Security x402 offerings

robots.txt AI-crawler access matrix: for the 2026 cohort of AI and answer-engine crawlers (GPTBot, ChatGPT-User, OAI-SearchBot, ClaudeBot, Claude-User, PerplexityBot, Google-Extended and more) reports allowed, blocked or unlisted per bot, whether the default rule blocks everything, declared sitemaps and a score. One network operation.

Focused check of a site's /llms.txt and /llms-full.txt: presence, size and llmstxt.org structural validity (an H1 title, a blockquote summary, sections of markdown links). Returns a readiness score plus fixes. Cheap sub-check of the full AEO audit.

AI agent action safety: one-cent deterministic preflight for every consequential agent command. Returns risk, matched rule ids, and an exact machine-readable escalation call: full DestructGuard evidence for medium risk or the complete Action Safety workflow for high and critical risk.

AI agent action safety: one-cent deterministic preflight for every consequential agent command. Returns risk, matched rule ids, and an exact machine-readable escalation call: full DestructGuard evidence for medium risk or the complete Action Safety workflow for high and critical risk.

ABR CLI buys a local verifier command manifest for eligible secret findings. Secrets, profile names, paths, scan reports, and provider identities stay on the user's machine.

Operational trust rating (AAA to D, trust line BBB) of an agent skill in the ClawHub/OpenClaw registry, as of today: tier, outlook, flags (unknown payee, pipes to shell, handles keys, suspicious), adoption, maturity and the x402 services the skill pays with their own ratings. Check a skill before installing it. Free today-only JSON: https://agenteconomy.report/k/<slug>.json

Agent Guild paid read (fraud_check): collusion suspicion scores, reasons and cluster identifiers Use when an autonomous agent needs to: list agents at or above a minimum collusion suspicion score; review flagged agents and their collusion suspicion reasons.

Verify an email address: syntax check, domain MX lookup, disposable-domain and role-account flags. Use before sending or storing an address.

Determine whether the bounded normalized representation of one public HTTPS webpage has changed since a caller-held baseline. Returns fingerprints and change status, not continuous monitoring, alerts, webhooks, semantic importance, AI summaries, or site-wide crawling.

Determine whether a previously accepted x402 service payment contract is still equivalent enough to proceed. Compares one live unpaid 402 challenge, using a caller-supplied GET or POST request shape, against a caller-held baseline bound to that request identity. Not uptime monitoring, a trust score, a webhook, a marketplace crawl, or a generic POST {} probe of every x402 resource.

Check text for harmful content using OpenAI moderation (omni-moderation-latest). Returns flagged status, category breakdown (harassment, hate, self-harm, sexual, violence, etc.), and confidence scores. No API key needed; pay per call via x402. Text capped at 10k chars.

RFC 3161 trusted-timestamp certification for AI agent decisions and payments — proof of what an agent decided, before it acted. Built for EU AI Act Article 14 human-oversight documentation. POST { "content": "<text>" } as JSON.

Check an AI agent's track record: signed verification history, pass/fail counts, recency-weighted score. $0.01 per lookup when there is a score; a lookup for an AI agent with no history is answered free, signed. USDC via x402 v2 (Base/Solana).

Inspects an autonomous finance agent manifest and returns readiness scores, risk flags, and policy recommendations.

Pay-per-scan AI agent-readability scan. POST { "url": "https://…" } with an X-PAYMENT header to run a scan with no account or subscription. Two tiers: $0.02 (25 pages) and $0.25 (250 pages), USDC on Base.

Agent Result Citation Check: checks bounded citation objects for URL and title fields using only bounded caller-supplied values. Call when you need a bounded agent result citation check result before paying for or accepting an x402 or agent delivery assembled from caller-supplied challenge and result metadata. Returns contract-specific checks, normalized evidence, mismatch reasons, and an explicit acceptance or rejection status for Agent Result Citation Check as versioned deterministic JSON. Pr…

Agent Result Error Shape Check: checks an agent error object for code, message, and retryability using only bounded caller-supplied values. Call when you need a bounded agent result error shape check result before paying for or accepting an x402 or agent delivery assembled from caller-supplied challenge and result metadata. Returns contract-specific checks, normalized evidence, mismatch reasons, and an explicit acceptance or rejection status for Agent Result Error Shape Check as versioned deter…

Authorize an AI-agent payment under a predelegated spending policy before funds move. Verify that the merchant's exact x402 challenge, amount, payer, payee and HTTP request are within authority already delegated to the agent. No synchronous human approval is required when the predelegated policy permits the purchase. Includes signed authorization plus post-payment on-chain settlement verification and receipt; this is not merchant reputation scoring.

Counterparty trust verification for agents: before transacting with a domain, verify its trust artifacts — DNSSEC + DNS-AID records, agent-card, live MCP endpoint, published JWKS, OASF record, x402/commerce declarations. Returns a 0-100 trust score with per-artifact evidence. $0.25 per lookup.

Is this email address real and safe to send to? Checks syntax, MX records (and null MX), disposable providers, free webmail, role accounts (info@, support@), likely typos of big providers with a suggestion (gmial.com to gmail.com), SPF and DMARC. Returns deliverable / risky / undeliverable, a 0-100 score and reasons. No mail is sent. $0.001 USDC per call.

Is it safe to pay this address? Screens a wallet or contract on Base or Ethereum against OFAC sanctions (the address and whoever controls it: contract owner, Safe owners, EIP-7702 delegate), says what it is (wallet, multisig, token, contract), activity and ETH/USDC balances. Verdict, risk score, reasons. Check an x402 payTo before paying. $0.005 USDC per call.

Deterministic JSON evidence checks with signed verification evidence

Paid agent card and well-known validator route for autonomous agents. Returns JSON with provenance, route-specific evidence, and machine-readable fields. Price 0.03 USDC on Base via x402. Demo/preview: https://agent-card-validator-mcp.mtree.workers.dev/demo/lint. Contact: https://agent-card-validator-mcp.mtree.workers.dev/contact.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.