862 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid x402 seller leaderboard / ranking auditor (cycle 173, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our /.well-known/x402) + ?top=<N> (default 25, max 100); clusters all payable endpoints by payTo, com...
Paid AI-agent cost-trend analyzer + multi-target batch estimator (cycle 178, x402 $0.001) - accepts POST application/json {'targets':[{'url':...,'weight':..}, ...]} OR POST application/json {'urls':[...],'weighting':'equ...
Paid HTTP/3 QPACK (RFC 9204) encoder-pattern fingerprint probe (cycle 179, x402 $0.001) - accepts GET ?host=<HOST> (default www.cloudflare.com) OR POST application/json {'host':...,'force_quic':...}; fetches https://<hos...
Paid CSP per-directive source-list extraction + classification (cycle 176, x402 $0.001) - accepts GET ?url=<URL> OR POST application/json {'url':...}; fetches target page; extracts CSP header + meta CSP fallback; tokeniz...
Paid email header forgery/anomaly detector (cycle 104) — accepts POST text/plain raw email OR GET ?header=<url-encoded RFC822> OR GET ?url=<.eml URL>; scores 13 forgery/anomaly patterns: From/Reply-To/Return-Path/Sender...
Paid open-source LICENSE evolution / migration analyzer (cycle 179, x402 $0.001) - accepts GET ?repo=<ORG>/<REPO> (e.g. elasticsearch/elasticsearch) OR ?url=https://github.com/<...> OR ?package=<NPM-PKG-NAME> (resolves n...
Paid DNSSEC chain-of-trust validation (cycle 103) — fetches the zone's DNSKEY + RRSIG via Cloudflare DoH, walks the chain (zone DNSKEY ← DS at parent); for each step verifies the DS digest matches a computed DNSKEY diges...
Paid AI-agent tool-call card generator (cycle 105) — accepts GET ?url=<TARGET> OR POST application/json {url: <TARGET>}; probes /.well-known/x402 + 4 OpenAPI candidate paths + /llms.txt; aggregates into a single structur...
Paid BIMI (Brand Indicators for Message Identification) + VMC (Verified Mark Certificate) validator (cycle 105) — probes default._bimi.<domain> TXT per RFC 8848; parses v=BIMI1; l=<SVG URL>; a=<VMC URL>; s=<selector>; HE...
Paid AI-citable source credibility scorer (cycle 109) — fetches URL, extracts article text + meta description + article:published_time, then computes 6 sub-scores: hedging language density (30 terms tracked), sourcing (c...
Paid JSONPath extraction (cycle 108) — accepts GET ?url=<URL>&path=<JSONPATH> OR GET ?json=<urlencoded JSON>&path=<JSONPATH> OR POST application/json {url|json, path}; fetches the URL (or parses inline JSON) and applies...
Paid outbound link rot / staleness audit (cycle 109) — fetches source URL, extracts every <a href>, then for each link: (a) HEAD-probes to detect 4xx/5xx/timeout/redirect, (b) parses Last-Modified + Date response headers...
Paid Open Graph + Twitter Card metadata freshness + reachability probe (cycle 112) — fetches URL, extracts og:* + twitter:* meta tags, HEAD-probes each og:image / og:image:secure_url / twitter:image, returns per-image st...
Paid readability + per-paragraph reading-time estimator (cycle 110) — fetches URL, extracts paragraph-level text, then computes 6 readability formulas (Flesch, Flesch-Kincaid, Gunning Fog, SMOG, Coleman-Liau, ARI) + tota...
Paid OpenAPI / Swagger 2.0 best-practices quality audit (cycle 114) — accepts GET ?url=<openapi.json URL> OR POST application/json with {spec:{...}} or {spec_text:"<YAML or JSON>"}; scores 12 quality dimensions: (a) Open...
Paid CDN / edge-provider detection from response headers (cycle 116) — fetches target URL, inspects 25+ CDN-specific response headers (CF-Ray/CF-Cache-Status/CF-Request-Id + X-Amz-Cf-Id/X-Amz-Cf-Pop + X-Vercel-Id/X-Verce...
Paid WebAuthn / Passkey policy audit (cycle 117) — non-authenticated scan of a sites passkey posture: (a) detects 13 vendor SDKs in HTML (SimpleWebAuthn/Corbado/Hanko/Stytch/Clerk/WorkOS/Auth0/Okta/Descope/Keycloak/Bitwa...
Paid per-cookie IAB TCF v2.2 purpose classification (cycle 112) — fetches URL with HTTPCookieProcessor, captures every Set-Cookie, extracts inline document.cookie= writes, classifies each cookie by NAME heuristics (ga/_g...
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token (sha256/sha384/sha512/sha1...
Paid heuristic email spam score for AI-agent triage (cycle 123, x402 $0.001) - accepts POST text/plain raw email source (RFC822 headers+body) or GET ?header=<url-encoded> or GET ?url=<.eml URL>; parses headers+body and c...
Paid single-endpoint quality benchmark (cycle 121, x402 $0.001) - given a target x402 endpoint URL, fetches the 402 envelope (without payment), parses out the description+price+network+asset, scores 9 metadata quality di...
Paid Idempotency-Key header support probe (cycle 118) — fetches target URL, scans response headers for Idempotency-Replayed + X-Request-ID signals, probes 6 OpenAPI candidate paths for explicit Idempotency-Key parameter...
Paid Cache-Control header granularity audit (cycle 119, x402 $0.001) - fetches target URL, parses every Cache-Control directive (max-age / s-maxage / stale-while-revalidate / stale-if-error / public / private / no-cache...
Paid composite AI-agent onboardability summary (cycle 120, x402 $0.001) - single-call composite that answers 'could an AI agent onboard to use this URL as a paid tool?' - fetches target URL + probes /openapi.json + /.wel...