Security x402 offerings
Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Offerings
Page 42 of 173Score a signup for fraud risk. Send email only, ip only, or both; at least one is required. Email checks cover disposable and free provider detection, MX validation, gibberish name detection, domain liveness, and known business signals. IP checks cover VPN, proxy, Tor, residential relay, datacenter, and bogon detection. Returns a decision of allow, review, or block with a risk score and itemized signals.
Score a signup for fraud risk. Send email only, ip only, or both; at least one is required. Email checks cover disposable and free provider detection, MX validation, gibberish name detection, domain liveness, and known business signals. IP checks cover VPN, proxy, Tor, residential relay, datacenter, and bogon detection. Returns a decision of allow, review, or block with a risk score and itemized signals.
Case-insensitive substring search across 61,000+ public C3 community fraud reports. The whole query is matched as one phrase: at least 3 characters, no wildcards. Returns up to 25 of the newest matches; there is no paging, so refine the term (address, domain, handle or keyword) to narrow results.
Extract issue/issuewild hosts from CAA record texts. Call when inventorying allowed CAs from CAA answers. Returns hosts list as deterministic JSON for $0.001 USDC via x402 on Base. First-party local math only—no RPC, live market feed, API keys, storage, or mediagen. Advisory only; the caller owns capital, risk, and production controls.
Downloads one HTTPS image through the hub SSRF guard, then asks the configured OpenAI vision model for strict structured JSON. It reports observed features and readable markings, at most five ranked type candidates, and conductor material, core count or cross-section only where the image supports them; unknown values remain null or unknown. The result is identification assistance, not an electrical safety clearance, approval, voltage-state determination or substitute for inspection and testing.
Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion.
Audits Base ERC-20 token contracts for honeypot risks, buy/sell transfer taxes, liquidity depth, and prompt injection traps in token metadata.
Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps.
Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion.
Screens EVM and Solana wallet addresses against OFAC SDN sanctions lists, Lazarus Group attributions, and known DeFi exploit/drainer blacklists.
Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains.
Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors.
JSON canonicalization — canonicalize structured data with RFC 8785 JCS; return canonical JSON text, UTF-8 byte length, and SHA-256 hash for integrity checks, signature preparation, and deduplication.…
Probe one public endpoint and diagnose whether agents can discover and parse its unpaid x402 challenge.
Mint a stateless captcha challenge to gate your OWN endpoint: returns a human prompt plus a salted sha256 answer hash you keep and verify later (sha256(salt + normalized answer) === answerHash) - no server state, no shared secret. Types: math (arithmetic) or alnum (character code), difficulty 1–3. Deterministic tooling for running bot protection, not defeating it.
Validate a Cloudflare Turnstile, Google reCAPTCHA, or hCaptcha token server-side. You pass your OWN provider secret plus the token from the client; we relay to the provider's siteverify endpoint (never logged) and return the normalized verdict (success, hostname, action, score, error codes). The legitimate backend half of bot protection - no solving, no bypass.
Validate a payment card number (Luhn checksum) and detect the brand. Numbers are not stored or logged.
Search public Certificate Transparency logs for every cert issued to a domain. Two independent public CT search services are queried, the second only if the first is slow or fails, and `source` names the one that answered (their coverage windows differ). Returns the cert list plus a deduped subdomain set extracted from the SANs - the fastest way to enumerate subdomains for a security audit. No key required.
Change watch for certificate sans: runs the check and compares it with the result from your previous call for the same domain (kept 90 days), returning the current answer, changed true/false, exactly which fields changed with before/after values, and when it was last seen. Call it on a schedule to be told when subject alternative names of the newest certificate for a domain from certificate-transparency logs changes. $0.02 per check.
Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call.
Keccak Merkle tree and proof builder — generate indexed sorted-pair inclusion proofs with domain separation and explicit odd-node promotion.
Keccak Merkle proof verifier — validate inclusion plus exact leaf index and count proof shape for the Atlas sorted-pair tree profile.
Deterministic risk screen of an ERC-20 token from on-chain bytecode and metadata, no third-party risk API. Flags privileged or abuse capabilities: blacklist/freeze, owner mint, pausable transfers, up…