconds until status is 'completed'. Estimated time: ~90 seconds. PRICING (based on model): DeepSeek: $0.05 USDC, Sonnet: $0.15 USDC, Fable: $0.30 USDC. Payment must match selected model.

RobotsShop Trust Index — live re-probe of one URL

One RFC 3161 timestamp receipt over a digest you supply. No account and no API key: the response is the whole deliverable. Your data is never sent - only its hash - and nothing about the request is r…

One RFC 3161 timestamp receipt over a digest you supply. No account and no API key: the response is the whole deliverable. Your data is never sent - only its hash - and nothing about the request is retained here.

SECONDED checks EVM transactions, permits, tokens, agent registrations and suspicious messages before you sign or act. Two rival-lab models must agree; NOT VERIFIED means pause or ask a human. Choose…

Hashes of a text or base64 input (up to 1 MB): MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC-32, and HMAC-SHA-256 or HMAC-SHA-512 when a key is given. Hex and base64 output. MD5 and CRC-32 are implem…

Safety check of a text or a chat turn with Llama Guard 3: safe or unsafe, and the violated categories (S1 to S14, named in plain words). Send text, or messages (up to 20 turns). Classifies only; it d…

Replaces personal data in a text with placeholders: e-mail addresses, phone numbers, IBANs (mod 97 checked), payment card numbers (Luhn checked only), IPv4 addresses and, with names true, person name…