193 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid TLS server-cert trust chain inspection (cycle 126, x402 $0.001) - opens TLS via ssl.create_default_context, pulls full DER chain via get_verified_chain(), parses each cert (subject/issuer/not_before/not_after/key_ty...
Paid CSP inline-fidelity validator (cycle 130, x402 $0.001) - fetches target URL, parses CSP, extracts every inline <script>/<style> block + event handler, computes sha256 of each, reports per-block {hash_in_csp, nonce_i...
Paid Content-Encoding integrity + compression-bomb detector (cycle 141, x402 $0.001) - fetches URL 3x: no Accept-Encoding baseline + Accept-Encoding: gzip + Accept-Encoding: br, gzip; records raw bytes + Content-Length +...
Paid x402 payment receipt parser + on-chain tx verifier (cycle 151, x402 $0.001) - accepts a server-returned X-PAYMENT-RESPONSE base64 (the canonical x402 settlement receipt) OR a raw transaction hash (0x + 64 hex) which...
Paid llms.txt multi-target drift monitor (cycle 149, x402 $0.001) - up to 20 domains in parallel via ThreadPoolExecutor; per_host H1 + first-5-URLs + sha256 fingerprint; compares to /tmp/llms_txt_monitor_state.json to de...
Paid CSP x Subresource-Integrity (SRI) verifier (cycle 150, x402 $0.001) - fetches URL HTML, extracts every external <script src=> + <link rel=stylesheet href=>, fetches each asset (200KB cap), computes sha256 + sha384,...
Paid SMTP credential-leak probe (cycle 158, x402 $0.0005) - actively probes each MX host on ports [25, 465, 587] for credential-handling vulnerabilities. Per-port: opens TCP, reads banner, sends EHLO, captures AUTH mecha...
Paid x402 seller catalog-integrity audit (cycle 185, x402 $0.001) - audits an x402 seller's OWN paid-route catalog for the defects that mechanically suppress demand. GET with no params audits THIS seller live against its...
Paid content hash + integrity ledger (cycle 217, x402 $0.01) - GET ?text=<STRING> OR ?data=<BASE64> OR ?sample=1|2|3 OR POST application/json {text|data}. Computes every digest an AI agent needs BEFORE it trusts a downlo...
Wayback machine snapshots history - list every archived capture of a URL with its timestamp, HTTP status code, MIME type, content digest and length, the date span, the content CHANGE points between captures and the captu...
Wayback machine snapshots history - list every archived capture of a URL with its timestamp, HTTP status code, MIME type, content digest and length, the date span, the content CHANGE points between captures and the captu...
Wayback machine snapshots history - list every archived capture of a URL with its timestamp, HTTP status code, MIME type, content digest and length, the date span, the content CHANGE points between captures and the captu...
Page change detection - website change monitoring, detect webpage changes, url change detection. Fetches a public URL and reports whether the page changed: the sha256 fingerprint of the text a reader sees, the HTTP statu...
ALIAS of the Text Hash API, published at the EXACT slug the router's winning row publishes. Same payload. via x402, $0.01
ALIAS of the Text Hash API, published at the EXACT slug the router's winning row publishes. Same payload. via x402, $0.01
ALIAS of the Text Hash API, published at the EXACT slug the router's winning row publishes. Same payload. via x402, $0.01
ALIAS of the Text Hash API, published at the EXACT slug the router's winning row publishes. Same payload. via x402, $0.01
Paid script-inventory extractor (x402 $0.001) - GET ?url=<URL> enumerates every <script src> with integrity/crossorigin/type attributes and reports same-origin vs third-party breakdown. via x402
Paid script-inventory extractor (x402 $0.001) - GET ?url=<URL> enumerates every <script src> with integrity/crossorigin/type attributes and reports same-origin vs third-party breakdown. via x402
Paid Subresource Integrity (SRI) audit — per-external script+stylesheet integrity/crossorigin/referrerpolicy capture, CDN host breakdown, top untrusted-CDN list, missing-SRI risk scoring, sri_score 0-100 A-F grade via x4...
Paid Subresource Integrity hash-match verifier — fetches every <script src=> + <link rel=stylesheet/modulepreload/preload href=> with integrity attribute, SHA-256/384/512-hashes the bytes and compares to declared base64...
Paid deep Content-Security-Policy analyzer — parses ALL 4 CSP delivery mechanisms (header + meta + report-only variants), classifies each source value (wildcard/scheme/host/nonce/hash/unsafe-inline/unsafe-eval/strict-dyn...
Paid SRI readiness audit - probes every <script src=...> tag on a page, classifies each as same-origin vs third-party, checks for presence of integrity= + crossorigin= attributes, HEAD-probes each script for reachability...
Paid DNSSEC chain-of-trust validation (cycle 103) — fetches the zone's DNSKEY + RRSIG via Cloudflare DoH, walks the chain (zone DNSKEY ← DS at parent); for each step verifies the DS digest matches a computed DNSKEY diges...