Security x402 offerings

ssl certificate checker, SSL certificate validator, check SSL certificate, SSL certificate expiration, HTTPS certificate check, SSL chain analyzer. Get full TLS handshake details for any domain: issuer, subject, SANs, validity dates, days remaining, fingerprint, serial, protocol, cipher. For AI agents, security audits, monitoring, HTTPS pipelines, tls certificate check, certificate expiry Accepts payment on Base or Solana — either network works.

Random bytes generator, cryptographic random, CSPRNG, secure random, random token, nonce generator, session key, API secret generator, random hex base64. Generate cryptographically secure random bytes in hex or base64 encoding. Accepts payment on Base or Solana — either network works.

Ysaere Agent Hash Stamp — $0.02 USDC, no account needed. Returns a signed hash_only receipt and verify_url. Free GET resolve and proof. Integrity, not factual truth. Account version: Notary Receipt, …

Ysaere Agent Hash Stamp — $0.02 USDC, no account needed. Returns a signed hash_only receipt and verify_url. Free GET resolve and proof. Integrity, not factual truth. Account version: Notary Receipt, 1 credit ($0.10).

Audit a CI workflow for what it leaves movable or undeclared. Reports actions pinned to a tag rather than a commit - a tag can be moved by whoever owns the action, so the code a step runs can change …

Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport…

Is this merchant safe to depend on? Audits up to ten x402 endpoints in one call and returns a verdict — ready, partially ready or not ready — with the specific blockers. Checks each endpoint serves a…

Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a…

Deterministically detect and redact PII and personal data in supplied text with overlap-safe matching for emails, phone numbers, validated IPv4 and IPv6 addresses, Luhn-valid payment cards, valid-che…

Detect likely leaked API keys, tokens, private-key headers, JWTs, and credential assignments in caller-supplied source or configuration text. Return type, line, fingerprint, and a fully redacted prev…

Check a public domain's email authentication and anti-spoofing posture using MX, SPF, DMARC, caller-selected DKIM, MTA-STS, TLS-RPT, and BIMI DNS evidence.

Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning

AI-powered scanner that detects API security vulnerabilities, rates severity, and suggests remediation steps.

BitBooth Webhook Signature Verify: pay 0.005 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Const…

BitBooth Webhook Signature Verify: pay 0.005 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it.

Analyzes applications and flags potential risk factors.

Paid approval revoke mcp route for autonomous agents. Returns JSON with provenance, route-specific evidence, and machine-readable fields. Buyer-intent match: spender reputation API, approval revoke intelligence. Price 0.05 USDC on Base via x402. Demo/preview: https://approval-revoke-mcp.mtree.workers.dev/demo/reputation. Contact: https://approval-revoke-mcp.mtree.workers.dev/contact.

Paid approval revoke mcp route for autonomous agents. Returns JSON with provenance, route-specific evidence, and machine-readable fields. Buyer-intent match: spender reputation API, approval revoke intelligence. Price 0.05 USDC on Base via x402. Demo/preview: https://approval-revoke-mcp.mtree.workers.dev/demo/reputation. Contact: https://approval-revoke-mcp.mtree.workers.dev/contact.

Which agents registered on Arc actually answer. Every endpoint every agent lists in its ERC-8004 registration file (web, A2A, MCP, x402, the file itself) is called once an hour through an address-checked fetcher: A2A cards are read, MCP servers get the initialize handshake, x402 paywalls are parsed the way a standard client would and checked against the on-chain EIP-712 domains of USDC and EURC on Arc (a wrong domain means every signature fails - we name it).

You receive EVERY address we have scored in scoreboard[], not a top-and-bottom sample, and summary.addresses states the exact count in the same response (it covers the scanner's rolling 24-hour window, so it rises and falls - which is why the live field is the promise and not a figure frozen in this text); until 2026-09-17 this returned only the best 50 and worst 50 while calling itself the full scoreboard. Arc FIRST-BUY scoreboard.

Compute SHA-256, SHA-512, SHA-1 or MD5 hashes for any text in milliseconds. Checksums, signatures and dedup for agent pipelines. Pay per call with USDC (x402) or credits - archtools.dev

Download a dated evidence pack that screens public bounty inventory for stale, fake, crowded, unfunded, or non-autonomous work and documents a reusable viability policy.

Canonical GitHub bounty viability check for agents: issue state, repo trust, payout evidence, age, claims and competing PRs. Prevents wasted coding on stale or fake rewards.

File type and MIME/media type inspector — identify bounded content by magic bytes and return SHA-256, size, and extension consistency without unpacking, malware scanning, or safety claims.