Security and audits
317 sellers. How we check them: known-bad / known-good test cases (status: planned). Most-bought first.
| Seller | Answering | Price | Buyers (30 days) | What it sells |
|---|---|---|---|---|
| Cult OS Developer Tools | Yes | $0.001 | 35 | HTTP Header Audit |
| Cult OS Developer Tools | Yes | $0.010 | 25 | Dockerfile Audit |
| HTTP Security Headers Check | Yes | $0.010 | 13 | Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, |
| Kronos Crypto Data & Forecasts | Yes | $0.020 | 10 | Crypto funding-rate extremes screener: scans all 17 perpetual futures markets (BTC/ETH/SOL/BNB/XRP/DOGE/ADA/AV |
| api.gitbeacon.dev | Yes | $0.010 | 10 | Paid ($0.01 USDC via x402). Top trending GitHub repos from the latest daily scan, sorted by stars — descriptio |
| x402.asterpay.io | Yes | $0.050 | 8 | AI-powered code review. Returns bugs, improvements, and security issues. |
| TxSim Decoder | Yes | $0.002 | 7 | Decode raw EVM calldata into a named function, signature and arguments, plus security risk flags (unlimited to |
| CVE Vulnerability Lookup | Yes | $0.010 | 7 | CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National V |
| OnchainPulse | Yes | $0.015 | 7 | Honeypot, rug & token-safety scanner for Solana memecoins — instant pre-trade check of mint/freeze authority, |
| vrsai | Yes | $0.010 | 7 | Check an exact npm or PyPI package version immediately before installation using current registry, vulnerabili |
| 767-2676.com | Yes | $0.001 | 7 | Signed bearer temporal evidence for cross-node execution-window grounding and audit |
| URL Safety | Yes | $0.003 | 6 | Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosqua |
| skill-audit | Yes | $0.005 | 6 | Fetch a URL and grade its HTTP security headers (HSTS, CSP, X-Frame-Options, etc.) |
| wazir-x402.duckdns.org | Yes | $0.001 | 6 | PoolTogether draw scan data |
| TenPrint | Yes | $0.002 | 5 | Independent audit of a Rubric attestation: signature validity, HCS sequence, and direct Hedera mirror-node con |
| Cult OS Developer Tools | Yes | $0.200 | 5 | Site SEO Audit by Cult OS |
| api.x402lint.dev | Yes | $0.050 | 5 | Paid ($0.05). ALWAYS runs a fresh 25-check scan of the origin (non-settling GET/HEAD + benign empty-POST probe |
| Losbeto Market Intelligence | Yes | $0.010 | 5 | SHA-256 proof-of-data hash for audit trails: a verifiable cryptographic receipt of any Losbeto response, for a |
| ontarioprotocol.com | Yes | $0.500 | 5 | Publish your x402 API for agent discovery with an Ontario profile and Bazaar Launch Passport after free valida |
| OnchainPulse | Yes | $0.015 | 4 | Honeypot, rug & token-safety scanner for Robinhood Chain, Base & EVM tokens — instant pre-trade check: sell-si |
| CVE / Vulnerability Lookup | Yes | $0.010 | 4 | CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages |
| github-repo-seo-audit | Yes | $0.005 | 4 | GitHub repo discoverability & SEO audit: scores a repo's README, description, topics, homepage and metadata an |
| Aura Agent Commerce | Yes | $0.010 | 4 | Aura deterministic x402 purchase preflight from supplied OpenAPI metadata |
| DopamineDesk AI Marketplace | Yes | $0.010 | 4 | Scan supplied code with transparent deterministic rules for common secret, injection, shell, weak-hash, and So |
| Coil Crypto Setup Scan | Yes | $0.050 | 4 | Which of 81 Robinhood-tradable coins are in a WASHED SETUP right now? One read scans the full universe for the |
| treasury-rates | Yes | $0.015 | 4 | US Treasury interest rates: the Daily Treasury Par Yield Curve fused with the average interest rates on the ou |
| code-inspect | Yes | $0.008 | 4 | Static application-security scan of a single code blob for CWE Top-25 logic bugs (SQL injection, XSS, command |
| Pocket Network | Yes | $0.005 | 4 | Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a raw loc |
| AIMarket | Yes | $0.001 | 4 | WARDEN verdict on an MCP server's tools/list: allow or block, a 0-1 score and every finding with the matched t |
| Losbeto Market Intelligence | Yes | $0.030 | 4 | What is moving abnormally at this exact moment? Price and volume anomalies across the majors, measured against |
| Page Speed & Core Web Vitals | Yes | $0.006 | 4 | Page speed API - Google PageSpeed Insights (Lighthouse) performance audit for a URL on mobile or desktop. Retu |
| Forest Packages | Yes | $0.003 | 4 | Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC |
| Market Intelligence API | Yes | $0.010 | 4 | US Treasury auctions results and calendar: upcoming and recent auctions with high yield, bid-to-cover, indirec |
| manifest-audit | Yes | $0.005 | 4 | Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {"npm":["[email protected]"],"p |
| SameDayDesk | Yes | $0.010 | 4 | x402 and MPP seller integrity audit for one exact paid GET or POST route after a buyer integration fails, a se |
| manifest-audit | Yes | $0.010 | 4 | Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requireme |
| HTTP headers + security analysis | Yes | $0.003 | 4 | Fetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options, X-Content-T |
| vendsdk.com | Yes | $0.003 | 4 | Follow a public redirect chain with per-hop HTTP status (SSRF-safe) for security agents |
| shield.vainplex.dev | Yes | $0.002 | 4 | ShieldAPI - x402 security preflight before agents connect to IP infrastructure |
| wazir-x402.duckdns.org | Yes | $0.005 | 4 | 3ilm vulnerability pattern search — 1032 exact-reconciled findings from 10 Sherlock contests |
| shield.vainplex.dev | Yes | $0.001 | 4 | ShieldAPI - x402 security preflight before agents accept or store credential material |
| 2s | Yes | $0.003 | 4 | Authoritative MITRE ATT&CK (Enterprise) technique lookup. Pass id (e.g. T1059 or sub-technique T1059.001) for |
| VAPE | Yes | $0.010 | 3 | VAPE protocol — Full protocol record: per-chain TVL, category, audits, the official logo, Twitter, and descrip |
| realdep-package | Yes | $0.005 | 3 | Verify a package: does it exist, is it deprecated or yanked, and does it have known vulnerabilities? Checked a |
| SolEnrich | Yes | $0.020 | 3 | Jupiter Gacha (Collector Crypt) tokenized-card pack EV scan. For each pack machine, computes net-of-exit-mecha |
| TokenLaunch | Yes | $0.050 | 3 | New token launch scanner — Base and EVM chains, real-time pool data |
| skill-audit | Yes | $0.005 | 3 | Audit text for malicious AI-skill patterns. Requires `content`. Nothing to audit — crawling, or discovering th |
| HALOWERK Agent Tools | Yes | $0.002 | 3 | Prueft Text oder Quelltext auf 20 Arten von Geheimnissen: AWS, GitHub, GitLab, Slack, Stripe, OpenAI, Anthropi |
| Random Choice | Yes | $0.001 | 3 | Cryptographically secure random picker for 2-100 JSON choices. Use for low-stakes one-off random or weighted s |
| Toolsmith | Yes | $0.010 | 3 | Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and opt |
| TCP Port Scanner | Yes | $0.010 | 3 | Give this API a hostname or IP address and it tries connecting to each port in your requested range. For every |
| Netzhandwerker Agent Tools | Yes | $0.002 | 3 | Prueft Fremdtext vor der Verarbeitung durch ein Sprachmodell auf zwoelf Angriffsmuster in Deutsch und Englisch |
| AgentFeed | Yes | $0.050 | 3 | Liquidation cascade scan across EVERY USDT perp we record on Bybit, OKX and Binance at once, not just the majo |
| WebberSites x402 Data API | Yes | $0.010 | 3 | QR code generator: GET ?data=<text|url> and receive a scannable QR as SVG plus PNG (base64) and a data: URI. O |
| CRYPTYX | Yes | $0.010 | 3 | Universe-aggregate cross-factor divergence alerts — Ignition (TR+VOL extreme), Capitulation (FLOW+TR collapse) |
| TechAnalysis | Yes | $0.050 | 3 | Multi-timeframe analysis — all 4 timeframes (15m, 1h, 4h, 1d) with confluence score and AI summary |
| NetIntel | Yes | $0.010 | 3 | Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame- |
| NetIntel | Yes | $0.010 | 3 | Check a URL against URLhaus malware database and heuristic phishing pattern analysis — returns threat classifi |
| AgentUtility.ai | Yes | $0.005 | 3 | Looks up a CVE and returns the full NIST NVD vulnerability record. Short alias of cve-lookup: CVSS v3.1 + v2 v |
| Crypto Scam Message Detector | Yes | $0.003 | 3 | Scam and phishing detection for crypto wallets, trading bots and social agents: check a DM, cast, tweet, email |
| CVE Vulnerability Lookup | Yes | $0.009 | 3 | Look up a vulnerability by CVE or GHSA id (NVD: description, CVSS score and vector, CWE, CISA known-exploited |
| Token Security Scanner | Yes | $0.009 | 3 | Token security and honeypot check with risk grade A to F for a token before buying or accepting it, on Solana |
| Pocket Network | Yes | $0.005 | 3 | Check a URL for phishing signs without fetching it: raw IP hosts, punycode, user@host, credential words in the |
| Losbeto Market Intelligence | Yes | $0.060 | 3 | Real-time cross-chain spread scanner across Solana, Base and Ethereum. Flags USDC/USDT/SOL/ETH opportunities a |
| Maxwell x402 | Yes | $0.005 | 3 | NVD (National Vulnerability Database) CVE record by id, or search by keyword in recent CVEs: description, seve |
| SiteCheck | Yes | $0.020 | 3 | Website audit in one call: WCAG 2.2 accessibility issues (European Accessibility Act) with fixes and a score, |
| tokenguard | Yes | $0.005 | 3 | Rug-safety scan of the tokens trending on a chain right now — mint, blacklist, pausable, tax, proxy, ownership |
| Aayat AI | Yes | $0.010 | 3 | DeFi protocol safety check: TVL and its 1h/1d/7d change, chains, category, audits and audit links, oracles, ag |
| Aayat AI | Yes | $0.010 | 3 | Best DeFi yields for a token and chain, ranked by risk-adjusted APY (sustainable APY, discounted for risk): AP |
| Aayat AI | Yes | $0.005 | 3 | Should a coding agent install this package? Checks one npm, PyPI, crates or Go package version for known vulne |
| Aayat AI | Yes | $0.003 | 3 | Vulnerability lookup for agents: by id (?id=CVE-2021-44228, GHSA-..., PYSEC-..., RUSTSEC-..., GO-...) get the |
| Market Intelligence API | Yes | $0.030 | 3 | Crypto trading opportunity scanner: name a goal (unusual_buying, unusual_selling, breakout, breakdown, crowded |
| Saylor Innovations CVE Vulnerab | Yes | $0.003 | 3 | Resolve a CVE into its published description, status, CVSS metrics, weakness identifiers and vendor/reference |
| Package Safety Gate | Yes | $0.005 | 3 | npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk. |
| validate-isin | Yes | $0.001 | 3 | ISIN (ISO 6166 security identifier) Luhn checksum validation. |
| FiatDock | Yes | $0.009 | 3 | Technical SEO audit of a public page as a crawler first sees it: indexability, robots.txt, title and descripti |
| MimirAPI | Yes | $0.010 | 3 | Eyes for agents, for a penny: renders any URL in a real browser (Cloudflare Browser Rendering) and returns a f |
| Settled | Yes | $0.005 | 3 | Scan one bounty / task / repository URL before working on it: fetches it (GitHub issues and repos via the API) |
| SpendTheBits | Yes | $0.005 | 3 | 0-100 safety score with components (protocol trust, TVL depth, audits, track record), observed and risk-adjust |
| URL Risk | Yes | $0.002 | 3 | Heuristic URL risk: scheme, IP hosts, deep subdomains, credential-themed labels, sensitive paths/params, optio |
| worxai.tech | Yes | $0.035 | 3 | Live call volume and revenue analytics across all WorxAI x402 endpoints — total settled calls, USDC revenue, p |
| aeo-audit | Yes | $0.020 | 3 | AI-search visibility (AEO) audit of a website for answer engines and agents. Fetches the target's own public s |
| DeFi protocol profile | Yes | $0.002 | 3 | One DeFi protocol in full: TVL rank, TVL per chain, recent change, market cap to TVL, token, website, audits a |
| Memory audit log | Yes | $0.001 | 3 | Tamper-evident history of every change to a namespace - an append-only, hash-chained audit log the server atte |
| api.craigmbrown.com | Yes | $0.010 | 3 | Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `s |
| Delx Data Classification | Yes | $0.003 | 3 | Classify a field-name inventory for likely sensitive data without inspecting values. Use it as a bounded prefl |
| Delx Cache Policy Audit | Yes | $0.002 | 3 | Audit cache headers for missing policy and sensitive public-cache exposure. Use it before an autonomous workfl |
| Vextorium | Yes | $0.004 | 3 | Latest trades executed by any wallet on Hyperliquid: asset, side, open/close direction, price, size, USD value |
| Vextorium | Yes | $0.004 | 3 | Metadata and structure of a PDF (URL): pages, page size, title, author, creator, dates, version, encryption, f |
| Vextorium | Yes | $0.004 | 3 | SEO and sharing metadata of a page: title and description with length, canonical, robots, language, hreflang, |
| Vextorium | Yes | $0.003 | 3 | Details of a vulnerability by id (CVE-2021-44228, GHSA-..., PYSEC-...): summary, description, severity and CVS |
| Vextorium | Yes | $0.003 | 3 | npm package profile: latest version, description, license, repository, dependencies, unpacked size, weekly and |
| Vextorium | Yes | $0.003 | 3 | Technical inspection of a URL: status, redirects, time to first byte and total time, bytes, compression, conte |
| agenttoll.app | Yes | $0.008 | 3 | New token scan with a safety verdict attached: today's new Base pools above your liquidity floor, each already |
| agenttoll.app | Yes | $0.004 | 3 | New pair scan seconds after launch: Uniswap v4 pools read straight off Base before any indexer has them - the |
| agenttoll.app | Yes | $0.002 | 3 | Trending Base pool scan: the DEX pools moving on Base right now, with price, 24h volume and liquidity; ?limit= |
| AgentTools | Yes | $0.005 | 3 | Scan unstructured text and extract structured entities: email addresses, URLs, IPv4 addresses, phone numbers a |
| AgentTools | Yes | $0.005 | 3 | Scan newly created DEX pools on Solana, Base, Ethereum, BSC, Arbitrum or Polygon, filtered by minimum liquidit |
| Scan text for leaked secrets | Yes | $0.004 | 3 | Scan source code or configuration text for hardcoded secrets: AWS access keys, GitHub/Slack/Google tokens, Str |
| Prompt-Injection Firewall | Yes | $0.005 | 3 | Scans untrusted text, HTML, email, document text, API responses, and tool outputs for prompt injection, creden |
| Saylor Innovations Guide Library | Yes | $0.010 | 3 | Agent Tool Security Preflight — AI & Agents |
| Signal Oracle | Yes | $0.010 | 3 | Full detail for a single vulnerability advisory by CVE / GHSA ID (e.g. 'ghsa:GHSA-xxxx') — severity, CVSS scor |
| agentbit.app | Yes | $0.010 | 3 | Screen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credential |
| agentbit.app | Yes | $0.002 | 3 | Compute the MD5 hash (hex digest) of an input string. Fast, deterministic checksums and legacy fingerprints (n |
| APEX Arc sniper profit board | Yes | $0.025 | 3 | You receive EVERY address we have scored in scoreboard[], not a top-and-bottom sample, and summary.addresses s |
| APEX Arc wallet counterparty | Yes | $0.004 | 3 | Counterparty report for any Arc address: how often it is the FIRST buyer into a new pool and how fast it enter |
| api.automaton-sovereign.workers.dev | No | $0.001 | 3 | Automaton-Sovereign Value API call |
| npm package vulnerability check | Yes | $0.003 | 3 | Known vulnerabilities for one package version from OSV.dev, with CISA exploited-in-the-wild flag and the fixed |
| SolEnrich | Yes | $0.050 | 2 | Where Hyperliquid smart money is positioned. Scans the HL leaderboard, excludes market-makers/HFT and dust/meg |
| Artifact Inspector | Yes | $0.005 | 2 | File type and MIME/media type inspector — identify bounded content by magic bytes and return SHA-256, size, an |
| Concierge Agent | No | $0.020 | 2 | Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked |
| CodePulse Agentic API | Yes | $0.010 | 2 | Queries target URL headers to score security configurations (HSTS, CSP, X-Frame-Options). |
| Cyre | Yes | $0.010 | 2 | Cyre token scan — mint/freeze authority, LP lock/burn, deployer age, holder concentration. Patterns, not verdi |
| MarketPulse | Yes | $0.100 | 2 | Where is this competitor vulnerable? Finds exploitable gaps in a competitor's marketing presence across conten |
| Polyform | Yes | $0.010 | 2 | Recent IPs caught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-party te |
| Batch Readiness Scan | Yes | $0.100 | 2 | Bulk agent-readiness screening for agencies, VCs and portfolio owners: scan up to 50 URLs in one paid call ($0 |
| Foundry PAR-007 | Yes | $0.010 | 2 | Audit caller-supplied CSV data quality: infer column types, count missing and duplicate values, and flag malfo |
| Cult OS Developer Tools | Yes | $0.200 | 2 | Vulnerability Audit by Cult OS |
| Macaroon Network | Yes | $0.003 | 2 | Search CVEs, CISA Known Exploited Vulnerabilities status, and GitHub Security Advisory package/ecosystem metad |
| eu-verify | Yes | $0.010 | 2 | Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories |
| HubVibe | Yes | $0.150 | 2 | Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers |
| Losbeto Market Intelligence | Yes | $0.060 | 2 | Cross-exchange and cross-chain arbitrage scan with actionable opportunities: venue pair, spread, and the direc |
| Paxie.Matrix Data API | Yes | $0.010 | 2 | The Paxie.Matrix desk's closed trades on Solana and Robinhood Chain since a time, for auditing its track recor |
| AIMarket | Yes | $0.003 | 2 | MCP security: catch a rug pull or tool poisoning between two tools/list results of the same MCP server — the v |
| SiteCheck | Yes | $0.003 | 2 | PDF to text: send an https link or base64 (up to 15 MB) and get the text page by page plus title, author, page |
| aiskills402 | Yes | $0.050 | 2 | SQL Query Optimizer for D1, SQLite and Turso: Reviews SQL queries, schemas and migrations for SQLite, Cloudfla |
| alphapipeline-eu.onrender.com | Yes | $0.020 | 2 | Audit a Hyperliquid wallet address you already know: every open perpetual position with side, size, leverage, |
| Arbitrage Intelligence | Yes | $0.030 | 2 | Compare Binance and Coinbase order books for net spread at a trade size. |
| AgentFeed | Yes | $0.020 | 2 | Open interest spikes across every Bybit USDT perp: abnormal OI jumps against an earlier snapshot of the same u |
| Token Safety Verdict | Yes | $0.020 | 2 | Token safety check on Base before buying: honeypot, rug pull and scam detection. Verdict SAFE/CAUTION/SCAM wit |
| sendcheck | Yes | $0.050 | 2 | SendCheck deep scan: the same verification across all 5 chains (Base, Ethereum, Arbitrum, Optimism, Polygon) i |
| 561-group-ephemeris-moment | Yes | $0.040 | 2 | Deterministic apparent tropical ephemeris with signs, motion, lunar phase, aspects, provenance and audited err |
| Market Intelligence API | Yes | $0.020 | 2 | Token security audit and honeypot check, full report: EVM (Base, Ethereum, Arbitrum, Optimism, Polygon) simula |
| HubVibe | Yes | $0.050 | 2 | Security headers check for a website: audits HTTPS, HSTS, Content- Security-Policy (CSP), X-Content-Type-Optio |
| skill-audit | Yes | $0.005 | 2 | Scan the newest servers in the official MCP registry for supply-chain risk — no input required |
| aiskills402 | Yes | $0.010 | 2 | Code Review: Reviews a code change (a diff or a changed file pasted as text) and reports real problems ranked |
| Sigma Market Intelligence | Yes | $0.020 | 2 | Sigma SCOUT: compact read-only market opportunity evidence for autonomous agents. |
| ViewportWitness by Apex Labs | Yes | $0.050 | 2 | Passive public web release security gate |
| Aayat AI | Yes | $0.020 | 2 | Audit a whole dependency list in one call: up to 200 exact npm, PyPI, crates or Go package versions checked ag |
| NetIntel | Yes | $0.050 | 2 | IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds an |
| NetIntel | Yes | $0.050 | 2 | Fetch a URL and detect the full technology stack from HTTP response headers, HTML meta tags, cookies, and scri |
| agent-verification-listing | Yes | $0.010 | 2 | Buy a 30-day verified agent listing for $0.01 USDC. AgentIndex audits reachability, x402 compatibility and dis |
| tokenguard | Yes | $0.020 | 2 | Known vulnerabilities for a package (OSV.dev — aggregate of GHSA, PyPA, RustSec, Go and more) or a free-text C |
| Saylor Innovations Guide Library | Yes | $0.010 | 2 | Google Dorking Search Shortcuts Reference — Security & OpSec |
| Saylor Innovations Guide Library | Yes | $0.010 | 2 | Chain, Address and Network Validator — Security & OpSec |
| ManyLives Web | Yes | $0.002 | 2 | Is this URL up? Live check: HTTP status, every redirect hop, response time, content type and size, server and |
| ManyLives Tools | Yes | $0.005 | 2 | What AI agents look for that isn't served yet: tools, methods and paths that visiting agents requested at an o |
| Tanod txpeek | Yes | $0.005 | 2 | txpeek (Tanod) pre-transaction check: risk verdict for an address in about a second (proxy and admin control, |
| Tanod pdfpeek | Yes | $0.005 | 2 | pdfpeek (Tanod) PDF inspect: page sizes, text layer or scan, forms, attachments, JavaScript, bookmarks. |
| Tanod sitepeek | Yes | $0.002 | 2 | sitepeek (Tanod) security headers: a score and grade (A-F) of one response's HSTS, CSP, framing, content-type, |
| Tanod toolsniff | Yes | $0.020 | 2 | toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden te |
| Bitcoin Tech Radar - Aaron Zhang | Yes | $0.010 | 2 | Latest releases of Bitcoin Core and the Lightning implementations (LND, Core Lightning, Eclair, LDK) as JSON: |
| mcp-scan | Yes | $0.010 | 2 | Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, pro |
| cve-scan | Yes | $0.020 | 2 | Vulnerability scan for a software package by ecosystem, name and version, or by package-URL (purl). Queries OS |
| code-scan | Yes | $0.020 | 2 | Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, c |
| Edge Agents AI | Yes | — | 2 | Ranks major crypto assets by turnover activity to identify where market attention is concentrated. Purpose: Bl |
| Edge Agents AI | Yes | — | 2 | Direct Bitcoin block evidence of large transaction outputs above a whale-scale threshold, scanned block by blo |
| Edge Agents AI | Yes | — | 2 | Direct Ethereum block evidence of large native-ETH transfer transactions above a whale-scale threshold, scanne |
| OpenAPI security summary | Yes | $0.001 | 2 | Resolve authentication requirements across an OpenAPI 3.x or Swagger 2.x document. Returns the catalog of secu |
| Delx Mcp Server Readiness Report | Yes | $0.010 | 2 | MCP server readiness API for agents: audit tools/list, schemas, manifests, discovery, and integration readines |
| security-txt | Yes | $0.010 | 2 | security.txt reader (RFC 9116): fetches /.well-known/security.txt (and the legacy /security.txt), parses Conta |
| heading-audit | Yes | $0.010 | 2 | Heading structure audit: all H1-H6 with text, H1 count (should be one), skipped levels, empty headings, and th |
| http-methods-check | Yes | $0.010 | 2 | HTTP methods check: which methods a URL accepts, from an OPTIONS request (Allow / Access-Control-Allow-Methods |
| bulk-security-headers | Yes | $0.010 | 2 | Bulk security-header grade for up to 10 URLs in one call: each URL gets an A-F grade from HSTS, CSP, X-Frame-O |
| common-ports-scan | Yes | $0.010 | 2 | Common ports scan: TCP-connects to 12 well-known ports (FTP 21, SSH 22, SMTP 25, HTTP 80, HTTPS 443, MySQL 330 |
| http-header-explain | Yes | $0.010 | 2 | Explains HTTP headers: for each header name you give (comma-separated), what it does, typical values and an ex |
| openapi-summary | Yes | $0.010 | 2 | OpenAPI/Swagger spec summary from a URL: title, version, OpenAPI version, servers, path and operation counts, |
| Delx Data Freshness | Yes | $0.003 | 2 | Evaluate data age against a caller-supplied freshness objective. Use it as a bounded preflight or analysis ste |
| Delx Retention Policy Check | Yes | $0.003 | 2 | Compare declared retention with a maximum policy window. Use it as a bounded preflight or analysis step inside |
| Vextorium | Yes | $0.003 | 2 | Validate a Spanish Social Security affiliation number (12 digits: province, number, control) and return the pr |
| Vextorium | Yes | $0.004 | 2 | Known vulnerabilities of a software package (npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist...) a |
| Vextorium | Yes | $0.005 | 2 | Website security headers audit: HTTPS, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Pe |
| Vextorium | Yes | $0.006 | 2 | Compare two DeFi protocols side by side: TVL, category, number of chains, 7d change, native token and audits, |
| agent-debarment-check.iykykblog.workers.dev | Yes | $0.010 | 2 | Check whether a person or company appears on the SAM.gov federal exclusions (debarment) list. Query by name, U |
| lumierepaycheck.org | Yes | $0.010 | 2 | Score up to 100 x402 endpoints in one call. For teams: per-agent spend limits and an audit trail at lumierepay |
| api.craigmbrown.com | Yes | $0.020 | 2 | Verifies an agent's Concordium identity card integrity and badge status against the issuing registry - confirm |
| api.craigmbrown.com | Yes | $0.250 | 2 | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agent |
| shield.vainplex.dev | Yes | $0.005 | 2 | ShieldAPI - x402 security preflight before agents trust an identity, sender, or email counterparty |
| sentinel.rootstuff.io | Yes | $0.010 | 2 | Response headers and security-header report for a URL |
| data.japanagent.dev | Yes | $0.002 | 2 | Check an open-source package for known vulnerabilities via the OSV database (Google Open Source Vulnerabilitie |
| api.agentic-swarm-marketplace.com | Yes | $0.030 | 2 | Heuristic ethics and constitution-style review of a prompt excerpt. Returns pass/fail, violation flags, and se |
| api.trustsource.cc | Yes | $0.003 | 2 | Audit a site's HTTP security headers before embedding, scraping, or trusting it. Returns an A+ to F grade and |
| agenttoll.app | Yes | $0.002 | 2 | Trending token scan: the tokens moving across the crypto market right now; ?limit=N trims the list |
| zerostart-agent.jack-labs.workers.dev | Yes | $0.010 | 2 | Audit short landing-page copy for clarity, outcome, call-to-action, and readable length. |
| WalletIntel | Yes | $0.500 | 2 | Crypto wallet intelligence — risk scoring, sanctions screening, chain analysis, and narrative reports for any |
| Saylor Innovations Guide Library | Yes | $0.010 | 2 | Agent Secret-Handling Guide — Security & OpSec |
| CRA AGENT data | Yes | $0.002 | 2 | HTTP status, redirect chain with timings, total response time and security headers present or missing, for any |
| Inspect HTTP response headers | Yes | $0.003 | 2 | Fetch a URL (following redirects) and return the final response's HTTP headers, the server banner and content- |
| x402stock.xyz | Yes | $0.040 | 2 | Current state of every US-listed ticker in a single call: price, day change and percent change, volume, and VW |
| Open Source Vulnerability Check | Yes | $0.020 | 1 | CycloneDX SBOM vulnerability check — analyze bounded JSON 1.5 software bill of materials components against OS |
| invinoveritas | Yes | $0.139 | 1 | invinoveritas /web-act — AUDIT-HASHED browser actions: fetch, text extraction, Playwright screenshots, multi-s |
| invinoveritas | Yes | $0.139 | 1 | invinoveritas /browse — AUDIT-HASHED browser actions: fetch, extraction, Playwright screenshots, multi-step na |
| HALOWERK Agent Tools | Yes | $0.020 | 1 | Prueft eine Adresse auf Technik, Geschwindigkeit, Sicherheit, Auffindbarkeit und Barrierefreiheit. Je Abschnit |
| skill-audit | Yes | $0.005 | 1 | Fetch a URL and audit its content. Requires `url`. No URL to hand? POST /audit/registry runs the same scanner |
| skill-audit | Yes | $0.005 | 1 | Scan an entire public GitHub repo for malicious AI-skill/supply-chain patterns. Requires `repo`. No repo in mi |
| BundleScope | Yes | $0.100 | 1 | Token launch bundle and sniper detection on Base — flags coordinated bundle buys and snipers |
| SCVD General Store | Yes | $5.000 | 1 | The Once-Over. REQUIRES ?url= on the paid request — a signed request without it is refused before the gate and |
| Site Quality Audit | Yes | $5.000 | 1 | Full site quality audit across SEO (titles, descriptions, canonical, Open Graph, JSON-LD…), accessibility (alt |
| invinoveritas | No | $0.656 | 1 | invinoveritas /audit/agent-readiness — a RECOMPUTABLE agent-readiness verdict: scores any agent URL (0-100 + g |
| carry-intel | Yes | $0.250 | 1 | Full-universe Hyperliquid carry scan: every positive-funding perp ranked by spot-hedgeability, with pairs, OI, |
| Instant Microcopy Audit | Yes | $0.020 | 1 | Analyze French or English marketing and interface copy. Returns a clarity score, repetition data, sentence met |
| Paxie.Matrix Data API | Yes | $0.020 | 1 | Everything our desk recorded on a Solana mint in the last 48 h: the safety gate result (with rugcheck.xyz numb |
| Messy Virgo | Yes | $0.100 | 1 | Token due diligence in one call: 118 measured KPIs and 14 Messy Virgo 0-100 scores across security (honeypot, |
| MimirAPI | Yes | $0.250 | 1 | Weigh any x402 counter and get a verdict: does its URL answer a coherent 402, would the CDP Bazaar validator a |
| Security Header Diff | Yes | $0.110 | 1 | Compare a fixed list of ten security-relevant response headers across two releases and name the specific rever |
| OpenAPI Response Audit | Yes | $0.140 | 1 | Audit a real response against what the OpenAPI document promises for that operation. Resolves the declared sta |
| Duo Data Utilities | Yes | $0.050 | 1 | Validate the check digit of a financial security identifier: ISIN (ISO 6166), CUSIP, SEDOL and FIGI. Returns t |
| DCL Trust Oracle | Yes | $0.020 | 1 | Scan text for personal data: email, phone, national id, bank card, IBAN, crypto address, IP address, passport. |
| DCL Trust Oracle | Yes | $0.020 | 1 | Scan text for exposed credentials, API keys, private keys, database URLs, and webhook secrets. COMMIT when not |
| DCL Trust Oracle | Yes | $0.100 | 1 | Read one audit-chain record by tx_hash. GET path parameter, no JSON body. Returns verdict, confidence, agent_i |
| seo-audit-onpage | Yes | $0.150 | 1 | On-page SEO/AEO audit with 0-100 score. GET variant for directory probing; the URL to audit goes in 'url'. Aud |
| npm-vite | Yes | $0.001 | 1 | npm package vite: latest version, description, license, homepage and repository, weekly downloads, dependency |
| response-header-expect-ct | Yes | $0.001 | 1 | The expect-ct response header of a URL: whether it is present, its value, and a one-line reading of what the v |
| response-header-x-cache | Yes | $0.001 | 1 | The x-cache response header of a URL: whether it is present, its value, and a one-line reading of what the val |
| nuget-itextsharp | Yes | $0.001 | 1 | NuGet package iTextSharp: latest version, description, license, repository and download/publish data from the |
| Code security scan | Yes | $1.000 | 1 | Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connecti |
| Forest Gas Station | Yes | $0.003 | 1 | Known vulnerabilities for package+version; normalized evidence, not a safety verdict. |
| Forest Gas Station | Yes | $0.002 | 1 | Normalize npm or PyPI package reality: existence, requested-version existence, resolved/latest version, stalen |
| npm-puppeteer | Yes | $0.001 | 1 | npm package puppeteer: latest version, description, license, homepage and repository, weekly downloads, depend |
| pypi-aiohttp | Yes | $0.001 | 1 | PyPI project aiohttp: latest version, summary, license, requires-python, homepage/repository, release date and |
| free-texts-1860s | Yes | $0.001 | 1 | Free scanned texts from the 1860s: Internet Archive documents, pamphlets, periodicals and books dated 1860-186 |
| go-github-com-pkg-errors | Yes | $0.001 | 1 | Go module github.com/pkg/errors: latest version, description, license, repository and download/publish data fr |
| go-github-com-gin-gonic-gin | Yes | $0.001 | 1 | Go module github.com/gin-gonic/gin: latest version, description, license, repository and download/publish data |
| ChainAnalyzer | Yes | $0.250 | 1 | Top transaction counterparties for an address with entity labels, category, per-counterparty transfer counts a |
| Orcpin | Yes | $50.000 | 1 | Signed four-part audit of one x402 endpoint, by buying from it: the quote (what the 402 asks, and whether the |
| Orcpin | Yes | $50.000 | 1 | Signed four-part audit of one x402 endpoint, by buying from it: the quote (what the 402 asks, and whether the |
| seo-audit-deep | Yes | $0.500 | 1 | Deep SEO/AEO audit: everything in the basic audit plus heading hierarchy analysis, internal/external link prof |
| TrollBridge | Yes | $0.100 | 1 | NOT AN AUDIT — heuristic checklist, not a penetration test: prompt red-team screen ($0.10) — score a system pr |
| TrollBridge | Yes | $0.020 | 1 | NOT AN AUDIT — heuristic pattern sweep, not a security audit: leaked-secret sweep ($0.02) — scan a URL or past |
| TrollBridge | Yes | $0.100 | 1 | NOT AN AUDIT — heuristic screen: wallet approval surface report — live token allowances against known spender |
| TrollBridge | Yes | $0.100 | 1 | NOT AN AUDIT — heuristic screen: repo-identity + bundled-.git supply-chain scan — paste a git bundle or .git l |
| TrollBridge | Yes | $0.100 | 1 | Policy decision API for pre-execution tool gating — submit a tool name + args + your policy and get a structur |
| TrollBridge | Yes | $0.050 | 1 | NOT AN AUDIT — heuristic screen: paste a finding plus its source text (text only, no URL fetching) and get the |
| TrollBridge | Yes | $0.100 | 1 | NOT AN AUDIT — heuristic egress screen: paste your agent's outbound request log (JSON: url, method, body_snipp |
| TrollBridge | Yes | $0.020 | 1 | NOT AN AUDIT — heuristic screen: rug-pull risk score 0-100 — LP burn status, holder concentration, mint author |
| TrollBridge | Yes | $0.020 | 1 | NOT AN AUDIT — heuristic screen: wallet approval screen — unlimited token approvals and risky spender contract |
| TrollBridge | Yes | $0.050 | 1 | Token safety scan — liquidity, volume, holder concentration, and a plain-English rug verdict. Toll: $0.05 USDC |
| HubVibe | Yes | $5.000 | 1 | MCP server security scan: probe any MCP endpoint's initialize handshake and tools/list and report whether it r |
| crypto-phishing-site-check | Yes | $0.010 | 1 | Is this website a crypto phishing or wallet-drainer site? Checks the URL against the GoPlus phishing database |
| URL status and redirect chain | Yes | $0.005 | 1 | Checks one URL without downloading the page: HTTP status, the full redirect chain hop by hop with the code of |
| API Acre | Yes | $0.005 | 1 | Detect likely leaked API keys, tokens, private-key headers, JWTs, and credential assignments in caller-supplie |
| Oblique Markets | Yes | $0.010 | 1 | Use when an agent needs ghost bid audit. Returns Audit a selected agent offer against rejected affordable alte |
| xhagents.xyz | Yes | $0.100 | 1 | Scans the last blocks for USDC and WETH transfers above a USD threshold and returns the largest movements with |
| Accessibility Checker WCAG BFSG | Yes | $0.015 | 1 | Automated web accessibility audit of a page in a real browser with axe-core: every WCAG 2.2 level A and AA rul |
| xhagents.xyz | Yes | $0.050 | 1 | Document to text (PDF, scans, images, DOCX, HTML) — per-page method, digest of the bytes read |
| site.intel.rallylive.ca | Yes | $0.001 | 1 | The access-control-allow-credentials response header of a URL: whether it is present, its value, and a one-lin |
| Aayat AI | Yes | $0.050 | 1 | Audit a whole lockfile for known vulnerabilities and malware in one call: package-lock.json, yarn.lock, pnpm-l |
| GenTech Security | No | $0.010 | 1 | GenTech Labs x402 - Security |
| tokenguard | Yes | $0.050 | 1 | One-call token due diligence: structural rug/safety scan, live liquidity and market depth, optional dev activi |
| Portfolio Risk Scan | Yes | $0.150 | 1 | Pulls a wallet's holdings and runs a risk check on each, flagging which positions are honeypots / high-risk / |
| AI Wallet Security Audit | Yes | $0.060 | 1 | Pulls a wallet's active token approvals and AI writes a security audit: overall risk level, USD at risk, and c |
| WalletGuard | Yes | $0.050 | 1 | WalletGuard preflights wallet and transaction execution across major EVM chains, returning balances, activity, |
| x402-factory | Yes | $0.030 | 1 | Audit rows behind a venue-calibration cell: horizon prices and outcomes — The audit rows behind the free venue |
| B20 Pre-Trade Gate | Yes | $0.100 | 1 | 🆕 The single call before trading a Base-native B20: seize (burnBlocked) + freeze (Policy Registry) + rebase + |
| Sellability Check | Yes | $0.080 | 1 | The hard honeypot question, answered three ways: security simulation (honeypot, cannot-sell-all, sell/buy tax, |
| B20 Config Audit | Yes | $0.050 | 1 | 🆕 The B20 misconfiguration lint. Base's docs warn: a scope bound to a NON-EXISTENT allowlist silently denies E |
| Edge Agents AI | Yes | — | 1 | Cross-venue perpetual-futures funding-rate arbitrage scan across BTC, ETH, SOL and XRP, annualising each venue |
| pr-verdict | Yes | $0.030 | 1 | One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secre |
| cicd-scan | Yes | $0.020 | 1 | Static security scan of a CI/CD pipeline config: GitHub Actions, GitLab CI or CircleCI. Detects unpinned actio |
| AgentForge | Yes | $0.350 | 1 | Solana rug check for agents evaluating a token before buying: mint authority, freeze authority, holder concent |
| Edge Agents AI | Yes | — | 1 | Decision Assumption Audit. Makes assumptions, challenge, provenance, reversibility and verification explicit a |
| Edge Agents AI | Yes | — | 1 | Board Risk Radar. Makes assumptions, challenge, provenance, reversibility and verification explicit around con |
| Edge Agents AI | Yes | — | 1 | Board Challenge Pack. Makes assumptions, challenge, provenance, reversibility and verification explicit around |
| r3l4y58.bithash.cc | Yes | $0.020 | 1 | IP reputation lookup — has this address been seen scanning/attacking a live honeypot, what did it target, how |
| seo-audit-watch | Yes | $0.010 | 1 | Change watch for seo audit: runs the check and compares it with the result from your previous call for the sam |
| seo-quick-audit-watch | Yes | $0.010 | 1 | Change watch for seo quick audit: runs the check and compares it with the result from your previous call for t |
| heading-audit-watch | Yes | $0.010 | 1 | Change watch for heading audit: runs the check and compares it with the result from your previous call for the |
| cookie-audit-watch | Yes | $0.010 | 1 | Change watch for cookie audit: runs the check and compares it with the result from your previous call for the |
| security-headers-check-watch | Yes | $0.010 | 1 | Change watch for security headers check: runs the check and compares it with the result from your previous cal |
| security-grade-bulk | Yes | $0.010 | 1 | Bulk security grade: up to 20 domains in one call, processed concurrently, results returned in input order wit |
| seo-quick-audit-bulk | Yes | $0.010 | 1 | Bulk seo quick audit: up to 20 urls in one call, processed concurrently, results returned in input order with |
| website-security-report-bulk | Yes | $0.010 | 1 | Bulk website security report: up to 20 domains in one call, processed concurrently, results returned in input |
| redirect-audit-bulk | Yes | $0.010 | 1 | Bulk redirect audit: up to 20 domains in one call, processed concurrently, results returned in input order wit |
| cookie-audit-bulk | Yes | $0.010 | 1 | Bulk cookie audit: up to 20 urls in one call, processed concurrently, results returned in input order with a p |
| heading-audit-bulk | Yes | $0.010 | 1 | Bulk heading audit: up to 20 urls in one call, processed concurrently, results returned in input order with a |
| well-known-scan-bulk | Yes | $0.010 | 1 | Bulk well known scan: up to 20 domains in one call, processed concurrently, results returned in input order wi |
| security-txt-bulk | Yes | $0.010 | 1 | Bulk security txt: up to 20 domains in one call, processed concurrently, results returned in input order with |
| security-headers-check-bulk | Yes | $0.010 | 1 | Bulk security headers check: up to 20 urls in one call, processed concurrently, results returned in input orde |
| Vextorium | Yes | $0.013 | 1 | Technical scanner of Hyperliquid perpetuals: RSI(14) of the most liquid markets on 1h, 4h or 1d candles, which |
| www.tokenctl.io | Yes | $0.020 | 1 | Risk scan for one Solana SPL token. Call it before buying, listing, accepting or recommending a token you have |
| heb-utils-x402.hebutils-api.workers.dev | Yes | $0.010 | 1 | Order a researched report (company brief, Israeli regulation explainer, market scan, tech comparison). Written |
| api.hyperd.ai | Yes | $1.500 | 1 | Composed wallet threat brief. Fans out to wallet_risk, wallet_anomaly, privacy_mixer_risk, budget_guardian, an |
| protocol-tvl-brief.x402supply.com | Yes | $0.010 | 1 | Compact DeFi protocol brief by slug or name: current TVL, 1d/7d/30d TVL change, TVL by chain, category, chains |
| agent-tools-7936.onrender.com | Yes | $0.050 | 1 | Agent-readiness audit of a website: AI bots allowed in robots.txt? main content extractable? llms.txt, sitemap |
| api.ibancheck.co.uk | Yes | $0.004 | 1 | RFC 8785 key-sorted JSON canonicalization + SHA-256 hash + Merkle leaf + HMAC-SHA256 audit signature |
| api.craigmbrown.com | Yes | $0.050 | 1 | Independent audit of an agent's actual token spend against its budget and declared task scope - surfaces cost |
| crypto.forgemesh.io | Yes | $0.070 | 1 | Returns a verdict, realized pnl_pct, and direction_correct flag for any prior decision_id — the accountability |
| api.limitguard.ai | Yes | $0.900 | 1 | Quick risk score (0-100) for entity name + country. Lightweight check without full data source scan. |
| heb-utils-x402.hebutils-api.workers.dev | Yes | $0.020 | 1 | Plain-language heuristic admin-control screen of a Base token with a shareable summary. Not an audit, not advi |
| http-security-headers-grade.x402supply.com | Yes | $0.010 | 1 | Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security he |
| fetchgate.dev | Yes | $0.003 | 1 | Prompt-injection scan: fetch a URL (or POST text) and check it against 120 detection rules for injection, tool |
| api.ibancheck.co.uk | Yes | $0.003 | 1 | Cryptographic SHA-256 hash & HMAC timestamp audit seal for AI agent actions |
| api.ibancheck.co.uk | Yes | $0.025 | 1 | Complete Partner Audit Bundle: IBAN + CUI + live ANAF/VIES fiscal status + Risk Assessment + QR Code. Checks I |
| zerostart-agent.jack-labs.workers.dev | Yes | $10.000 | 1 | Audit short landing-page copy for clarity, outcome, call-to-action, and readable length. |
| mcpfax-intel.bowling-anthony.workers.dev | Yes | $0.010 | 1 | Daily state of the x402 agent economy: observed USDC inflow, seller ranking, category demand, growth, and cove |
| www.securaw.com | Yes | $0.100 | 1 | Verify a CryptoVar Black-Scholes VaR artifact by replaying its parameters, result and audit proof. 0.10 USDC. |
| www.securaw.com | Yes | $0.250 | 1 | Seeded single-exposure Monte Carlo VaR from supplied assumptions, with original CryptoVar audit artifact. No l |
| x402.coinopai.com | Yes | $0.070 | 1 | Kronos by ForgeMesh outcome audit for a prior decision_id. Compares recorded market context with later realize |
| x402.coinopai.com | Yes | $0.150 | 1 | Kronos by ForgeMesh auditable crypto market-intelligence journal combining directional bias, anomaly review, c |
| kronos.forgemesh.io | Yes | $0.070 | 1 | Returns a verdict, realized pnl_pct, and direction_correct flag for any prior decision_id — the accountability |
| gateway-wallet-payments.jerryrnapier.workers.dev | Yes | $0.100 | 1 | Timestamped homepage and five fixed discovery-path observations; not a security certification. Asynchronous du |
| datastand.dev | Yes | $0.020 | 1 | The newest npm security advisories as machine-readable JSON: severity, CVSS score and vector, CWEs, affected p |
| x402-api-24223879872.us-east1.run.app | Yes | $0.080 | 1 | WCAG accessibility audit of a public URL using headless Chromium and axe-core: violation/pass/incomplete count |
| agentrisk.dev | Yes | $0.150 | 1 | Pre-trade token risk check on Base for AI agents and autonomous trading bots. Detects honeypots, rug pulls, hi |
| api.craigmbrown.com | Yes | $0.250 | 1 | Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual require |
| agentdata-api.sander-van-aard.workers.dev | Yes | $2.000 | 1 | Subscribe for 30 days to the change feed behind /crypto/scan: one cursor over the upstream advice ledger, all |
| api.sys84.org | Yes | $0.050 | 1 | Stateful Robinhood Chain survivor and acceleration audit for agents before they promote, discuss, or route aro |
| lazaretto.dev | Yes | $0.030 | 1 | Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact vers |
| aeonos.basechainlabs.com | Yes | $2.500 | 1 | Full AI search visibility audit — AEO/GEO/SEO 4-layer strategy, AI inclusion check, schema gaps, llms.txt revi |
| hivemindos-paid-agent-gateway.hivemindos.workers.dev | Yes | $0.990 | 1 | Audit a public X account's recent engagement patterns in one x402 call. Returns evidence-backed recommendation |
| lab.paidapis.net | Yes | $0.020 | 1 | Filtering: USDC on Base settles thousands of transfers a minute. This scans the raw feed and returns only tran |
| ot-intel-api.onrender.com | Yes | $0.020 | 1 | ICS malware encyclopedia. Pass ?name=PIPEDREAM. Returns capabilities, targeted OT protocols, attributed actor, |
| saylorinnovations.com | No | $0.003 | 1 | DeFi Protocol TVL. DeFi protocol TVL: total value locked, 1-day and 7-day change, per-chain TVL with borrowed |
| CodePulse | Yes | $0.005 | 1 | Package security scanner — CVEs, license check, typosquat detection. |
| Scan MCP manifest for risks | Yes | $0.004 | 1 | Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter |
| Analyze URL trust | Yes | $0.004 | 1 | Score how likely a URL is to be phishing or untrustworthy using offline lexical and structural heuristics (no |
| Apify Actor Audit | Yes | $1.000 | 1 | Audit an Apify actor before you spend on it. Send one actor ID (e.g. apify/instagram-scraper) and find out if |