230 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Deterministic schema guard and compliance auditor: validates OpenAPI 3.1, x402 Bazaar protocols, and JSON Schema Draft 2020-12 with strict syntax scoring, structural error reporting, and health checks ($0.50 USDC). Input...
Real-time Base wallet forensics, KYA attestation & reputation audit: queries ETH/USDC balances, nonce count, ERC-8004 identity, EIP-3009 pipelines, sybil behavior, and circular wash-trading detection ($0.75 USDC). Input:...
Domain audit & domain security inspection: domain WHOIS/RDAP, domain DNS records audit, TLS 1.3 certificate audit, and domain verify ($0.75 USDC). Input: domain or url parameter.
Onchain risk assessment for one token on one chain (Base, Ethereum, BSC, Polygon, Arbitrum, Solana and others): a single risk score from 0 to 100 with a severity level, explicit risk flags such as honeypot, high transfer...
Deterministic on-page technical-SEO audit of a single web page. Fetches the page (redirects + response headers) and runs 24 mechanical rules across six categories (indexability, title/meta, headings, structured data, ima...
HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HST...
DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, p...
HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HST...
AI-agent readiness audit, $0.001 USDC per call: How ready is a website for AI agents? Live checks of /llms.txt, robots.txt rules for 12 AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot…), sitemap.xml...
Fetch any public URL and report whether its HTTP 402 challenge is a schema-valid x402 v2 PaymentRequired, payable in Base USDC, and catalog-ready (bazaar discovery declaration + facilitator support).
Canonical URL check: the rel=canonical of a page, whether it is self-referencing, absolute and on the same host, the final URL after redirects, and whether the page is set noindex. Catch duplicate-content and indexing mi...
prelaunch audit for an agent spec or checklist: flags obvious launch risks around secrets, unsafe tools, missing evals and rate limits.
Deterministic LLM red-team scan: prompt injection, jailbreak, system-prompt extraction and MCP tool abuse in agent prompts.
Paid x402 resource-scheme audit (cycle 193, x402 $0.001) - GET ?limit=N default 12 max 40 OR ?sample=/api/a,/api/b. Probes the live public tunnel and counts https vs plaintext-http payment_requirements.resource fields. R...
Paid x402 funnel conversion audit (cycle 201, x402 $0.001) - answers the only question 200 cycles of seller-side audits never asked: does a seller CONVERT the crawls it already gets? Reads the seller's OWN access log, se...
Paid x402 facilitator benchmark (cycle 196, x402 $0.001) - GET ?facilitator=&network=&asset=&pay_to=&rounds=N benchmarks the facilitator that EVERY x402 payment funnels through: live /supported capability probe (does it...
Paid x402 index reachability audit (cycle 198, x402 $0.001) - GET ?url=<SELLER_URL> (comma-separated up to 4) or ?sample=N audits whether a seller is reachable through the BUYER-SIDE INDEX layer, not just its own HTTP su...
Paid x402 seller catalog-integrity audit (cycle 185, x402 $0.001) - audits an x402 seller's OWN paid-route catalog for the defects that mechanically suppress demand. GET with no params audits THIS seller live against its...
Paid OpenAPI/Swagger security-smell linter per OWASP API Top 10 (2023) (cycle 160 restored 2026-10-17, x402 $0.001) - accepts GET ?url=<TARGET> (walks 6 candidate paths /openapi.json+/openapi.yaml+/swagger.json+/swagger/...
Paid CDN edge cache-key constructor analyzer (cycle 158, x402 $0.0005) - actively probes the CDN edge cache across 9 variation dimensions (Accept-Language, Accept-Encoding, User-Agent, Cookie, Authorization, Origin, Refe...
Paid DNS CAA (Certification Authority Authorization) policy audit (cycle 156, x402 $0.001) - parses a domain's CAA records per RFC 8659, classifies each authorized CA token against a 32-CA registry (Let's Encrypt/DigiCer...
Paid OWASP API Security Top 10 (2023) one-call composite audit (cycle 151, x402 $0.001) - fetches target URL + probes 24 conventional API paths in parallel via ThreadPoolExecutor, runs all 10 OWASP 2023 category checks:...
Paid WebAssembly CSP + wasm-unsafe-eval coverage analyzer (cycle 137, x402 $0.001) - fetches target URL, scans for WASM indicators (inline WebAssembly.instantiate/compile + .wasm file references + <link rel=preload as=fe...
Paid Permissions-Policy + Feature-Policy header audit (cycle 124, x402 $0.001) - fetches target URL + iterates ALL Permissions-Policy (modern) AND Feature-Policy (legacy) headers, parses 17 tracked features (camera/micro...