Security x402 offerings

CycloneDX SBOM vulnerability check — analyze bounded JSON 1.5 software bill of materials components against OSV and prioritize exact CVE matches from CISA KEV without remote document fetches.

Package vulnerability check — check one exact open-source dependency version or purl against OSV, enrich CVE matches with CISA KEV known-exploited signals, and report fixes, severity, and provenance.

Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.

deployment configuration risk scan for YAML, Docker Compose or Kubernetes snippets: flags privileged containers, latest tags, host networking and plaintext secrets.

Scores design briefs for risk, helping identify issues before execution.

Check declared design hash, assay identity, evidence records and control gaps for a research handoff. Does not validate the design, sequence or biological efficacy.

Detect the page's cookie banner: fetches the URL and answers this one question from markup, headers and text, with the evidence. Cheap classification signal for crawlers and content pipelines. $0.01 per page.

Bulk detect page cookie banner: up to 20 urls in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

An agent that routes SHK emergencies needs emergency-labelled entries compared with the declared emergency wording at linked targets without reading contact values.

Security audit of code snippet (SQLi, XSS, auth bypass, secret leaks, unsafe deserialization).

Proof-of-Model: detect silent model substitution at any OpenAI-compatible inference endpoint. mode=fingerprint records what a seller serves today; mode=verify re-probes later and proves whether the w…

Agent-readiness audit of any public URL: score /100 with per-check raw evidence, published weights, and a recompute recipe. Deterministic — no model, same input gives the same score.

Human-likeness scoring of AI text vs 12 real personality profiles; free tools + x402 paid tier

Human-likeness scoring of AI text vs 12 real personality profiles; free tools + x402 paid tier

Human-likeness scoring of AI text vs 12 real personality profiles; free tools + x402 paid tier

Human-likeness scoring of AI text vs 12 real personality profiles; free tools + x402 paid tier

Human-likeness scoring of AI text vs 12 real personality profiles; free tools + x402 paid tier

Look up a CVE by id, or search the NVD catalogue by keyword. Returns the CVSS base score and vector with its version (v4, v3.1, v3.0 or v2 - whichever NVD published), severity, CWE classification, publication and last-modified dates, vulnerability status and references. Straight from the NIST National Vulnerability Database.

Digest Header Verify: verifies a sha-256 Digest value against caller-supplied text bytes using only bounded caller-supplied values. Call when you need a bounded digest header verify result before accepting, caching, redirecting, or retrying a caller-supplied web response. Returns normalized web evidence, the computed finding, and an explicit pass or advisory status for Digest Header Verify as versioned deterministic JSON. Price: $0.001 USDC via x402 on Base or Solana. First-party, stateless, me…

Assesses digital wellness risk from user data and flags potential concerns.

Runs live diligence on an x402-metered endpoint before you pay it: verifies its 402 payment challenge is spec-compliant, checks the price against market baselines, inspects the payTo address on-chain…

Runs live diligence on an x402-metered endpoint before you pay it: verifies its 402 payment challenge is spec-compliant, checks the price against market baselines, inspects the payTo address on-chain (Base), checks third-party directory presence, and checks basic infra hygiene, and detects possible upstream API resale with evidence-based markup estimates. Returns a 0-100 score, a pass/caution/fail verdict, and per-check evidence.

Remote MCP and x402 service for paid public URL analysis and auditable condition verification.

Fetch and parse a DKIM public-key record at <selector>._domainkey.<domain> (RFC 6376). Returns the parsed key params (algorithm, length, flags) so you can verify rotation status or key strength. Caller must know the selector - use email-deliverability if you don't.