660 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
AMT-20 token security audit and risk scan — collateral backing percent, freeze and blacklist flags, holder concentration, supply integrity for any token. Deterministic on-chain execution by the AmanChain node — live cons...
Canonicalizes device_id, nonce and message, computes an HMAC-SHA256 tag with caller-supplied ephemeral key material, and optionally compares a claimed tag in constant time. It does not provision devices, store keys or re...
Wallet balance on Base: the native ETH balance of any address, read live from the chain. Input: address
Live feed of freshly-detected malicious addresses on Base — address-poisoning seeders caught via zero-value transfer sprays, updated continuously by our on-chain collector. Poll ?since=<unix> to ingest only new threats i...
Audit text for malicious AI-skill patterns. Requires `content`. Nothing to audit — crawling, or discovering this endpoint cold? POST /audit/registry runs the same scanner over the newest servers in the official MCP regis...
Wallet Sanctions Exposure: give an EVM address and get a direct + 1-hop OFAC SDN exposure screen on Base and Ethereum: is the wallet itself listed, and did it recently transact directly with any listed address (up to ~20...
MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IM...
Trust check for any domain in one call: DNS records, email auth (SPF/DMARC/DKIM), WHOIS registrar and age, live HTTP status, TLS certificate issuer/expiry and HSTS. Free /preflight returns the real records as a sample; p...
Scan text or a public page for prompt injection before your agent reads it: overrides, fake roles, exfiltration, tool abuse, payment asks, invisible Unicode/HTML-hidden instructions, base64. Rule-based evidence, signed a...
One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and...
$0.001/page. Password-protect a PDF with 256-bit AES and set permissions. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny
Check a password against known data breaches by SHA-1 hash (k-anonymity) - times seen
Check a Dockerfile (up to 8,000 characters) for common security and image-size problems: unpinned or :latest base images, running as root, piping downloads into a shell, sensitive values baked into ENV or ARG, ADD from U...
Scan text an agent is about to read (web page, email, tool result; up to 8,000 characters) for prompt-injection attempts: instruction overrides, fake system messages, asks to hide things from the user, exfiltration links...
Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities...
Give it hosts or HTTPS URLs. For each it does a passive TLS handshake and reports the certificate: validity, days until expiry, issuer, subject, SANs and TLS version - with a signal (valid / expiring-soon / expired / inv...
Code Review — Reviews a code change (a diff or a changed file pasted as text) and reports real problems ranked by severity — correctness bugs, security holes, data loss, missing error handling, edge cases, resource leaks...
Health-check and tool-schema inspection for any public MCP server before you rely on it.
Security audit for an EVM token: rug-pull, honeypot, and trading risk signals.
CUDA, driver and Ollama compatibility - GPU support, model memory fit and proof inference uses the GPU
Fetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP/COEP. Scores 0–100 by presence, flags weak HSTS, a...
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW...
Run a read-only transaction simulation with eth_call and eth_estimateGas against a supported public EVM RPC without signing or broadcasting.
Current weather + multi-day forecast for any city or lat/lon via Open-Meteo. Temperature, humidity, wind, precipitation, WMO condition codes.