Pocket Network
Check a URL for phishing signs without fetching it: raw IP hosts, punycode, user@host, credential words in the host, very long hosts and deep subdomains. The verdict is suspicious or unknown, never clean, because no threat database is consulted; the response says what ran. POST /v1/reputation with {url}. Pay per request in USDC; no account, no API key.
Offering
- Provider
- agent.pocket.network
- Method
- POST
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://agent.pocket.network/v1/url-phishing-reputation- MIME type
- Not provided
- First seen
- 2026-10-16T01:50:24.663Z
- Last seen
- Tags
- Security, url-phishing-reputation, rest
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.005 USDC
Atomic price: 5000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"payTo": "0xF732ea490c5766071785a2310523f7fA2CEbB829"
}
]Observed health
- Status
- Reachable
- Latest latency
- 415 ms
- Average latency
- 1213 ms
- HTTP status
- 405
- Last checked
- Reachability
- 100% over 14 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"additionalProperties": false,
"properties": {
"body": {
"description": "The body of POST /v1/reputation.",
"properties": {
"url": {
"description": "The URL to check (http or https). It is not fetched.",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
}Output schema
{
"properties": {
"example": {
"properties": {
"data": {
"description": "For POST /v1/reputation, a JSON object with url, host, verdict (malicious, suspicious, clean or unknown), heuristics, threat_matches, checked_sources (each source and whether it ran) and verdict_scope. A bad request answers 400 with an `error` string. Properties are pinned from live paid responses; nothing is required, because every route's 2xx response is validated against this one schema.",
"properties": {
"checked_sources": {
"items": {
"properties": {
"source": {
"type": "string"
},
"status": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"heuristics": {
"items": {
"type": "string"
},
"type": "array"
},
"host": {
"type": "string"
},
"service": {
"type": "string"
},
"threat_matches": {},
"url": {
"type": "string"
},
"verdict": {
"type": "string"
},
"verdict_scope": {
"type": "string"
}
},
"type": "object"
},
"portal": {
"properties": {
"provenance": {
"const": "third-party-supplier"
},
"schemaCheck": {
"enum": [
"passed",
"undeclared",
"unchecked"
]
},
"serviceId": {
"const": "url-phishing-reputation"
}
},
"required": [
"provenance",
"serviceId",
"schemaCheck"
],
"type": "object"
}
},
"required": [
"portal",
"data"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}