Security x402 offerings

SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex.

SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex.

Decode a JWT — parse header and payload claims without a key (no signature verification).

Is a claim independently corroborated across multiple unrelated sources, or does it trace back to a single origin? Groups matches by SOURCE (not category) so a caller sees exactly how many independen…

Batch up to 20 basic email/domain hygiene checks for one x402 settlement.

ERC-8004 Inspector agent lookup (identity + reputation) — per call

Reads a verified contract's ABI and flags owner-callable abuse functions: mint (dilute), pause (freeze exit), blacklist (block your wallet), setFee/setTax (tax you after entry), withdraw/sweep (pull funds), upgrade (swap logic). An unverified contract is itself a red flag. Diligence a price feed can't give.

On-chain contract risk score: detects upgradeable proxies and privileged functions from live bytecode. Use before trading/interacting with an unfamiliar contract.

Scores smart contracts for risk and trust using onchain analysis.

Smart contract security scan for AI agents: give a chain id and contract address, get Slither static-analysis findings (reentrancy, unchecked calls, arbitrary sends, etc.), proxy/upgradeability status and the list of owner/role-gated admin functions (mint, pause, blacklist, upgrade). Works on any Sourcify-verified contract on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB. Use before approving, depositing into or trading a token/protocol. Unverified contracts are rejected without charge.

x402 seller audit for a whole origin: finds your paid routes (GET and POST) in /.well-known/x402, /openapi.json and your own CDP Bazaar listings, then sends each one an unfunded test payment through your server and facilitator. Per-route verdict, exact rejection reason and a fix hint. Up to 40 routes, one payment.

Detects the likely real file format from filename, file creation time, file size, and the first 200 bytes of the file. Identifies common formats such as PDF, DOCX, XLSX, CSV, JPG/JPEG, PNG, WEBP, HEIC, TXT, HTML, MP3, WAV, MP4, AVI, MPEG, and WEBM, as well as about 15,000 other file types.

Delete a human profile from the vault. Near-free pricing maintains consistent x402 payment flow for wallet identification.

Create a new persistent human profile in the vault. Agent-namespaced by wallet address. Accepts initial identity, text samples, observations, and birth data.

Cookie Domain Match: evaluates host-only or Domain cookie matching for a request host using only bounded caller-supplied values. Call when you need a bounded cookie domain match result before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for Cookie Domain Match as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base or Solana. First-party, stateless, memory-…

Rules compiled into typed questions inside Taifoon's Intel TDX enclave (Phala Cloud). The answer carries two TDX quotes, both verified by Phala's verifier before you are charged: one binds the result and the enclave key, one binds that key to sha256 of your nonce. The compose-hash in RTMR3 proves which code runs. 0.001 USDC a request. Send { rules, nonce? }.

Sends a real request to any URL you provide, attaches an Origin header, and reads back all six standard cross-origin permission headers the server returns. Tells you whether cross-origin requests are…

Run a website due diligence and counterparty risk report with seven live checks in one call: DNS and RDAP registration, domain age, TLS, page metadata, technology fingerprint, hosting context, OFAC name screening, and GLEIF legal-entity lookup. Hosting context carries no threat score and an OFAC name match requires human review.

Deterministic counterparty policy decision using supplied reputation evidence and transaction limits

Known advisories for a package, or for one exact version, with severity and the versions that fix them. npm, PyPI, Go, crates.io, Maven, RubyGems, NuGet, Packagist.

Prüft am Objekt canonical den Befund selbstreferenzierende kanonische Adresse.

Prüft am Objekt canonical den Befund Wert der Meta-Robots-Angabe.

Prüft am Objekt video den Befund Wert der Meta-Robots-Angabe.

Prüft am Objekt robots-datei den Befund ausgelieferten Inhaltstyp.