Security x402 offerings

Compute an HMAC signature (hex) of an input string with a secret key. Supports sha256, sha512 and other algorithms — for webhook signing and message authentication.

Everything to vet a domain in one call: DNS records + email posture, RDAP registration/age/registrar, IP network/ASN/geo (from the resolved A record) and public threat-intel on the site. Four AgentBIT tools, merged. $0.015.

Compute the MD5 hash (hex digest) of an input string. Fast, deterministic checksums and legacy fingerprints (not for security-sensitive hashing).

Compute an HMAC signature (hex) of an input string with a secret key. Supports sha256, sha512 and other algorithms — for webhook signing and message authentication.

AgentCheck: independent report on an x402 seller before you pay it. Are its buyers real (repeat wallets on their own money) or funded by the seller itself, measured from 30 days of on-chain payments, plus results of our own paid test purchases where we have them. Query: ?domain=<seller-domain>. GET /sellers (free) lists covered domains.

Returns the current trust state, rank, and multi-signal score for an AgentCrush AI agent. Includes claim status, verification, tier, and ERC-8004 registration metadata when available.

Returns the current trust state, rank, and aggregated multi-signal score for an AgentCrush AI agent. Includes verification status, tier, and source metadata for the requested agent.

DeFi Smart Contract Vulnerabilities: Real-Time Monitoring for Agents

Security advisories: Known exploited vulnerabilities (CISA KEV) enriched with daily FIRST EPSS exploit probability. Use when a user asks whether a CVE is actively exploited, which vulnerabilities in a vendor or product to patch first, whether it is used in ransomware campaigns, or needs CISA KEV due dates, required actions and FIRST EPSS exploit probability in one call.

DeFi Smart Contract Vulnerabilities: Real-Time Monitoring for Agents

Verifica una entrega web (HTML, CSS, JavaScript) sin ejecutarla: 86 reglas de seguridad, sintaxis de JavaScript y recursos externos. Determinista, sin modelo. Lo que NO se pudo comprobar se declara a…

Revisión de seguridad de un paquete de ficheros (Python, web, JSON) sin ejecutar nada: importaciones y llamadas prohibidas, escritura, red y credenciales. Un tipo de fichero que el gate no sabe leer …

Admin activity monitor for contract owners and security teams: flags ownership transfers, implementation upgrades, and pause-state changes in a contract's recent history. Category: data.

Smart contract security audit for developers and auditors: finds vulnerabilities, gas optimizations, and best-practice violations in Solidity, Rust, Move, or TypeScript code, with a diff review mode for proposed changes. Category: inference.

Smart contract security audit for developers and auditors: finds vulnerabilities, gas optimizations, and best-practice violations in Solidity, Rust, Move, or TypeScript code, with a diff review mode for proposed changes. Category: inference.

ERC-20 approval risk scanner for wallets: flags unlimited allowances and unverified spender contracts before an agent authorizes a new one. Category: data.

Pre-transaction wallet safety check for agents about to execute a DeFi action: combines approval scanning, activity pattern detection, and target contract risk into one composite score. Category: data.

Check before you pay: The routine check before an agent pays or hires another: its level and last observed payment, open incidents, its latest statement (how old, chain intact, flags) and, with payto=<address>, what that address is: label and basis, contract or plain key, how many registered agents paid it, whether this agent paid it before, and whether our poisoning watch saw it planted as a look-alike. Facts only, never a verdict. About one ERC-8004 agent on Base, by Age…

Load when an agent needs pre-action verification of factual claims — multi-source confidence scoring with JWS-signed receipt, offline-verifiable per draft-krausz-verification-state. $0.02 USDC per qu…

Buyer-side trust oracle for the x402 marketplace: 'I need X, budget $Y — which tool is real?' Sweeps the WHOLE catalog across many queries, collapses sybil/factory clusters (one wallet stamping many fake-distinct listings), ranks the genuinely-used survivors by unique-payer usage, and returns one vetted pick with a ready-to-pay challenge. The credit-bureau check an agent can't do in a single query.

Buyer-side trust oracle for the x402 marketplace: 'I need X, budget $Y — which tool is real?' Sweeps the WHOLE catalog across many queries, collapses sybil/factory clusters (one wallet stamping many …

Fetch a public URL and return clean markdown with SHA-256 hashes and an Ed25519-signed provenance receipt.

Agent-readable article boundaries decision fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

Substantive llms.txt repair plan fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.