Security x402 offerings

Retrieve one public C3 community fraud report by its report ID.

Batch screen up to 50 blockchain addresses in one call for a flat $0.40 USDC (equal to $0.008 per address when you send 50). For fewer than 40 addresses, single /screen calls at $0.01 each cost less. Each result has the same action, sanctions (official OFAC SDN list only) and risk fields as /screen. Results are keyed by address; coOccurringAddresses is empty and reports are limited to 5 per address.

Legacy minimal alias of /screen. Returns result 'caution' (with reportCount, crimeTypes and any OFAC SDN sanctions entries) when reports, an OFAC SDN match or a current Tether/Circle freeze (rated HIGH) are found, otherwise 'no_c3_reports', plus action, actionReason, sanctioned, frozen and freezes. 'no_c3_reports' is not a guarantee that the address is safe.

List top C3 contributor accounts ranked by reports, points, cases, and badges. All anonymous submissions share one account.

Deterministic canonical JSON + SHA-256 fingerprint

Check if an address or identity exists in database. Use ?address=0x... or ?identity=@handle (works for Twitter, email, any username)

Heuristic risk flags for a BNB Smart Chain contract from free public data: Sourcify verification, upgradeable proxy + admin, owner type, mint/pause/blacklist/fee selectors, bytecode size. Not an audit or financial advice.

Silicon DNA agent identity classification. Behavioral timing analysis: CPU jitter entropy (L0), Shannon entropy (L2), Spearman rank correlation (L3) to classify as HUMAN, LEGIT_AGENT, MALICIOUS_BOT, SYBIL, or UNKNOWN (no evidence either way). Per paper Section 5.1. (GET variant: parameters in the query string.)

BotCheck — Per-request traffic-integrity classification. POST JSON {headers:{...}, signals:{...}} -> deterministic {verdict:human|agent|bot|unknown, confidence:0-100, signals:[{name,value,weight,reas…

Look up the known breaches an email address appears in, returning breach METADATA only (name, date, data classes) and never passwords or leaked personal data. Uses the keyed Have I Been Pwned account API; when no API key is configured the route refuses with 503 and charges nothing, and the keyless password and domain routes still work. Breach indicators, not a guarantee.

Look up the known breaches an email address appears in, returning breach METADATA only (name, date, data classes) and never passwords or leaked personal data. Uses the keyed Have I Been Pwned account API; when no API key is configured the route refuses with 503 and charges nothing, and the keyless password and domain routes still work. Breach indicators, not a guarantee.

Composite account-takeover risk score (0-100) fusing a privacy-preserving password exposure check with a domain's known breach history. The password is hashed locally (k-anonymity, never transmitted). Returns ato_risk_score, a category, per-signal reasons and the raw signals so the agent can re-rank. Risk indicators, not a guarantee.

List the known public data breaches that affected a domain, from the Have I Been Pwned breach catalogue. Returns normalized breach metadata (name, date, account count, data classes, stealer-log and verified flags) plus a summary. This is which known breaches touched the domain, not whether a specific account is compromised. Breach indicators, not a guarantee.

Check whether a password has appeared in known data breaches, using k-anonymity: the password is hashed locally and only a 5-character hash prefix is sent upstream, so the plaintext is never transmitted, logged or stored. Accepts a password, a SHA-1 hash or an NTLM hash. Returns compromised, breach_count and the hash prefix. Credential-exposure indicators, not a guarantee.

Check if a password has appeared in known data breaches using the HaveIBeenPwned Pwned Passwords API with k-anonymity — the full password is never transmitted, only a 5-character SHA-1 hash prefix — returns breach count and a risk classification so agents can enforce password policies without storing or exposing credentials.

Identify and verify users from breath biometrics using machine learning for secure, contactless authentication.

Timestamp and verify evidence on-chain. Prove what your agent saw and when; verifying is free.

Compare Source keyword register for deployment discussion passages with verified-note crosswalk; literal vocabulary only. against a bounded caller-supplied previous snapshot and return exact change witnesses. Baseline is caller supplied and is never authenticated as historical server output. Pure bounded timing/source-quote validation runs before payment. Exactly one current motor call, zero baseline provider calls.

Compare Partition verified actions by a caller-supplied owner allowlist. against a bounded caller-supplied previous snapshot and return exact change witnesses. Baseline is caller supplied and is neve…

Compare Find quote-verified action items lacking a literal deadline. against a bounded caller-supplied previous snapshot and return exact change witnesses. Baseline is caller supplied and is never authenticated as historical server output. Pure bounded timing/source-quote validation runs before payment. Exactly one current motor call, zero baseline provider calls. Full current provider disclosure retained; baseline is not submitted to the provider.

Give this tool a list of domain names and it will instantly check each one's DMARC email security record. DMARC is a standard that tells email providers how to handle fake or spoofed emails pretending to come from your domain. For each domain you submit, you get back whether a valid record exists, what the policy is (none, quarantine, or reject), whether reporting addresses are set up, and the full raw record text. Perfect for auditing many domains at once without any setup.

Store a secret (API key, webhook payload, signed URL) encrypted with WebCrypto AES-256-GCM and share a claim URL that yields the secret exactly once. A Durable Object serializes reads so single-use d…

Store a secret (API key, webhook payload, signed URL) encrypted with WebCrypto AES-256-GCM and share a claim URL that yields the secret exactly once. A Durable Object serializes reads so single-use delivery is race-free, and every burn returns an Ed25519-signed attestation. Creating a vault requires x402 payment; the recipient's claim read (GET /v/:vault_id) is free.

Check which explicit assumptions became stale before an autonomous machine commits a consequential action.