77 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Signed proof of data integrity checks for events, logs and API results. Source authentication of a registered app; freshness checks. Tamper-evident receipts; offline verification with trusted key and original data. No pr...
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / ant...
Trust check an npm package before an agent installs it: typosquat screen, deprecation, package age, maintainers, weekly downloads, source link.
Full supply chain report — shipping rates, BLS PPI, NY Fed GSCPI, AI summary
Mineral prospectivity assessment for any region, for exploration and geology agents. Combines USGS MRDS deposit inventory, geochemical anomaly data, and AI geological synthesis to rank what a region is likely to host.
Full supply chain report — shipping rates, BLS PPI, NY Fed GSCPI, AI summary
US trade-flow + tariff signal by commodity
Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names....
Critical-minerals supply-concentration & US import-reliance signal
Economic impact of sanctions regimes via satellite, shipping AIS and alternative signals — Russia, Iran, Venezuela, DPRK and all OFAC/EU/UN jurisdictions. For compliance and geopolitical agents.
Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available he...
Is this WordPress plugin, npm package or PyPI project abandoned? Status, 0-100 abandonment-risk score, months since last update, and the signals behind it.
Aggregates global weather forecasts using open meteorological data. Useful for supply-chain routing, event planning, and agriculture commodity prediction. List your own x402 service on bazaar.agentexchange.work/listings:...
Call before installing packages suggested by a language model. Returns, for each npm or PyPI package name, whether it actually exists in the registry, whether it is deprecated or yanked, and — when the name is not found...
CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively...
The published facts about an npm package that ships an MCP server, read before running it: resolved version and publish date, package and version age, maintainer count, provenance attestation, install scripts (preinstall...
Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one ca...
Leading causes of death for any US state or the nation - deaths, share of all deaths and age-adjusted rates for heart disease, cancer, stroke and more
Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the s...
Dependency audit. Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and subrequest...
toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vu...
Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities...
Where Brazilian deforestation is concentrated right now: rank municipalities or states by area cleared in a window you choose, filterable by biome (Amazon or Cerrado), from official INPE satellite alerts. Feeds ESG scree...
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW...