643 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one ca...
Real-time crypto threat and risk intelligence for AI agents. Get up to 20 recent source-linked risk reports with risk scores, freshness, validation status and cached PG1 checks when available. Designed for automated tria...
x402 v2 paid EVM token contract risk API on Base and BSC. For 0.01 USDC, returns EIP-1967 proxy detection, owner control and renouncement status, and block-explorer source-code verification. Built for AI agents, bots, an...
Resolves a 4-byte function selector (e.g. 0x70a08231) to candidate human-readable signatures via 4byte.directory. Accepts a bare selector or full calldata.
Detect the technology stack of a public website: CDN, web server, language/runtime, frontend framework (Next.js, Nuxt, SvelteKit, Remix, Astro, React, Vue, Angular), CMS (WordPress, Drupal, Ghost, Shopify, Wix, Squarespa...
Smart contract security check before you approve or pay an address: reads the bytecode, behind proxies too, for privileged functions (mint, pause, blacklist, upgrade), dangerous opcodes and protocol type, and checks whet...
CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages, and references for agent triage.
DNSSEC health check: reports whether a domain is DNSSEC-signed (DNSKEY), has a DS record at the parent, and whether the resolver authenticated the answer, with advisory warnings.
Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TL...
JWT decoder: decode a JSON Web Token without verifying it: returns the header, the claims, the signature length and algorithm, and a computed view of the time claims — whether exp has passed, whether nbf is in the future...
Unicode normalization and confusables check: apply NFC, NFD, NFKC or NFKD, report which forms a string is already in, list the scripts present (all Unicode scripts), and flag confusable and homoglyph characters — Cyrilli...
Security headers check, HTTP. Fetch a public URL and grade its HTTP security headers: HSTS, Content-Security-Policy, framing protection, nosniff, Referrer-Policy and Permissions-Policy, plus version leaks (Server, X-Powe...
Domain lookup, trust verdict. A trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non...
Search public Certificate Transparency logs for every cert issued to a domain. Two independent public CT search services are queried, the second only if the first is slow or fails, and `source` names the one that answere...
CVE lookup - description, status, CVSS metrics, weakness ids and references
Batch Solana token rug check: up to 10 mints in one paid call (half the per-token price). Same output as /v1/check. Query: ?addresses=mint1,mint2,...
A pre-payment gate for an agent about to send USDC. Screens the recipient (OFAC sanctions, Coinbase/Basename identity, wallet vs contract, fresh-address age) and escalates a fresh or anonymous recipient to STOP once the...
Automated website audit for agents evaluating local-business opportunities. Intro price lowered for settlement testing.
SendCheck: pre-send verification of any EVM address on one chain (EIP-55 checksum, wallet-vs-contract, outgoing activity, balances, verdict). POST {address, chain}
Website Security Scan LITE (passive summary): LITE version of the Website Security Check: passive summary only (headers, TLS/certificate, HTTP->HTTPS, cookies, SPF/DKIM/DMARC, CAA, IPv6, security.txt) with grade A-F and...
Site snapshot (SEO + security + tech + email): All four quick checks in one call for a website: on-page SEO score and issues, security headers/TLS grade, tech stack, and the domain's SPF/DKIM/DMARC email authentication....
Is this token a scam? Token due diligence in ONE call ({"address":"0x...","symbol":"SYM"}): on-chain security verdict (honeypot + rug pull signals) fused with a web scam/rug/honeypot mention search, returned as one verdi...
Fact-check one claim against live web sources (or URLs you supply). Returns a verdict (supported, refuted, mixed, insufficient), a confidence score and supporting or contradicting quotes that are checked verbatim against...
Agent Reputation Check by Agentropolis: give a payTo and/or an agent / A2A / MCP URL. Returns owner, verified domain, real outside buyer history, wash flags and trust score from Agentropolis. Says when coverage is limite...