Openapi Quality x402 REST
Paid OpenAPI / Swagger 2.0 best-practices quality audit (cycle 114) — accepts GET ?url=<openapi.json URL> OR POST application/json with {spec:{...}} or {spec_text:"<YAML or JSON>"}; scores 12 quality dimensions: (a) Open...
1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid OpenAPI / Swagger 2.0 best-practices quality audit (cycle 114) — accepts GET ?url=<openapi.json URL> OR POST application/json with {spec:{...}} or {spec_text:"<YAML or JSON>"}; scores 12 quality dimensions: (a) Open...
Paid per-cookie IAB TCF v2.2 purpose classification (cycle 112) — fetches URL with HTTPCookieProcessor, captures every Set-Cookie, extracts inline document.cookie= writes, classifies each cookie by NAME heuristics (ga/_g...
Paid readability + per-paragraph reading-time estimator (cycle 110) — fetches URL, extracts paragraph-level text, then computes 6 readability formulas (Flesch, Flesch-Kincaid, Gunning Fog, SMOG, Coleman-Liau, ARI) + tota...
Paid deep DMARC policy forensic analyzer (cycle 110) — fetches _dmarc.<domain> TXT via Cloudflare DoH and parses ALL DMARC tags (p, sp, pct, rua, ruf, adkim, aspf, rf, ri, fo) per RFC 7489. Returns policy_strength (none/...
Paid JSONPath extraction (cycle 108) — accepts GET ?url=<URL>&path=<JSONPATH> OR GET ?json=<urlencoded JSON>&path=<JSONPATH> OR POST application/json {url|json, path}; fetches the URL (or parses inline JSON) and applies...
Paid AI-agent tool-call card generator (cycle 105) — accepts GET ?url=<TARGET> OR POST application/json {url: <TARGET>}; probes /.well-known/x402 + 4 OpenAPI candidate paths + /llms.txt; aggregates into a single structur...
Paid AI discovery surface cross-validator (cycle 104) — fetches 4 surfaces (llms.txt + /.well-known/security.txt + openapi.json + agents.txt); extracts the contact claim from each (H1 title / RFC 9116 Contact / openapi.i...
Paid Model Context Protocol (MCP) server discovery (cycle 103) — fetches a target's MCP descriptor from 6 candidate paths (/.well-known/mcp.json, /mcp.json, /.well-known/model-context-protocol.json, /model-context-protoc...
Paid x402 SELLER probe (cycle 102) — fetches a target domain's /.well-known/x402 discovery doc, parses several schema variants (object.endpoints / object.items / object.routes / bare-list / line-delimited), returns raw_e...
Paid open-source LICENSE evolution / migration analyzer (cycle 179, x402 $0.001) - accepts GET ?repo=<ORG>/<REPO> (e.g. elasticsearch/elasticsearch) OR ?url=https://github.com/<...> OR ?package=<NPM-PKG-NAME> (resolves n...
Paid AI-agent cost-trend analyzer + multi-target batch estimator (cycle 178, x402 $0.001) - accepts POST application/json {'targets':[{'url':...,'weight':..}, ...]} OR POST application/json {'urls':[...],'weighting':'equ...
Paid x402 task-to-route recommender (cycle 175, x402 $0.001) - accepts GET ?task=<TEXT> OR GET ?q=<TEXT> OR POST application/json {'task':...}; pulls our own /.well-known/x402 catalog (~249 endpoints), scores each endpoi...
Paid MTA-STS (RFC 8461) policy+record cross-validator (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN>; actively probes _mta-sts.<domain> TXT (RFC 8461 SS3.1) via DoH + https://mta-sts.<domain>/.well-known/mta-sts.txt...
Paid DNS SRV (RFC 2782) record mapper + service-discovery auditor (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN> + ?service=<SVC> + ?proto=<tcp|udp|tls> OR shorthand ?q=<SVC>.<PROTO>.<DOMAIN>; actively probes Cloudf...
Paid x402 seller leaderboard / ranking auditor (cycle 173, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our /.well-known/x402) + ?top=<N> (default 25, max 100); clusters all payable endpoints by payTo, com...
Paid JWKS (RFC 7517 + RFC 8414) JWK Set inspector (cycle 173, x402 $0.001) - accepts ?jwks_url=<URL> OR ?jwks=<JWK_SET_JSON> OR ?url=<PAGE> (auto-discovers jwks_uri via /.well-known/openid-configuration + /.well-known/oa...
Paid subdomain-takeover risk audit (cycle 100) — discovers subdomains via HackerTarget hostsearch, resolves CNAME chain (max 8 hops) via Cloudflare DoH, fingerprints 30+ known-vulnerable service providers (AWS S3, CloudF...
Paid META-API cost projector for THIS service (cycle 98) — given calls_per_day + route list (or "all") + period (daily|weekly|monthly), pulls the live x402 price catalog and projects aggregate_daily_cost_usd + aggregate_...
Paid OpenAPI/Swagger/AsyncAPI/GraphQL/Postman/JSON-Schema spec format + version detector (cycle 98) — probes 9 conventional spec paths (/openapi.json + /openapi.yaml + /swagger.json + /swagger.yaml + /.well-known/openapi...
Paid Client Hints + Permissions-Policy probe (cycle 97) — captures Accept-CH (RFC 7231 §5.3.7) + Critical-CH (RFC 9981) request lines for Server Hints, parses Permissions-Policy header for feature gating intent; per-hint...
Paid DNT/GPC policy probe (cycle 96) — fetches target URL 3x (baseline, with DNT:1, with Sec-GPC:1); compares Set-Cookie count + body size to detect server-side honoring of privacy signals; probes 5 common privacy-policy...
Paid API-freshness probe (cycle 96) — HEAD-probes 10 conventional health/version endpoints (/health, /healthz, /ready, /readyz, /livez, /api/health, /api/version, /api/status, /api/ping, /api/info); per-probe status + la...
Paid CAPTCHA + bot-management vendor detection (cycle 94) — page-level fingerprint of 11 vendors (reCAPTCHA v2/v3/enterprise + hCaptcha + Cloudflare Turnstile + Cloudflare challenge page + Arkose Labs + GeeTest + DataDom...
Paid page-archaeology — detects parked domains, thin content, stale copyright (>5y), auto-generated patterns, missing author bylines; returns is_parked + is_thin + is_stale + classification (human_curated/auto_generated/...