1,391 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid WebAuthn / Passkey policy audit (cycle 117) — non-authenticated scan of a sites passkey posture: (a) detects 13 vendor SDKs in HTML (SimpleWebAuthn/Corbado/Hanko/Stytch/Clerk/WorkOS/Auth0/Okta/Descope/Keycloak/Bitwa...
Paid Web Vitals INP (Interaction-to-Next-Paint) heuristic estimate (cycle 118) — static-analysis proxy for INP p75 without a real browser: counts addEventListener + onclick/oninput/onkeydown/onsubmit handlers in inline +...
Paid x402 price-per-call optimizer (cycle 119, x402 $0.001) - fetches a target seller /s /.well-known/x402 catalog (or accepts raw catalog as POST body), extracts price-per-call from atomic-string or decimal forms, compu...
Paid live SMTP STARTTLS opportunistic-TLS probe (cycle 128, x402 $0.001) - resolves MX hosts via Cloudflare DoH, opens TCP to each on ports 25 + 587, reads SMTP banner, sends EHLO and parses capability list (STARTTLS/SIZ...
Paid BGP route-leak + prefix-hijack exposure probe (cycle 126, x402 $0.001) - resolves target host via Cloudflare DoH, queries RIPEstat prefix-overview for each IP, classifies announcing ASNs + holders, computes consensu...
Paid cookie partition consistency audit (cycle 130, x402 $0.001) - probes 6 conventional paths (apex/login/signup/api/cart/account), parses Set-Cookie from each, groups by cookie name across responses, flags inconsistenc...
Paid seller x402 catalog bloat + consolidation scoring (cycle 121, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes thin-descriptions count (<60 chars), ver...
Paid x402 marketplace trend scanner (cycle 120, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes per-asset + per-network + per-facilitator + per-scheme dist...
Paid CDN cache-key probe via 4-variant request burst (cycle 134, x402 $0.001) - fetches target 4x with different dimensions (baseline, ?cb=12345, Accept-Language: fr, Accept-Encoding: identity), captures X-Cache/CF-Cache...
Paid OCSP Must-Staple (RFC 7633) cert-feature detector (cycle 138, x402 $0.001) - opens TLS to target host, parses leaf cert via cryptography.x509 to detect status_request TLS Feature extension (OID 1.3.6.1.5.5.7.1.24) o...
Paid Set-Cookie × shared-cache disclosure scanner (cycle 148, x402 $0.001) — probes 8 sensitive paths on target origin (/login + /api/me + /api/session + /account + /profile + /dashboard + /me + /api/user, + optional ext...
Paid DNS AXFR (zone-transfer) vulnerability probe (cycle 148, x402 $0.001) — discovers authoritative NS via Cloudflare DoH, then opens raw TCP/53 to each NS and sends an RFC 1035 wire-format AXFR query (QTYPE=252) per RF...
Paid OAuth 2.0 / OpenID Connect discovery + flow-capability analyzer (cycle 133, x402 $0.001) - probes 4 RFC 8414 + OIDC discovery endpoints at target domain (/.well-known/openid-configuration + /oauth-authorization-serv...
Paid SMTP open-relay test (cycle 154) - actually attempts MAIL FROM + RCPT TO against each MX host. Resolves MX via Cloudflare DoH, opens TCP/25, sends EHLO + MAIL FROM:<external> + RCPT TO for both local-domain and fore...
Paid BIMI selector + rotation-cadence auditor (cycle 168, x402 $0.001) - probes 14 conventional BIMI selectors via Cloudflare DoH TXT (default._bimi.<d>, bimi._bimi.<d>, brand._bimi.<d>, logo._bimi.<d>, bimi1/_bimi2/_bim...
Paid x402 buying-decision simulator (cycle 146, x402 $0.001) - fetch target's /.well-known/x402, compute per-route monthly_cost and value_at given calls_per_month + value_per_call_usd, classify buy / buy_conditionally /...
Paid RFC 7807 (Problem Details for HTTP APIs) conformance probe (cycle 168, x402 $0.001) - 6 candidate API paths (/api+/api/v1+/api/v2+/v1+/v2+/graphql) each probed with 5 malformed payloads (GET bad query / POST wrong C...
Paid x402 buyer receipt history (cycle 191, leak-closed cycle 193) - per-buyer call ledger + spend + 60-day by_day_series from the local access log. RE-gated: advertised at $0.001 but served free. via x402
Paid x402 buyer CLI template generator (cycle 191, leak-closed cycle 193) - GET ?route=&rounds=N returns a pre-filled runnable Python httpx+eth_account snippet that pays for one chosen route. RE-gated: it was advertised...
Paid buyer-side cost projection (cycle 187, x402 $0.001) - given a buyer's projected call volume and category mix, returns a monthly USDC spend estimate at THIS seller's catalog plus bundle-recommendation cost-reduction...
Paid buyer-side optimal-route shopper (cycle 187, x402 $0.001) - given a buyer's free-form intent string, ranks THIS seller's routes by Jaccard token similarity (with path-substring and path-token boosts) and returns top...
Paid MCP server tool-list cross-discovery-surface aggregator (cycle 150, x402 $0.001) - parallel-fetch /.well-known/mcp/server.json + /mcp.json + /openapi.json + 8 health endpoints; aggregates MCP tools across surfaces (...
Paid x402 intent signal extractor (cycle 201, x402 $0.001) - ranks a seller's catalog against the intents a buyer agent arrives with. Reads the seller's llms.txt + manifest, extracts declared intents, token-matches each...
Paid x402 marketplace liveness sweep (cycle 197, x402 $0.001) - GET ?url=<SELLER_URL> (comma-separated up to 6) or ?sample=N audits whether a LISTED x402 seller is actually PAYABLE before a buyer spends USDC. Parses 5 ca...