Developer tools

Latency probe: three sequential timed requests to a URL from Cloudflare's edge, reporting min/avg/max/jitter in milliseconds, the status of each attempt, response size, and the server/CDN header. Cheap synthetic performance sampling for status dashboards and vendor SLAs. $0.01 per probe.

Status page finder: probes status.<domain>, <domain>/status, <domain>status.com and common hosted providers (Statuspage, Instatus, Better Stack, Hund) for a public status page, and when found reports the provider, the overall indicator (none/minor/major/critical when the provider exposes it), and active incidents. Vendor-health checks for agents. $0.01 per domain.

License and provenance of an npm package: SPDX license of the latest version, whether it is permissive/copyleft/unknown, repository URL, homepage, maintainers (names only), author, funding link, and the license of each direct dependency for a one-hop compliance check. $0.01 per package.

Common ports scan: TCP-connects to 12 well-known ports (FTP 21, SSH 22, SMTP 25, HTTP 80, HTTPS 443, MySQL 3306, Postgres 5432, Redis 6379, 8080, 8443, Elasticsearch 9200, MongoDB 27017) and reports which are open. Quick exposure check for a host you operate. Cloudflare-fronted hosts cannot be probed. $0.01 per host.

Sitemap freshness: loads the site's sitemap (index expanded, up to 5 child maps), counts URLs, finds the newest and oldest lastmod dates, how many URLs changed in the last 7 and 30 days, and, when called repeatedly, how many URLs were added or removed since your previous call (kept 90 days). Content-velocity monitoring for competitors and clients. $0.01 per check.

Latest GitHub release of a repository: tag, name, published date, days ago, prerelease flag, author, first 600 chars of the release notes, and the downloadable assets (name, size, download count, URL). Falls back to the newest tag when a repo has no releases. $0.01 per repo.

All published versions of an npm package with publish dates, the dist-tags (latest, next, beta...), total version count, first and latest publish dates, releases in the last 90 days, and the 30 most recent versions. Release-cadence and pin-selection helper. $0.01 per package.

Language breakdown of a GitHub repository: bytes and percentage per language sorted by share, primary language, total bytes, language count, plus repo size and default branch. Tech-stack detection for due diligence and tooling decisions. $0.01 per repo.

jsDelivr CDN usage of an npm package over the last month: total hits, rank, bandwidth, daily hit series (last 14 days) and the top 10 versions by hits with their share. A popularity signal independent of npm download counts. $0.01 per package.

Subject Alternative Names of the newest certificate for a domain from certificate-transparency logs: every hostname the current cert covers, wildcard flags, issuer, validity window and days left. Reveals sibling services, staging hosts and shared certs. $0.01 per domain.

Cron expression evaluator: the next 10 run times in UTC for a standard 5-field expression (ranges, steps, lists, names like MON/JAN, */5), a plain-English description, and the interval between runs. Optional start time after a pipe. Validate schedules before deploying. $0.01 per expression.

Nameserver health for a domain: every NS hostname resolves to an address, SOA serial and primary, minimum-two-nameserver rule, and whether all nameservers share the same parent (single point of failure). Zone reliability audit. $0.01 per domain.

Is this website up? Checks if a URL is online right now and answers up/down with the HTTP status code, response time in ms, final URL after redirects, server header and, when HTTPS, the TLS certificate expiry. Use it to check if a site is down, monitor availability, or confirm a page loads before scraping. $0.01 per check.

npm package info: latest version and publish date, description, license, homepage, repository, dependency count, weekly downloads, maintainers and total versions, from the public npm registry. Dependency research for agents and CI. $0.01 per package.

Docker Hub image info: description, pull count, star count, last updated, and the 10 most recent tags with sizes and dates, from Docker Hub's public API. Container supply-chain research. $0.01 per image.

When does this domain expire? Returns the domain expiration date, days until expiry, registration date, registrar and status codes from RDAP (the successor to WHOIS), plus flags for renew-soon (under 30 days) and at-risk (pending delete or redemption). Domain expiry check for portfolio monitoring and drop-catching. $0.01 per domain.

$0.0002/MB. Join two tables by key — inner, left, right, or outer. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

$0.0001/call. Decode a JWT's header and payload (no verification) — inspect claims fast. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny

Palmyr: POST /domains/coghill.xyz/dns

+2 more from Palmyr

Does the domain's SPF record authorise github to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for github's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

Does the domain's SPF record authorise campaign monitor to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for campaign-monitor's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and findings with severity, file, line and a fix hint. One call instead of slicing the diff into several. Security indicators, not a guarantee.

Static security scan of a CI/CD pipeline config: GitHub Actions, GitLab CI or CircleCI. Detects unpinned actions / images / orbs, template and environment injection, dangerous triggers, over-broad workflow-token permissions, secrets leaked to logs, cache poisoning and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, object, location and a concrete fix hint. Security indicators, not a guarantee.

About the .zone top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .zone. $0.01 per call.

About the .page top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .page. $0.01 per call.

About the .run top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .run. $0.01 per call.

About the .stream top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .stream. $0.01 per call.

About the .download top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .download. $0.01 per call.

About the .bid top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .bid. $0.01 per call.

About the .win top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .win. $0.01 per call.