Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Live CISA ICS-CERT advisories filtered by vendor or sector. Pass ?vendor=siemens or ?sector=energy. Returns advisory IDs, CVSS scores, CVE lists, OT severity, and sector tags. Up to 25 results.
Audit what an agent believes about companies: send claims (subject, field, value) and get, claim by claim, supported, contradicted, stale or not_checkable with the register's own value, its own date and a citation. field...
Audit supplied HTML for metadata, canonical URLs, indexability directives, headings, image alternatives, form labels, link names, social metadata and JSON-LD validity. Returns evidence and practical fixes. Static checks...
Prepaid credit of $0.10 for paid API calls without signing each request. On PageAudit it pays for fix prompts for coding agents at $0.10 each after 3 free units and 30-day plans that check 25, 100 or 300 more pages every...
Verifiable green transparency pack v3: Spearman IC · James–Stein shrink · BH-FDR fusion (Watt · CQS · Taxonomy · Nature · sub-dimensions) + MiCA climate proxies with provenance and Scope gaps. Freemium card is free. HMAC...
Dokimo Verify API (GET) - scheme demo: recomputes a sample dokimo-merkle-v1 proof to its root and verifies nothing of yours. For real caller verification, POST /paid/verify with {leaf, proof_path, root, rule_version_comm...
Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a stated minimum; a se...
Look up a vulnerability by CVE or GHSA id (NVD: description, CVSS score and vector, CWE, CISA known-exploited flag; OSV: affected packages and fixed versions) or check a package version for known vulnerabilities via OSV....
Enumerate a domain's external attack surface in one workflow: certs, DNS posture, email auth, HTTP security headers, and tech stack. Security audit skill pack: one x402 payment runs 7 underlying tools (cert-transparency,...
Audit npm or Python dependencies. Checks each package against registry for latest version, deprecation, vulnerabilities. Verifiable against actual registries.
SEC Form 13F aggregated holdings verdict: by manager (name or CIK) get the latest-quarter portfolio total, position count, top 10 holdings and quarter-over-quarter change; by CUSIP get how many 13F managers hold the secu...
Invasive species alerts for conservation and naturalist agents. Returns threats, spread, control methods, and reporting channels for any region.
Audit up to 10 survey items for denominator errors, incompatible source totals and multi-select percentage mistakes. Returns corrections and a review queue from aggregate inputs; no respondent records.
Audit an HTTP/HTTPS URL for metadata leaks: server/framework headers, author/generator meta tags, HTML comments, and third-party trackers.
Metric-imperial conversion API: miles↔km, lb↔kg, °F↔°C, gallons↔liters and 100+ more units, one call, exact factors. Deterministic and auditable — cheaper than burning reasoning tokens, zero arithmetic-hallucination risk...
Returns a full decision journal entry — directional_bias, calibrated_confidence, anomaly_score, and agreement_score — plus a decision_id, combining signal, anomaly, and calibration checks into one auditable record for ag...
Kronos by ForgeMesh auditable crypto market-intelligence journal combining directional bias, anomaly review, calibrated confidence, and verification in one record with a decision_id. Pair with Kronos Audit to measure the...
Website audit bundle for local business websites and lead qualification: performance (browser-measured), security headers and TLS, SEO basics, accessibility and AI-crawler visibility of one public page, with section scor...
CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status...
HMAC-signed readiness attestation pack for an RWA score/dossier — auditable proof artifact for desks. Pay $0.15 for a signed trail legal can point to. Not a notary act or trade authorization. Task: Call when legal/audit...
Screens names of people or companies against keyless public sanctions lists - OFAC SDN and the UN Security Council Consolidated List (names + aliases). Returns one brief per name: scored possible matches + a review signa...
Run the mail configuration check (MX, SPF, DMARC) on up to 20 domains in one request. Results keep the input order, and items that fail for a technical reason come with a token for a free retry. Use when an agent must au...
Returns a verdict, realized pnl_pct, and direction_correct flag for any prior decision_id — the accountability check that closes the loop on a /kronos/decision call.
Xynaptic Security Insider — insider transactions (Form 4) of a US listed company: the 15 most recent filings with officers who filed, dates and accession links. The classic insider-activity signal from official regulator...