1,158 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Inspect login and auth surface signals such as forms, reset flows, signup links, and headers for $0.01 USDC. Call when you need this bounded result without an API key or subscription. Returns machine-readable JSON via x4...
Generate cryptographically random passwords.
$0.001/call. Verify a PDF's digital signatures — structural + digest checks, results as JSON. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny
Measure achieved reliability against an SLO target from good and total events. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates production reliability. Returns...
Explain an EIP-712 typed-data signature before signing it: x402/EIP-3009 payment authorizations, EIP-2612 permits, Permit2 and Seaport orders. Flags unlimited allowances, long validity and non-official tokens, and return...
The access-control-allow-credentials response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, f...
Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, prompt injection, data-exfiltration directives, dangerous capabilities, tool shadowing and post-approval rug-pull...
Is this website a crypto phishing or wallet-drainer site? Checks the URL against the GoPlus phishing database and returns a plain answer plus any malicious contracts tied to it. Check before an agent connects a wallet. $...
ERC-20 allowance a wallet has granted a spender, and whether it is unlimited: send "token,owner,spender". Default chain Base; prefix another: ethereum:, arbitrum:, optimism:, polygon:, bsc:. $0.01 per call.
Look up the Autonomous System (ASN), prefix, country, registry, and allocation date for an IPv4 address - or for a hostname (which is resolved first). Uses a free public DNS-based IP→ASN mapping service; no HTTPS upstrea...
The x-cache response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring...
Does a website use F5 Shape? Fetches the page (homepage for a bare domain) and matches F5 Shape's fingerprints in the HTML and response headers, returning yes/no with the evidence snippet and the category (security). Tec...
The expect-ct response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitorin...
Invisible bot protection. Score form submissions 0-100 based on behavioral signals. No CAPTCHAs.
Prompt injection detection API: screen text bound for an agent and get a safe, suspicious or malicious verdict with the patterns that matched. Rule-based and deterministic.
Call when you need the readable content of a public web page: returns clean markdown (title, headings, lists, links; scripts and navigation removed), up to 100k characters. Pages that fail (404, blocked, timeout) are not...
Is this CVE weaponized? Returns enriched threat intelligence with exploit status, CVSS, EPSS, CISA KEV, ransomware mapping, and urgency score from 7 correlated sources.
Datakoot Security Intel: Audit a whole dependency manifest for known vulnerabilities in one call. $0.01 USDC per call, charged only on success.
Datakoot Koot: One call briefs you on a US place: current conditions, forecast, active weather alerts for the state, nearby earthquakes and elevation.. $0.01 USDC per brief, charged only on success.
Current weather at a place: temperature (°C), humidity (%), pressure (hPa) and wind (m/s) from the nearest live Open-Meteo relay within 75 km, with a signed receipt. Send latitude and longitude, or a city.
Is this API safe to pay? Audit any x402 merchant or paid endpoint BEFORE you send money. Answers whether a service is trustworthy, whether it is a scam or dead, and whether it will actually deliver. Probes the live endpo...
Pre-send safety check: is this recipient a known malicious address (caught live on Base seeding address-poisoning via zero-value transfer sprays), or a look-alike of an address you trust? Checks our continuously-updated...
WalletTriage — real-time wallet risk check: dangerous ERC20 approvals cross-referenced with a live exploit threat feed. Returns risk_score (0-100), risk_level and actionable findings.
Is this Base token a scam or rug pull? Honeypot detector for a Base ERC-20: EIP-1967 proxy + upgradeability check, bytecode scan for mint/pause/blacklist/fee-setter/ownership, owner() renouncement, and a live eth_call st...