Security x402 offerings

Prüft am Objekt sitemap den Befund Freigabe durch robots.txt.

CRC-32 checksum of a text string (hex), the IEEE polynomial used by zip/png/gzip.

Mask a card number for display, keeping the first six and last four digits (the PCI-permitted maximum) and replacing the rest with a mask character (default `*`).

Current trust state, rank, and multi-signal score for an AI agent on AgentCrush. Updated every 4 hours.

Verification and tier status for an AI agent on AgentCrush. Returns tier, verified flag, claim status, and last tier update timestamp.

Crime-risk verdict for a US location from public FBI UCR and NIBRS data. Give an address, a latitude and longitude, an agency ORI code, or a state, and get a 0-100 crime risk score, a low, medium, high or critical rating, a violent and property breakdown, a multi-year trend and a comparison with the national baseline, citing the reporting agency and the data as-of date. Deterministic, no AI. Aggregate risk indicators, not a consumer report.

Bind consistent protocol receipt commitments into one auditable bundle

Scam and phishing detection for crypto wallets, trading bots and social agents: check a DM, cast, tweet, email or comment before your agent or user acts on it. Returns a verdict safe, suspicious or scam, a 0 to 100 risk score, the scam type (wallet drainer, fake airdrop, phishing login, impersonation, seed phrase theft, fake support, giveaway doubling, investment fraud, pig butchering, malware), red flags with exact quotes, and advice.

Compute keccak256/sha256, a 4-byte function selector, an event topic0, or an ENS namehash/labelhash from a string or hex input.

Is this website a crypto phishing or wallet-drainer site? Checks the URL against the GoPlus phishing database and returns a plain answer plus any malicious contracts tied to it. Check before an agent connects a wallet. $0.01 per call.

Verify an EIP-191 personal_sign or EIP-712 typed-data signature and recover the signer address from public inputs (message + signature). Verification/recovery only — never signs.

Returns a full decision journal entry — directional_bias, calibrated_confidence, anomaly_score, and agreement_score — plus a decision_id, combining signal, anomaly, and calibration checks into one auditable record for agent decision pipelines. Typical agent tasks: log a BTC or ETH market call for later audit, get a calibrated confidence score instead of raw output, or verify signal agreement before acting. Chain with /api/kronos/audit to verify the outcome.

Token risk & honeypot scanner — detect honeypot contracts, rugpull, mint/tax traps and malicious or sanctioned wallet addresses on-chain via GoPlus (ETH/BSC/Base/Polygon/Arbitrum). Plus self-custody, seed and multisig setup guidance. For pre-trade safety and crypto security agents.

Crypto threat intelligence — active scam, phishing, rug-pull and wallet-drainer patterns sourced from live web intelligence, with red flags and a prioritized defense playbook. For crypto security and threat-intel agents.

Token security / rug-pull risk check for any ERC-20 (honeypot, mintable, owner privileges, tax, LP holders). Essential pre-trade safety check for trading agents.

Layer-0 ceremony slice: every rail and probe of the estate's own machine surface at the ceremony's as_of. Carries the HTTP status each returned and the ceremony artifact's .ots state; self-attestation, dated. States: INDEXED, UNCHECKABLE or UNMEASURED, with n and as_of read at request time. Free preview; verification is free.

Page through the webhook endpoints registered on this account, with their URLs, subscribed events, and enabled state. Call it to see what already receives render, media, and compose events before adding another.

Token risk screen ($0.01): 0-100 heuristic rug-risk score with flags from market data plus top-holder concentration; any Dexscreener chain (base proven).

Look up a CVE by id, or search CVEs by keyword or product: the NVD description, CVSS severity and vector (v4.0, v3.1, v2), CWE weaknesses, affected products and versions (CPE), and reference links, joined with the EPSS exploitation probability (next 30 days) and whether CISA lists it as a known exploited vulnerability (date added, due date, ransomware use). This product uses the NVD API but is not endorsed or certified by the NVD.

CVE lookup for agents: checks OSV.dev for a CVE identifier and returns severity, summary, references and a normalized risk report.

Look up a CVE by id (e.g. CVE-2021-44228) across three authoritative vulnerability feeds in one call. Query: cve (CVE-YYYY-NNNN). Returns the canonical record — description, CVSS base score + severity + vector, CWE weakness ids, published/modified dates, reference links — plus whether it is on the US CISA Known Exploited Vulnerabilities catalog (with remediation due date and known-ransomware flag) and its EPSS exploit-probability score and percentile. The exploited and EPSS sections report independently, so one feed being unavailable does not fail the call. 404 if the CVE id is unknown. For triage, prioritization, and anti-hallucination on vulnerability claims.

Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, with MITRE's required copyright and license notice.

CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affected products, and references, filterable by severity and source. For vulnerability triage and dependency risk checks. Keyless.

Look up a vulnerability by CVE or GHSA id (NVD: description, CVSS score and vector, CWE, CISA known-exploited flag; OSV: affected packages and fixed versions) or check a package version for known vulnerabilities via OSV.dev (npm, PyPI, Maven, Go, crates.io, RubyGems, NuGet, Packagist, Debian ...). Params: cve_id, or package + ecosystem (+ version, recommended), limit (default 20).