Top holders x402 REST
Top holders of a security by position value.
0.01 USDC per call
per call
Security
Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
16,019 services with a source
668 pages
Audit x402 REST
Tool-ergonomics audit — $0.05 buys one full tool-ergonomics audit report for one submitted MCP manifest. — the verdict and banding, the full sections A–D results with per-tool evidence, and the ordered fix list, graded u...
0.05 USDC per call
per call
PAL AIEO Catalog Audit x402 REST
Shopify and Google Merchant Center / Google Shopping product-feed audit for 1-100 catalog records. Detect feed errors, duplicate IDs, invalid GTIN/UPC/EAN checksums, malformed URLs and prices, availability issues, and br...
0.01 USDC per call
per call
Query x402 REST
OSV.dev vulnerability query: one package+version
0.02 USDC per call
per call
checked
Domain check x402 REST
Domain phishing-risk heuristic verdict: a deterministic 0-100 score with source-cited flags from RDAP registration age, DNS and mail-authentication records (SPF/DMARC), certificate-transparency history and an HTTPS reach...
0.003 USDC per call
per call
Ohey MCP
Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.
no price published
Token check x402 REST
Token security verdict for BSC, Base, Ethereum and Solana token contracts: risk level, honeypot/scam flags, buy and sell tax, verified source status. Data: Binance Web3 security audit.
0.005 USDC per call
per call
RealEstate-Analytics.ai MCP
Prospect, grade and analyze off- or on-market real estate deals with deterministic, auditable math.
no price published
Cra readiness x402 REST
Repository or manifests in, EU Cyber Resilience Act Art. 14 position out: dependency-advisor resolves every declared package to its locked version (deterministic, no model), those versions go to cra-exploit-clock as pack...
2.4 USDC per call
per call
Citation audit x402 REST
Bibliography in, evidence audit out: reference-verifier checks every reference (fabricated, mis-cited, retracted, corrected); the top DOI-bearing references (corrections first, then the most cited in the manuscript) get...
3.2 USDC per call
per call
Token vault ladder x402 REST
One decision on holding a Base token and a vault position: token-trap-detector (live bytecode, proxy slots, honeypot simulation) and vault-exit-lawyer (redeem limits, queue, admin powers, eth_call simulation) run in para...
1.2 USDC per call
per call
Audit contract x402 REST
Solidity vulnerability analysis (reentrancy, overflow, access control, logic bugs) with a severity-ranked JSON report.
1 USDC per call
per call
Cra exploit clock x402 REST
Takes a CycloneDX or SPDX JSON SBOM (or a purl list), asks OSV.dev for the advisories that affect each exact component version (OSV evaluates the version ranges per ecosystem), then checks each CVE against the CISA Known...
2 USDC per call
per call
Securityheaders x402 REST
Paid HTTP security header audit (CSP/HSTS/X-Frame-Options/etc) via x402
0 USDC per call
per call
Compliance Snapshot x402 REST
Paid composite agent-trustworthiness score — security headers (HTTPS/HSTS/CSP/XFO/XCTO/RP/PP) + discoverability (robots/sitemap/llms.txt/security.txt) + standards (structured data/lang/cookie consent) rollup with A-F gra...
0 USDC per call
per call
Canonical Audit x402 REST
Paid canonical URL consensus audit — link rel=canonical + HTTP redirect final + og:url + twitter:url + JSON-LD url/@id/mainEntityOfPage + hreflang x-default compared, consensus URL + agreement_count + canonical_health_sc...
0 USDC per call
per call
WCAG Audit x402 REST
Paid deep WCAG 2.1/2.2 AA accessibility audit — forms+inputs (label/aria-label/aria-labelledby/placeholder), autocomplete token validity, button+link accessible-name, heading hierarchy (skip-level + multiple-h1 detection...
0 USDC per call
per call
Exposure Surface x402 REST
Paid security exposure-surface audit — HSTS preload-list membership via hstspreload.org API + HSTS header detection, RFC 9116 security.txt presence+format-validity (Contact/Expires/Canonical/Preferred-Languages), 18-path...
0 USDC per call
per call
Cookie Samesite x402 REST
Paid per-cookie security-flags deep audit — parses every Set-Cookie individually for SameSite (Strict/Lax/None/missing/Lax-by-default-heuristic) + Secure + HttpOnly + Path + Domain (broad-domain detection) + Max-Age + Ex...
0 USDC per call
per call
Security TXT Audit x402 REST
Paid security.txt RFC 9116 deep audit — path discovery tries /.well-known/security.txt then /security.txt, parses all fields with line-continuation support, strict Contact format validation (mailto: + https://), strict E...
0 USDC per call
per call
HTTP Method Policy x402 REST
Paid HTTP-method policy + dangerous-method exposure audit — OPTIONS Allow/DAV/ACAO/ACAM + TRACE echo-back + CONNECT + PUT/DELETE/PATCH write exposure + 4 method-override header sniffing (X-HTTP-Method-Override/X-Method-O...
0 USDC per call
per call
CSP Deep x402 REST
Paid deep Content-Security-Policy analyzer — parses ALL 4 CSP delivery mechanisms (header + meta + report-only variants), classifies each source value (wildcard/scheme/host/nonce/hash/unsafe-inline/unsafe-eval/strict-dyn...
0 USDC per call
per call
Forms Check x402 REST
Paid form security + accessibility audit — per-form action analysis (empty/#/javascript:/data:/mixed-content http-on-https), method (GET with passwords = credential-in-URL), enctype (text/plain CRLF injection), target=_b...
0 USDC per call
per call
Cache Freshness x402 REST
Paid cache-freshness strategy audit — probes HTML page + /favicon.ico + /robots.txt + /sitemap.xml + first stylesheet URL + first script URL; for each captures Cache-Control directives + ETag + Last-Modified + Age + Vary...
0 USDC per call
per call