1,159 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header, claims and the exact reason if invalid. Tokens ar...
TLS certificate of a domain: whether it is valid, issuer, subject, valid-from and expiry dates, days left, all SAN hostnames, TLS version and cipher. Use for uptime/expiry monitoring or security checks.
Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, with MITRE's required...
Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/...
Base Latest Block: current Base mainnet block number, timestamp, base fee and gas used. $0.001 per call.
Live DNS lookup for a domain: returns name, type and records[]. Supported record types: A, AAAA (addresses as strings), MX ({exchange, priority} objects), TXT (each record an array of its strings), NS and CNAME (hostname...
Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains...
Static application-security scan of a single code blob for CWE Top-25 logic bugs (SQL injection, XSS, command injection, SSRF, path traversal, insecure deserialization, weak crypto and more). Pass the code and its langua...
Full risk assessment for an SPL token mint: risk score and level, the flags that drove it, bundle detection, the deploying wallet when it is known, and a human-readable summary. Where the mint has already been resolved,...
Token verdict / rug check: an A-F safety grade, a one-line verdict and a plain-language take on any token on Base, Ethereum, BSC, Arbitrum, Optimism, Polygon, Avalanche or Solana, with a shareable page and card image. Bu...
Crypto sanctions screening API (OFAC). Sanctions screen for one crypto address, for agents and apps that send payments: exact match against all 1058 digital currency addresses in the official US Treasury OFAC SDN list (E...
Use before buying or approving an unknown ERC-20 token on Base. Rule-based check straight from the chain, without AI - contract and proxy (upgradeable?), owner and whether it was renounced, risky owner functions in the b...
pactlint (Tanod) source lookup: verified Solidity source, ABI and compiler settings of a contract (Sourcify) Use when an agent needs the verified source, ABI and compiler settings of a contract at a known address.
Use when: is this link a phishing or scam site? Check a URL for phishing/scam signals: MetaMask eth-phishing-detect + Phishing.Database blocklists, RDAP domain age, punycode and brand-lookalike detection, HTTPS reachabil...
URL safety preflight: screen a link before an agent opens it — syntax, host/IP, patterns, redirects, optional threat intelligence.
TLS certificate of a domain: issuer, validity dates, days until expiry, names covered (SAN), whether it matches the domain and is trusted, TLS version and cipher. For uptime and security monitoring.
Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, sequences...) and tips. Evaluated in memory, never sto...
Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header, claims and the exact reason if invalid. Tokens ar...
NPM package info API: package registry lookup for npm, PyPI and Cargo with latest version, age, license, deprecation, weekly downloads and OSV vulnerabilities. Dependency check before install.
Offline transaction and signature safety check API for crypto wallets. Offline pre-sign check (no RPC, fast): decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009), an EIP-7702 authorization or an x402 40...
Crypto sanctions screening API (OFAC). Sanctions screen for one crypto address, for agents and apps that send payments: exact match against all 1058 digital currency addresses in the official US Treasury OFAC SDN list (E...
Live feed of freshly-detected malicious addresses on Base — address-poisoning seeders caught via zero-value transfer sprays, updated continuously by our on-chain collector. Poll ?since=<unix> to ingest only new threats i...
Run a low-cost token security audit and honeypot check using current automated GoPlus risk fields for a supported EVM contract. These third-party signals are not a guarantee of safety.
Decode an EVM signature request (EIP-712 typed data, Permit/Permit2, or ERC-20 approve calldata) into a structured intent: what token, which spender, how much, until when, plus risk_flags and an action_hint. Deterministi...