Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Change watch for extract ipv4 from page: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.
Change watch for extract mailto links: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.
Change watch for extract orcids from page: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.
Bulk extract percentages from page: up to 20 urls in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.
Signed public receipt, refusal or rule entry in the FABA trust log
Signed public receipt, refusal or rule entry in the FABA trust log
Create a bounded security evidence snapshot for one public HTTPS URL. Checks status, a validated redirect chain, HSTS, Content Security Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and cookie flags without retaining response-body content. Strict SSRF controls and bounded redirects apply. Response metadata only; not a vulnerability scan or TLS-certificate audit. Operated by Fabler Labs.
Use when screening a list of up to 25 names for politically exposed persons in one call (0.0012 USDC per name): top 3 possible matches per name with positions and status. For customer-base and CRM re-screening.
Email verification and enrichment: syntax, MX, disposable, role and free-provider checks, SPF and DMARC. Use when you need to know if an email address is real and deliverable before signup, outreach or onboarding: syntax, live MX routing, 9,000+ disposable domains, role addresses, free providers, typo suggestions (gmial.com to gmail.com) and SPF/DMARC. One verdict: deliverable, risky or undeliverable.
x402 seller verification before paying: payTo wallet OFAC screen, domain, uptime. Use before an agent pays an x402 endpoint it has not used before: reads the seller's own 402 challenge, screens every payTo wallet against the OFAC list, checks the domain (age, setup), Factline's daily uptime probes and, with company, the register record and EU/UN/UK/US sanctions. Returns allow, review or deny, plus a trust-provider block (decision, score, evidence, ttl). Input: url, optional wallet, company,...
Domain and website risk check: registration age, registrar, email setup, disposable domains. Use when you need to judge whether a website or email domain is trustworthy: registration date and domain age (RDAP), expiry, registrar, nameservers, email setup (MX, SPF, DMARC), disposable-email domains, and a low/medium/high risk with flags such as 'registered 4 days ago', a common sign of scam shops. Accepts a domain, URL or email.
Scan supplied code with transparent deterministic rules for common secret, injection, shell, weak-hash, and Solidity risks. This is not a professional audit.
FetchDelta: compare one public web page with its previous stored snapshot. Returns added/removed lines and change previews. The first call creates a baseline; later calls share that URL baseline across buyers. Use page-watch-30d for a private daily watch.
Should an agent pay this x402 endpoint? One live probe of its payment challenge plus its settled-call and unique-payer history, price consistency and domain reputation, returned as ok / caution / avoid with reasons. Use before paying an unfamiliar x402 endpoint.
Prompt-injection scan: fetch a URL (or POST text) and check it against 120 detection rules for injection, tool hijacking, data exfiltration and hidden instructions, including text hidden in HTML comments and attributes. Use before letting an agent act on untrusted web content.
Is this email address worth sending to? Syntax, domain DNS (MX, then A/AAAA), disposable/role/free-provider lists, a typo suggestion (gmial.com -> gmail.com), a normalized form and a risk verdict with reasons. No SMTP probe: it vouches for the domain, never the mailbox. An invalid address is a paid verdict; a DNS failure is 502, not charged. Pay-per-call via x402. An empty body is answered for the published example address (name@example.com); send {"email":"…"} for any other address.
Is an npm or PyPI package version safe and maintained? Known vulnerabilities from OSV.dev (ids, CVEs, the advisory's own severity, fixed versions), deprecation or yank, licence, repository, publish dates, latest version, weekly downloads, dependency and maintainer counts, stated risk flags. No code scanning; unknowns are null. An unknown package or an outage is not charged. Pay-per-call via x402.
Pay-per-call: true402 Robots Check — robots.txt & llms.txt: which AI crawlers are allowed
Pay-per-call: true402 Security Headers Check — HTTP headers grade (CSP, HSTS, cookies)
Pay-per-call: Dorothy Witness — Verify Before Retry
Pay-per-call: Agent Input Guard — Prompt Injection & Agent Security
Pay-per-call: Hostname dossier (DNS/RDAP/TLS)
Pay-per-call: Dorothy Witness — Verify Before Retry