Security x402 offerings

Agent intents: verify signup email · is disposable? · check DMARC before outreach · role-account risk. One call returns syntax, MX, SPF, DKIM, DMARC, disposable, role, provider, score 0-100, light do…

Scores API endpoints for risk and trust signals before you call them.

Preflight trust check of another x402 endpoint before an agent pays it. From the target resource URL: a composite trust score 0-100, a category (trusted / caution / untrusted / unknown), per-dimension flags, reasons and weighted signals. Scored from CDP x402 Bazaar discovery, an on-chain USDC payment-diversity sample, and a live 402 probe that the served payTo matches the listing. Trust indicators, not a guarantee.

Calculate CRC16 Modbus, CRC32 IEEE, XOR8 and SHA256 for hex-encoded bytes

Validate and classify an email DOMAIN from public DNS: MX hosts + mail-provider, SPF and DMARC policy, plus disposable / free-webmail / role-account flags and a deliverability signal. No SMTP probing of individual mailboxes (privacy + ToS).

ERC-8004 agent reputation with sybil filtering: reviewers are clustered by who funded them and each cluster counts once, so reviewers paid for from one wallet count as one vote. Returns feedback and reviewer counts, independent clusters, the sybil-flagged share, counts by evidence class (payment proof, task link, none) and per-tag means, and refuses to average tags with conflicting scales. Base. Free: GET /v1/verify. Trial: /v1/trial.

Certified extract of one European reference value (policy rate, VAT, minimum wage, statutory interest, tax rates and more, 34 European countries plus the EU): the value and its citation, sha256 of the archived official source and the verification chain, Ed25519-signed for audit and compliance files. Refused without charge when no archived evidence exists. GET /v1/certified/{country}/{series}.

Deterministic evidence preflight for autonomous agents before accepting, paying for, or acting on machine-generated quality, safety and compliance records.

Keccak Merkle tree and proof builder — generate indexed sorted-pair inclusion proofs with domain separation and explicit odd-node promotion.

Keccak Merkle proof verifier — validate inclusion plus exact leaf index and count proof shape for the Atlas sorted-pair tree profile.

EVM Transfer Recipient Check: compares an encoded recipient address with the intended recipient using only bounded caller-supplied values. Call when you need a bounded evm transfer recipient check result before signing, submitting, replacing, or accepting an EVM/Base transaction assembled from caller-owned data. Returns normalized transaction evidence, calculated budget or shape findings, and a fail-closed preflight status for EVM Transfer Recipient Check as versioned deterministic JSON. Price:…

Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at their exact pinned versions. Instant, per request.

EVM Watchdog: npm/Foundry dependency advisories split by on-chain vs toolchain surface, plus known Solidity bug-class leads, for a public GitHub repo. A scan, not an audit.

Prove what a web page showed: verify completed work, freeze evidence for a dispute, certify a page before you rely on it. Two independent observers on separate networks capture your URL at one frozen instant: byte-identical is CERTIFIED; disagreement is WITNESSED with pixel agreement and diff map. Signed manifest, RFC 3161 timestamp, permanent Arweave storage; ERC-721 certificate minted to the paying wallet. $1.00 fullpage, $0.50 viewport. Free claim polling. Rejects refund minus $0.10.

Re-verify any exhibit402 proof-of-publication certificate for $0.02. Pass id = ERC-721 token id, Arweave tx id, or job id. The service re-downloads the permanently stored screenshot and signed manifest, recomputes every SHA-256, and checks them against the manifest and the on-chain record (immutable screenshotSha256, tokenURI, owner). Returns a machine-readable verdict with per-check detail, so an agent can confirm a certificate is genuine without trusting the issuer.

Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by vendor/product (Microsoft, Cisco, Fortinet...).

Extract credit card like from a web page: fetches the URL and returns every credit card like found in the page text and markup (deduplicated, with counts and up to 300 items), so an agent gets the values without parsing HTML. $0.01 per page.

Bulk extract credit card like from page: up to 20 urls in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

Change watch for extract credit card like from page: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Change watch for extract h1 as json: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Extract the http insecure links from a page: fetches the URL, resolves every href and returns the ones that are http insecure links with their anchor text, deduplicated, plus a count. One link category per call for crawlers, auditors and content agents. $0.01 per page.

Bulk extract http insecure links: up to 20 urls in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

Change watch for extract http insecure links: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Change watch for extract ids as json: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.