655 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
HSTS check: the Strict-Transport-Security header on the site (max-age, includeSubDomains, preload), whether it meets Chrome preload-list requirements, and the domain's current status in the HSTS preload list (hstspreload...
HTTP methods check: which methods a URL accepts, from an OPTIONS request (Allow / Access-Control-Allow-Methods) plus HEAD, GET and a harmless POST probe, with status codes. API and security reconnaissance. $0.01 per URL.
Mixed content check: finds http:// scripts, stylesheets, images, iframes, media and form actions on an HTTPS page (active vs passive), which browsers block or flag. Fix warnings before they cost you conversions. $0.01 pe...
[security-audit-dag] Universal A2A & MCP Tool Discovery, Safe-Proxy & Swarm Router (/v1/x402-broker) — Single-connection meta-router indexing 500+ MCP servers & A2A tools with 85% token compression and Prompt-Guard firew...
[security-audit-dag] Universal A2A & MCP Tool Discovery, Safe-Proxy & Swarm Router (/v1/x402-broker) — Single-connection meta-router indexing 500+ MCP servers & A2A tools with 85% token compression and Prompt-Guard firew...
Curated feed of active, verified cash/crypto coding and agent bounties across GitHub, Frantic, and SwarmMemo.
Curated feed of active, verified cash/crypto coding and agent bounties across GitHub, Frantic, and SwarmMemo.
Airport-to-airport route info: great-circle distance in km/nm/mi plus estimated flight time between any two of 49,000+ airports. Useful for travel planning, logistics and aviation agents.
Token security & honeypot audit for Base: token risk verification, token contract safety, honeypot detection, token bytecode audit, and ERC-20 token transfer telemetry ($0.75 USDC). Input: token or address parameter.
On-chain contract risk score: detects upgradeable proxies and privileged functions from live bytecode. Use before trading/interacting with an unfamiliar contract.
Telegram alert-channel monitoring for a contract address or ticker: returns mention volume across tracked crypto channels, categorized into security alerts, whale movements, and listing/news. Use alongside an on-chain ri...
Onchain risk assessment for one token on one chain (Base, Ethereum, BSC, Polygon, Arbitrum, Solana and others): a single risk score from 0 to 100 with a severity level, explicit risk flags such as honeypot, high transfer...
Static security scan of a single text or prompt blob: hidden unicode, prompt injection, data-exfiltration directives, dangerous-capability and tool-shadowing language, and obfuscation. Returns a 0-100 risk score, categor...
Pre-sign safety verdict for an off-chain EIP-712 signature (EIP-2612, Permit2, EIP-3009). Decodes what it authorizes (spender, token, amount, deadline), checks domain-spoof, approval-hygiene and scam-blocklist, returns a...
Batch install-safety preflight for a whole dependency list or parsed manifest (up to 100 packages). Returns a verdict per package plus a blocked / caution / safe summary. Supply-chain indicators, not a guarantee.
ERC-20 token safety pre-check from on-chain data only (Base, Ethereum, Arbitrum, Optimism, Polygon, BSC): name/symbol/decimals/supply, owner and whether renounced, EIP-1967/minimal proxy detection, and a bytecode scan (i...
Offline pre-sign check (no RPC, fast): decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009), an EIP-7702 authorization or an x402 402 + payment payload and returns SAFE/CAUTION/DANGER, every risk flag wi...
Read actual wallet balances for up to twenty supplied token addresses on one chain and prioritize their stored ChainK9 scan verdicts. Includes scan age/staleness and missing reports. Does not discover wallet assets, run...
On-chain contract risk score: detects upgradeable proxies and privileged functions from live bytecode. Use before trading/interacting with an unfamiliar contract.
Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, prompt injection, data-exfiltration directives, dangerous capabilities, tool shadowing and post-approval rug-pull...
Vulnerability intelligence for a single CVE id. Fuses NVD (CVSS base score and vector, CWE, patch links), CISA KEV known-exploited status, EPSS exploitation probability and OSV.dev affected and fixed versions into one ci...
Pre-sign safety verdict for a raw EVM transaction. Decodes the calldata against a known-signature registry, shows known-pattern effects (approval delta, transfer target), dry-runs eth_call for revert, checks scam-blockli...
All institutional holders of one security in a quarter, by ticker or CUSIP, with concentration and quarter-over-quarter institutional flow. This reverse index is deferred on this deployment and returns availability statu...
Bridge exploit track record: for one bridge, its hack history (incidents, total USD lost, funds returned, worst technique); with no bridge, a ranked leaderboard of every bridge hack by USD lost. Sourced from DefiLlama's...