66 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Cheap structural IBAN validation: ISO 13616 checksum + per-country structure/length. Returns valid plus, on rejection, a granular error_type (invalid_checksum, invalid_length, invalid_structure, invalid_country), the cou...
Paid content hash + integrity ledger (cycle 217, x402 $0.01) - GET ?text=<STRING> OR ?data=<BASE64> OR ?sample=1|2|3 OR POST application/json {text|data}. Computes every digest an AI agent needs BEFORE it trusts a downlo...
Paid x402 seller catalog-integrity audit (cycle 185, x402 $0.001) - audits an x402 seller's OWN paid-route catalog for the defects that mechanically suppress demand. GET with no params audits THIS seller live against its...
Paid SMTP credential-leak probe (cycle 158, x402 $0.0005) - actively probes each MX host on ports [25, 465, 587] for credential-handling vulnerabilities. Per-port: opens TCP, reads banner, sends EHLO, captures AUTH mecha...
Paid x402 payment receipt parser + on-chain tx verifier (cycle 151, x402 $0.001) - accepts a server-returned X-PAYMENT-RESPONSE base64 (the canonical x402 settlement receipt) OR a raw transaction hash (0x + 64 hex) which...
Paid CSP x Subresource-Integrity (SRI) verifier (cycle 150, x402 $0.001) - fetches URL HTML, extracts every external <script src=> + <link rel=stylesheet href=>, fetches each asset (200KB cap), computes sha256 + sha384,...
Paid llms.txt multi-target drift monitor (cycle 149, x402 $0.001) - up to 20 domains in parallel via ThreadPoolExecutor; per_host H1 + first-5-URLs + sha256 fingerprint; compares to /tmp/llms_txt_monitor_state.json to de...
Paid Content-Encoding integrity + compression-bomb detector (cycle 141, x402 $0.001) - fetches URL 3x: no Accept-Encoding baseline + Accept-Encoding: gzip + Accept-Encoding: br, gzip; records raw bytes + Content-Length +...
Paid CSP inline-fidelity validator (cycle 130, x402 $0.001) - fetches target URL, parses CSP, extracts every inline <script>/<style> block + event handler, computes sha256 of each, reports per-block {hash_in_csp, nonce_i...
Paid TLS server-cert trust chain inspection (cycle 126, x402 $0.001) - opens TLS via ssl.create_default_context, pulls full DER chain via get_verified_chain(), parses each cert (subject/issuer/not_before/not_after/key_ty...
Paid CT-log certificate pre-fingerprint (cycle 124, x402 $0.001) - queries crt.sh for the target domain, parses every returned certificate record, and aggregates total_certs_observed + unique_sha256_count + duplicate_cer...
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token (sha256/sha384/sha512/sha1...
Paid SRI readiness audit - probes every <script src=...> tag on a page, classifies each as same-origin vs third-party, checks for presence of integrity= + crossorigin= attributes, HEAD-probes each script for reachability...
Paid deep Content-Security-Policy analyzer — parses ALL 4 CSP delivery mechanisms (header + meta + report-only variants), classifies each source value (wildcard/scheme/host/nonce/hash/unsafe-inline/unsafe-eval/strict-dyn...
Paid Subresource Integrity hash-match verifier — fetches every <script src=> + <link rel=stylesheet/modulepreload/preload href=> with integrity attribute, SHA-256/384/512-hashes the bytes and compares to declared base64...
Paid Open Graph + Twitter Card spec validator — required OG detection (og:title/type/image/url), recommended (description/site_name/locale/image:width/image:height/image:alt), og:type enum validation (website/article/boo...
Paid Subresource Integrity (SRI) audit — per-external script+stylesheet integrity/crossorigin/referrerpolicy capture, CDN host breakdown, top untrusted-CDN list, missing-SRI risk scoring, sri_score 0-100 A-F grade via x4...
Paid script-inventory extractor (x402 $0.001) - GET ?url=<URL> enumerates every <script src> with integrity/crossorigin/type attributes and reports same-origin vs third-party breakdown. via x402