Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-paste fix values, and cookie flag issues.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-…
Non-government identity intelligence: email/DNS/wallet challenge proofs, GitHub and Bluesky public profiles, GLEIF/SEC business records, signed A2A cards and the canonical Base ERC-8004 registry. Separates ownership from public-record matches and unverified claims, with evidence, timestamps and fraud indicators. Required evidence failures refuse delivery. Existing contact screening remains available. No documents or biometrics.
MCP server security scan: probe any MCP endpoint's initialize handshake and tools/list and report whether it requires authentication, which protocol version it speaks, how many tools it exposes and which are not marked read-only. Use it before connecting an agent to an unknown MCP server. Input: url of the MCP endpoint.
Security headers check for a website: audits HTTPS, HSTS, Content- Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options / clickjacking protection, Referrer-Policy and CORS from the real HTTP response of any live URL. Findings with severity for what is missing. Header posture only, not a penetration test.
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any part cannot run, nothing is billed. Use a single audit route when you need only one of the four.
Security headers check for a website: audits HTTPS, HSTS, Content- Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options / clickjacking protection, Referrer-Policy and CORS from the real HTT…
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four s…
Website accessibility audit (a11y, WCAG compliance check): WCAG 2.1 level A and AA conformance of any live URL or raw HTML, tested with axe-core in a real headless browser. Returns every violation with rule id, impact, help text and affected node count. Deterministic rules; a check that cannot run returns an error, never a pass. $0.05 per call. Returns: pass (bool), violations[] with id/impact/help/help_url/nodes_affected.
Website accessibility audit (a11y, WCAG compliance check): WCAG 2.1 level A and AA conformance of any live URL or raw HTML, tested with axe-core in a real headless browser. Returns every violation wi…
KYC screening / identity risk check in one call: a name screened against OFAC, UK and EU sanctions; an email's mailbox, disposable and role checks; a phone's validity, country and line type; an IP's …
IP geolocation / IP address lookup: city, region, country and coordinates, the network's ASN and organisation, reverse DNS, and whether the address is public, private or reserved. IPv4 and IPv6. Loca…
MCP server security scan: probe any MCP endpoint's initialize handshake and tools/list and report whether it requires authentication, which protocol version it speaks, how many tools it exposes and w…
Human verification for AI agents — proof of humanity, sybil resistance, and 'is this wallet a real person' answers in one paid call. Returns two ZK-style outputs about any EVM wallet: (1) total humanity score 0-255 (15 = baseline reCAPTCHA, 45 = + Google OAuth, 70 = + Apple ID, 105 = + 2FA, 255 = full stack), with optional `min_score=N` for a yes/no `passes` verdict; (2) per-method verification check via `check=telegram,apple,g2fa,...` — buyer must NAME the methods to ask about, we never enumerate the full set. Backed by 141,871 Twin Matrix Soulbound Tokens on BNB Chain plus the canonical humanity registry off-chain. The underlying verification list never leaves Twin3 — only verdicts.
URL-to-clean-markdown extraction API, on-demand broken-link scan API, pre-deploy link audit API, DNS health audit API, llms.txt / AI-crawler audit API, spec-linted llms.txt audit API, email-deliverability (SPF/DKIM/DMARC) audit API, PDF-to-markdown conversion API, technology-stack fingerprinting API, security-headers audit API, and PDF metadata-intel API for coding agents. Paid per call in USDC...
URL-to-clean-markdown extraction API, on-demand broken-link scan API, pre-deploy link audit API, DNS health audit API, llms.txt / AI-crawler audit API, spec-linted llms.txt audit API, email-deliverability (SPF/DKIM/DMARC) audit API, PDF-to-markdown conversion API, technology-stack fingerprinting API, security-headers audit API, and PDF metadata-intel API for coding agents. Paid per call in USDC...
Static misconfiguration scan of a SINGLE infrastructure resource or config snippet (Terraform, Kubernetes, Dockerfile, docker-compose or CloudFormation). The lightweight per-resource form of /iac/scan: returns a verdict (pass, caution, block), a risk score and findings with rule, severity, location and fix hint. Security indicators, not a guarantee.
Static misconfiguration scan of an infrastructure-as-code config: Terraform (plan JSON or HCL), Kubernetes / Helm, Dockerfile, docker-compose or CloudFormation. Detects public storage, open security groups, unencrypted data at rest, over-broad IAM, privileged / root containers, host mounts and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, resource, location and fix hint. Security indicators, not a guarantee.
Review a built-in risky AWS IAM identity policy for administrator access, wildcard resources, PassRole, workload-creation escalation, secret access, least privilege, and missing guardrails without accessing an AWS account
Liefert bis zu 200 Alarme seit einem optionalen ISO-Zeitpunkt. Die verifizierte Zahleradresse ist der Eigentümer; Ergebnisse und gespeicherte Daten sind strikt auf diesen Zahler begrenzt.
Gibt den geprüften Inhalt als Echo zurück und speichert nichts. Die verifizierte Zahleradresse wird nur für die Abrechnung verwendet.
Signed page read (0.005 USDC): the URL as clean Markdown plus an Ed25519 receipt binding its SHA-256, the provider, and the observation time. Proves what your agent read. Body: {"url": "https://..."}…
Seller wash risk and wallet reputation for a Solana x402 merchant: wash label, fleet %, payer count, plus tier + score. 0.001 USDC. No signed V7 receipt (use GET /v1/intel/trust for the portable proof). Free preflight is allow|warn|block only. Sponsored Solana accepts require a payment client that honors accepts[].extra.feePayer (for example @x402/svm ExactSvmScheme); AgentCash cannot settle that Solana rail.
IP address intelligence: for any IPv4 or IPv6 address, returns geolocation, ASN, organization, CIDR block, hostname, abuse contact, and an AI reputation assessment. For fraud detection, security investigations, traffic analysis, and visitor identification.