Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Validate an email address: RFC 5322 syntax, MX records, 5,361 disposable domain detection, role-based address detection (35 patterns), free provider detection, and typo suggestion for common providers (gmial.com ? gmail.com). Returns deliverability assess…
Calculate a trust score for an email address. Assesses domain age, MX configuration, disposable domain detection, and email provider reputation. Returns a 0-100 risk score.
Check HTTP response headers for security best practices: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns grade A-F.
Domain Age Check: Find when a domain was registered: creation date, age in days, registrar and expiry. A newly registered domain is a common fraud signal.
Check a domain's SSL/TLS certificate. Returns issuer, validity dates, days until expiry, protocol version, cipher, and SAN entries.
Scan code/config/logs for leaked secrets: AWS keys, GitHub tokens, Stripe keys, API keys, private keys, DB URLs, JWTs. Algorithmic regex matching.
WCAG 2.1 accessibility audit of a URL. Checks color contrast, alt text, form labels, ARIA roles, heading hierarchy, link text, language. Mostly deterministic.
Analyze password strength: entropy, crack time estimate, character class diversity, common password check, keyboard pattern detection. Password is NOT stored. Algorithmic.
Screens a person or company for adverse news coverage across 235,000+ sources via Dilisense (primary) with Serper Google search fallback. Returns audit-grade evidence: risk level with documented thresholds, FATF-aligned category counts, top article headli…
Decode a JWT token without verification. Returns header, payload, claims, expiry status, and time until expiry. Algorithmic.
Scan code/config/logs for leaked secrets: AWS keys, GitHub tokens, Stripe keys, API keys, private keys, DB URLs, JWTs. Algorithmic regex matching.
Domain Reputation: Score a domain's reputation from 0 to 100 from its DNS, HTTPS and security setup: SPF, DMARC, HSTS, suspicious TLDs and domain patterns.
Find known vulnerabilities for a package version on npm, PyPI, Maven, Go, Cargo or NuGet, from OSV. Returns CVEs with severity and the version that fixes each.
Detect whether a phone number is mobile, landline, VOIP, toll-free, or premium rate. Essential for SMS delivery verification and communication routing.
Cookie Scan: Scan a website for cookies, tracking scripts and consent banners, and sort cookies into necessary, analytics and marketing.
Screens an individual against the Politically Exposed Persons (PEP) database via Dilisense. Coverage spans 230+ geopolitical territories aligned with EU C/2023/724 PEP function definitions and includes Relatives and Close Associates (RCAs). Returns audit-…
Basic ERC-8004 agent trust score. Returns score 0-100, component breakdown, and agent metadata. For full Sybil forensics use /trust/ instead.
Full ERC-8004 feedback forensics. Sybil detection, reviewer reputation weighting, cross-chain identity resolution, temporal anomaly flags, risk assessment. Covers every ERC-8004 registry chain plus Solana.
Crypto Market Data Integrity Attestation for agents and trading systems. Validate caller-supplied crypto market observations for causal timing, freshness, gaps, sequencing, identity consistency, and cryptographic record hashes. Returns deterministic PASS/FAIL, safe_to_use, named checks, and attestation identity. Use before analytics, research, or trading workflows. No market data acquisition or redistribution; no trade recommendation.
PII sanitization — pay-per-call entry point
PII sanitization — pay-per-call entry point
Grade a domain's email-authentication posture (SPF, DKIM, DMARC, BIMI, MX) and tell an agent whether the sender can be spoofed. Returns an A–F grade, a `spoofable` flag, the parsed DMARC policy and SPF qualifier, and specific misconfiguration issues. Use to judge a sender domain before trusting an email, or to confirm your own outreach domain won't be silently rejected by Gmail/Yahoo/Microsoft's 2026 authentication rules.
Check whether a domain's TLS/SSL certificate is valid, trusted, and not expiring before connecting to it. Performs a live handshake and returns a 0–100 score and tier (VALID/WEAK/EXPIRING/EXPIRED/UNTRUSTED/INVALID) with chain trust, days-to-expiry, signature algorithm, TLS version, and cipher quality. Use before submitting credentials, posting to a webhook, or following a payment link, to catch expired, self-signed, or MITM-risk certificates.
Verify whether a domain is legitimate and safe before transacting with it. Returns a 0–100 trust score and tier (TRUSTED/MODERATE/CAUTION/HIGH_RISK) derived from WHOIS domain age, TLD risk, DNS presence, and registrar reputation. Use to vet an unfamiliar URL, redirect target, or payment destination before sending USDC or trusting its content.