Security x402 offerings
Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Offerings
Page 50 of 173Domain Intel ($0.012): domain identity & trust posture in one call — RDAP registration data (registrar, creation/expiration/last-changed dates, status, nameservers, or a clean not-registered result), live DNS email-authentication read (MX/SPF/DMARC/NS), and a heuristic posture summary (e.g. newly-registered + no SPF/DMARC = elevated impersonation risk). Fetched live from IANA's RDAP bootstrap + the TLD registry's own RDAP server, and this server's own DNS resolver (no third-party DoH relay).…
Supporting meta: public-origin rotation chain for THIS brand. Secondary to Signal.
dappgrade score — front-end integrity verdict for an onchain app, looked up by contract address. Inspects the app's public web front-end, not contract bytecode or admin control. Returns ok / caution / avoid / unknown with the coverage the verdict rests on.
Check an open-source package for known vulnerabilities via the OSV database (Google Open Source Vulnerabilities). Pass package name, ecosystem (npm, PyPI, Go, crates.io, Maven, RubyGems, etc.) and optional version. Returns vulnerability IDs, summaries, severity and fixed versions. Essential pre-install check for coding agents.
Datakoot Security Intel: Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. $0.01 USDC per call, charged only on success.
Datakoot Security Intel: Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. $0.01 USDC per call, charged only on success.
Newest npm security advisories as JSON: severity, CVSS 3.x and 4.0 scores and vectors, EPSS exploit odds, CWEs, affected packages, vulnerable ranges, first patched version, and a fix_status flag for those no upgrade fixes. Merged from GitHub Advisory Database's newest-published and newest-revised orderings, so a new score or widened range on an old advisory reaches you. Add ?since=<ISO-8601> for only what changed; an empty delta is refused free, so polling costs nothing until there is news.
DCL Trust Oracle guardrail before a tool call. POST JSON {"response","agent_id","task_type","request_digest"}. Policy evaluation flags only: "ignore previous instructions", "jailbreak", "bypass safety". COMMIT means the action may proceed. NO_COMMIT means do not execute the checked action. Not a general prompt-injection or agent-safety classifier.
Scan text for personal data: email, phone, national id, bank card, IBAN, crypto address, IP address, passport. COMMIT when nothing matches. NO_COMMIT on any finding. POST JSON {"response","agent_id"}.
Higher-confidence evaluation for high-impact, sensitive, or difficult-to-reverse agent actions.
Detect jailbreaks, prompt injection, and instruction conflicts before the agent follows them.
Scan text for exposed credentials, API keys, private keys, database URLs, and webhook secrets. COMMIT when nothing matches. NO_COMMIT on any finding. POST JSON {"response","agent_id"}.
DCL Trust Oracle. Call only when the text must include the substring AI and must not include "I cannot be held responsible" or "no guarantees". POST JSON {"response","agent_id"}. COMMIT means those checks passed and the action may proceed. NO_COMMIT means do not execute the checked action. Not a tool-call guardrail, prompt-injection detector, or jailbreak screen; use /evaluate/fast for the phrase check.
Use before paying an x402 endpoint you have not used before, when you cannot tell a working seller from a trap, a testnet address dressed as mainnet, or a listing whose price no longer matches its challenge. Returns a verdict — live, degraded, trap, testnet or dead — a 0-100 risk score, and the specific findings behind both, so an agent can decline a bad endpoint instead of learning about it by losing the money. Costs less than the smallest payment it protects.
Deterministic subset of /api/deals/check ($0.50): offers the merchant itself uploaded to its affiliate network (AWIN), each source-linked, no LLM. Does not include the first-party web scan or synthesized honest_summary — no fabricated dynamic analysis. Claimed-code verdict is scoped to the feed only. For the full check see /api/deals/check.
Verify a bounded civic-ledger-1 public organizational decision suffix against declared checkpoints, including expected-head truncation detection. No Merkle proof or anchor.
Decode JWT: paste a JSON Web Token and get the decoded header, payload claims, human-readable iat/exp/nbf times, expired or not-yet-valid status, seconds until expiry and security warnings such as alg=none. No signature verification, nothing stored. $0.01 per token.
Cheapest identity taster ($0.001): feed it a 0x address or @handle, get back the input kind, a trust/credibility verdict, the top 3 red-flag signals, a one-line summary and an upgrade URL to the full /v1/identity/token or /v1/identity/x endpoint. Uses cached full results when present, else the cheapest reads only. Billable only when it answered.
Is this X (Twitter) account real? Age, followers, following, post count, verification, website and contract addresses in the bio, with red-flag signals: brand-new account, bought-looking following, follow-spam, deleted/suspended. For vetting token projects, KOLs and support impostors. Returns signals plus a trust verdict.
Validate a SQL statement and score injection/performance risk WITHOUT executing. Returns a normalized AST summary. DO NOT use to run queries. — $0.002 USDC/call on eip155:8453. Pay-per-call via x402 …
Strip prompt-injection vectors and invisible characters from untrusted text before sending to an LLM — $0.003 USDC/call on eip155:8453. Pay-per-call via x402 — no API key, no account. Free samples da…
Audit a domain's DNS security posture: SPF, DKIM, DMARC, DNSSEC and TLS in one compact JSON. Returns a risk score. DO NOT use for domains you do not own. — $0.002 USDC/call on eip155:8453. Pay-per-ca…