862 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid mixed-content body scanner (cycle 97) — parses HTML body for http:// subresources on https:// pages across 12 element types (img/script/link/iframe/source/object/embed/video/audio/form + CSS url() + inline event han...
Paid llms.txt grader (cycle 95) — probes /llms.txt + /llms-full.txt + /agents.txt per Answer.AI proposed LLM-discovery spec; parses H1 + blockquote summary + markdown list of [Name](URL): description; validates per-line...
Paid hreflang <-> sitemap.xml cross-validator (cycle 94) — extracts page hreflang tags, validates BCP47 + self-reference + x-default + canonical agreement, locates sitemap (sitemap.xml + sitemap_index.xml + robots.txt Si...
Paid prompt-safe URL preview (cycle 99) — fetches a URL and returns a plain-text preview with ALL scripts/styles/iframes/objects/embeds/event-handlers/javascript:-URLs/data:-URLs STRIPPED before text extraction; reports...
Paid CSP violation-report ROUND-TRIP replay (cycle 170, x402 $0.001) - fetches target page; extracts CSP header + meta CSP + Reporting-Endpoints header + report-uri + report-to group; for each declared endpoint REPLAYS 4...
Paid DNS CNAME chain tracer (cycle 175, x402 $0.001) - accepts ?host=<HOST> OR ?domain=<HOST> OR ?url=<URL>; actively follows CNAME + A/AAAA hops via Cloudflare DoH for the target host (up to 12 hops with loop detection)...
Paid JWKS (RFC 7517 + RFC 8414) JWK Set inspector (cycle 173, x402 $0.001) - accepts ?jwks_url=<URL> OR ?jwks=<JWK_SET_JSON> OR ?url=<PAGE> (auto-discovers jwks_uri via /.well-known/openid-configuration + /.well-known/oa...
Paid x402 discovery-list topology auditor (cycle 172, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our own /.well-known/x402); fetches target catalog (handles 5 schema variants: endpoints[] / agents[] / it...
Paid x402 seller leaderboard / ranking auditor (cycle 173, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our /.well-known/x402) + ?top=<N> (default 25, max 100); clusters all payable endpoints by payTo, com...
Paid CSP per-directive source-list extraction + classification (cycle 176, x402 $0.001) - accepts GET ?url=<URL> OR POST application/json {'url':...}; fetches target page; extracts CSP header + meta CSP fallback; tokeniz...
Paid AI-agent cost-trend analyzer + multi-target batch estimator (cycle 178, x402 $0.001) - accepts POST application/json {'targets':[{'url':...,'weight':..}, ...]} OR POST application/json {'urls':[...],'weighting':'equ...
Paid HTTP/3 QPACK (RFC 9204) encoder-pattern fingerprint probe (cycle 179, x402 $0.001) - accepts GET ?host=<HOST> (default www.cloudflare.com) OR POST application/json {'host':...,'force_quic':...}; fetches https://<hos...
Paid open-source LICENSE evolution / migration analyzer (cycle 179, x402 $0.001) - accepts GET ?repo=<ORG>/<REPO> (e.g. elasticsearch/elasticsearch) OR ?url=https://github.com/<...> OR ?package=<NPM-PKG-NAME> (resolves n...
Paid email header forgery/anomaly detector (cycle 104) — accepts POST text/plain raw email OR GET ?header=<url-encoded RFC822> OR GET ?url=<.eml URL>; scores 13 forgery/anomaly patterns: From/Reply-To/Return-Path/Sender...
Paid DNSSEC chain-of-trust validation (cycle 103) — fetches the zone's DNSKEY + RRSIG via Cloudflare DoH, walks the chain (zone DNSKEY ← DS at parent); for each step verifies the DS digest matches a computed DNSKEY diges...
Paid AI-agent tool-call card generator (cycle 105) — accepts GET ?url=<TARGET> OR POST application/json {url: <TARGET>}; probes /.well-known/x402 + 4 OpenAPI candidate paths + /llms.txt; aggregates into a single structur...
Paid BIMI (Brand Indicators for Message Identification) + VMC (Verified Mark Certificate) validator (cycle 105) — probes default._bimi.<domain> TXT per RFC 8848; parses v=BIMI1; l=<SVG URL>; a=<VMC URL>; s=<selector>; HE...
Paid JSONPath extraction (cycle 108) — accepts GET ?url=<URL>&path=<JSONPATH> OR GET ?json=<urlencoded JSON>&path=<JSONPATH> OR POST application/json {url|json, path}; fetches the URL (or parses inline JSON) and applies...
Paid outbound link rot / staleness audit (cycle 109) — fetches source URL, extracts every <a href>, then for each link: (a) HEAD-probes to detect 4xx/5xx/timeout/redirect, (b) parses Last-Modified + Date response headers...
Paid AI-citable source credibility scorer (cycle 109) — fetches URL, extracts article text + meta description + article:published_time, then computes 6 sub-scores: hedging language density (30 terms tracked), sourcing (c...
Paid per-cookie IAB TCF v2.2 purpose classification (cycle 112) — fetches URL with HTTPCookieProcessor, captures every Set-Cookie, extracts inline document.cookie= writes, classifies each cookie by NAME heuristics (ga/_g...
Paid Open Graph + Twitter Card metadata freshness + reachability probe (cycle 112) — fetches URL, extracts og:* + twitter:* meta tags, HEAD-probes each og:image / og:image:secure_url / twitter:image, returns per-image st...
Paid readability + per-paragraph reading-time estimator (cycle 110) — fetches URL, extracts paragraph-level text, then computes 6 readability formulas (Flesch, Flesch-Kincaid, Gunning Fog, SMOG, Coleman-Liau, ARI) + tota...
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token (sha256/sha384/sha512/sha1...