HubVibe x402 REST usage
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any...
623 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any...
Web search built for agents, served over Pocket Network: POST /v1/search with a query and an optional max_results, and get the results back as one JSON object. Results vary run to run, as web search does. GET /v1/version...
Complete AI-powered smart contract security audit - analyzes code against checklist and provides detailed findings with severity levels. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} ever...
Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1),...
The deeper tier: everything in the standard audit plus the attack surface from Certificate Transparency logs (subdomains), the detected tech stack, and domain registration, in a longer graded report with a fuller remedia...
AI-powered smart contract audit checklist matching - analyzes contract code and returns relevant security checklist items. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} every 5-10 seconds...
Hand over a domain and get one graded security & email-deliverability audit: SPF, DMARC, DKIM and MX (why your mail lands in spam), the web security headers, and the TLS certificate - every finding from a live probe, wit...
Multi-oracle price consensus (?symbol=SOL|BTC|ETH): median across Pyth, Binance, Coinbase, Kraken and CoinGecko queried in parallel, with spread in basis points, outlier detection for stale or manipulated feeds, per-s...
CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affe...
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / ant...
Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1),...
Per-country conflict / instability signal from GDELT (?country=)
Quick Solidity pre-audit check, $0.90 USDC on Base: send source or a verified contract address + chain; the same automated engine returns the verdict (grade, score, security and owner-trust risk), severity counts, the to...
The most recent quality snapshot for the repository. Returns 404 if no snapshot exists.
Search functions or classes by meaning and by keyword. ``mode=bm25`` ranks by lexical match, ``mode=vector`` by embedding similarity to the query text, and ``mode=hybrid`` (default) fuses both rankings with reciprocal ra...
Which crypto narratives lead right now: market-cap momentum of 18 sector narratives (AI agents, DeFi, RWA, DePIN, layer 1/2, memes and more) over 15, 30 and 60 days, measured against BTC, ETH and the altcoin market. Each...
Complete ERC-20 portfolio for a Base address — every non-zero token with balance, metadata and live USD value, plus a total. Token discovery via CDP Data API (Coinbase) with Alchemy fallback; USD from DexScreener.
Automated security checks for one x402 endpoint — not a penetration test. Eight non-destructive, unpaid probes: paywall presence, challenge sanity, garbage and forged (invalid-signature) payment rejection, exposure surfa...
EVM wallet risk scoring — transaction patterns, exposure analysis, suspicious activity
Trust check an npm package before an agent installs it: typosquat screen, deprecation, package age, maintainers, weekly downloads, source link.
Read-only public DNS lookup report
Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructi...
first-funder goes one hop; this walks the funding chain back up to 8 hops to a recognisable origin (a CEX/bridge on-ramp — lower-risk provenance) OR a SANCTIONED address (dirty money, taint by provenance) OR a dead-end o...
🆕 Commerce Payments flows are DRIVEN by an operator — it authorizes escrow, captures for merchants and takes the fees. This audits one before you rely on it: 90-day volumes, fees taken, capture-vs-reclaim record (missed...