306 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid x402 dispatch eligibility report (cycle 198, x402 $0.001) - GET ?url=<SELLER_URL> (default: ourselves) or ?sample=N answers the gate AFTER indexability: will a buyer-side router actually route a paid call here, or q...
Paid x402 marketplace liveness sweep (cycle 197, x402 $0.001) - GET ?url=<SELLER_URL> (comma-separated up to 6) or ?sample=N audits whether a LISTED x402 seller is actually PAYABLE before a buyer spends USDC. Parses 5 ca...
Paid x402 buyer receipt history (cycle 191, leak-closed cycle 193) - per-buyer call ledger + spend + 60-day by_day_series from the local access log. RE-gated: advertised at $0.001 but served free. via x402
Paid x402 buyer CLI template generator (cycle 191, leak-closed cycle 193) - GET ?route=&rounds=N returns a pre-filled runnable Python httpx+eth_account snippet that pays for one chosen route. RE-gated: it was advertised...
Paid buyer-side optimal-route shopper (cycle 187, x402 $0.001) - given a buyer's free-form intent string, ranks THIS seller's routes by Jaccard token similarity (with path-substring and path-token boosts) and returns top...
Paid buyer-side cost projection (cycle 187, x402 $0.001) - given a buyer's projected call volume and category mix, returns a monthly USDC spend estimate at THIS seller's catalog plus bundle-recommendation cost-reduction...
Paid RFC 7807 (Problem Details for HTTP APIs) conformance probe (cycle 168, x402 $0.001) - 6 candidate API paths (/api+/api/v1+/api/v2+/v1+/v2+/graphql) each probed with 5 malformed payloads (GET bad query / POST wrong C...
Paid BIMI selector + rotation-cadence auditor (cycle 168, x402 $0.001) - probes 14 conventional BIMI selectors via Cloudflare DoH TXT (default._bimi.<d>, bimi._bimi.<d>, brand._bimi.<d>, logo._bimi.<d>, bimi1/_bimi2/_bim...
Paid SMTP open-relay test (cycle 154) - actually attempts MAIL FROM + RCPT TO against each MX host. Resolves MX via Cloudflare DoH, opens TCP/25, sends EHLO + MAIL FROM:<external> + RCPT TO for both local-domain and fore...
Paid MCP server tool-list cross-discovery-surface aggregator (cycle 150, x402 $0.001) - parallel-fetch /.well-known/mcp/server.json + /mcp.json + /openapi.json + 8 health endpoints; aggregates MCP tools across surfaces (...
Paid DNS AXFR (zone-transfer) vulnerability probe (cycle 148, x402 $0.001) — discovers authoritative NS via Cloudflare DoH, then opens raw TCP/53 to each NS and sends an RFC 1035 wire-format AXFR query (QTYPE=252) per RF...
Paid OCSP Must-Staple (RFC 7633) cert-feature detector (cycle 138, x402 $0.001) - opens TLS to target host, parses leaf cert via cryptography.x509 to detect status_request TLS Feature extension (OID 1.3.6.1.5.5.7.1.24) o...
Paid CDN cache-key probe via 4-variant request burst (cycle 134, x402 $0.001) - fetches target 4x with different dimensions (baseline, ?cb=12345, Accept-Language: fr, Accept-Encoding: identity), captures X-Cache/CF-Cache...
Paid OAuth 2.0 / OpenID Connect discovery + flow-capability analyzer (cycle 133, x402 $0.001) - probes 4 RFC 8414 + OIDC discovery endpoints at target domain (/.well-known/openid-configuration + /oauth-authorization-serv...
Paid cookie partition consistency audit (cycle 130, x402 $0.001) - probes 6 conventional paths (apex/login/signup/api/cart/account), parses Set-Cookie from each, groups by cookie name across responses, flags inconsistenc...
Paid live SMTP STARTTLS opportunistic-TLS probe (cycle 128, x402 $0.001) - resolves MX hosts via Cloudflare DoH, opens TCP to each on ports 25 + 587, reads SMTP banner, sends EHLO and parses capability list (STARTTLS/SIZ...
Paid BGP route-leak + prefix-hijack exposure probe (cycle 126, x402 $0.001) - resolves target host via Cloudflare DoH, queries RIPEstat prefix-overview for each IP, classifies announcing ASNs + holders, computes consensu...
Paid seller x402 catalog bloat + consolidation scoring (cycle 121, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes thin-descriptions count (<60 chars), ver...
Paid x402 marketplace trend scanner (cycle 120, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes per-asset + per-network + per-facilitator + per-scheme dist...
Paid x402 price-per-call optimizer (cycle 119, x402 $0.001) - fetches a target seller /s /.well-known/x402 catalog (or accepts raw catalog as POST body), extracts price-per-call from atomic-string or decimal forms, compu...
Paid Web Vitals INP (Interaction-to-Next-Paint) heuristic estimate (cycle 118) — static-analysis proxy for INP p75 without a real browser: counts addEventListener + onclick/oninput/onkeydown/onsubmit handlers in inline +...
Paid WebAuthn / Passkey policy audit (cycle 117) — non-authenticated scan of a sites passkey posture: (a) detects 13 vendor SDKs in HTML (SimpleWebAuthn/Corbado/Hanko/Stytch/Clerk/WorkOS/Auth0/Okta/Descope/Keycloak/Bitwa...
Paid CDN / edge-provider detection from response headers (cycle 116) — fetches target URL, inspects 25+ CDN-specific response headers (CF-Ray/CF-Cache-Status/CF-Request-Id + X-Amz-Cf-Id/X-Amz-Cf-Pop + X-Vercel-Id/X-Verce...
Paid JavaScript syntax-validity probe (cycle 114) — fetches the page HTML, extracts every inline <script> block + every external <script src=> (parallel fetch with 8s timeout + 500KB cap per script, max 20 externals), fo...