Security & trust

Asia regional macro + geopolitical stress pulse (no params)

Smart contract security check before you approve or pay an address: reads the bytecode, behind proxies too, for privileged functions (mint, pause, blacklist, upgrade), dangerous opcodes and protocol type, and checks whether a single key holds those powers. Adds OFAC SDN screening, who funded the address, sybil-filtered ERC-8004 reputation for agents and a 0-100 score with proceed / hold / block. Static analysis, not an audit. Free: GET /v1/verify. Trial: /v1/trial.

Screen a website URL or domain against OFAC SDN and other global sanctions lists. Call before paying, advertising on, or integrating with a website to check for sanctions associations. Returns per-list matches with source URLs.

Resolve a domain's DNS records (A/AAAA/MX/NS/TXT/CNAME) and flag basic email/security posture

Domain age and registration intel from authoritative RDAP/WHOIS records: exact creation date, age in days and years, expiration date and days-until-expiry. The fast trust and risk signal agents use to vet a counterparty, link, or sender and to flag newly-registered or soon-to-expire domains. Returns structured JSON, keyless, pay-per-call. ccTLDs without RDAP return an uncharged 503.

Signed check of an x402 endpoint before you pay it: who really pays it on Base (settlements and unique payers over 30 days), a fresh unpaid probe (cached ≤5 min) with status, latency and the parsed quote, payability, paying agents' reports, the seller's claim, the scout's last real purchase (settlement transaction and whether it matched the listing), a quality score and risk flags. Free up to 300 calls a day per client at /v1/free/check.

Find the right Web3 product for trading, perps, quests, or bridging using queries such as “perp DEX”, “bridge ETH to Base”, “Galxe quests” or “Banana Gun”. Get the best-matching product, supported networks, user perks, official site and a partner link. Referral links disclosed.

Inspect HTTP response headers before an agent trusts or integrates a URL: content type, cache controls, CORS, HSTS, CSP, framing, referrer, permissions policy, server, ETag, and last-modified.

Use this before an AI agent pays a wallet address, to check that the payee is not sanctioned. Screens one address (EVM, Solana, Bitcoin, TRON and similar) against OFAC, UN, EU and UK lists, each reported separately with its own list date inside a signed verdict. Pay only if verdict is clean and any_list_match is false. $0.01 in USDC on Base or Solana. An invalid address returns 400, not charged. Free preview: GET /screen-multi/preview

On-page SEO audit API - crawl a single URL and return its on-page SEO health: overall score, title & meta description, H1, word count, internal/external link and image counts, load timing (LCP, TTI) and a list of detected issues (missing meta, broken status, not-https, images missing alt, slow load, …).

Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.

Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {"npm":["[email protected]"],"pypi":["django==3.2.0"]} or a package.json or requirements.txt, up to 50 packages. Returns only packages that have advisories: OSV and GHSA ids, CVE aliases, severity, summary, and the first fixed version, plus counts. Unpinned packages are checked at their latest version. Deterministic OSV data, no LLM.

A Sheaf of Attestations. REQUIRES ?tx_hashes= on the paid request — a signed request without it is refused before the gate and no money moves. Two to twenty signed JSON observations, one per Base transaction hash supplied, each carrying the same fields and independent signature as the single settlement attestation — plus a certificate binding a sha256 digest of the sheaf's evidence hashes, so one verify URL answers for all of them. Instant. Full listing: https://scvd.store/m…

Ranked list of live x402 endpoints (top 50) filtered by keyword, network and max price, ordered by Settled quality score. Use it to find a working alternative to a dead or overpriced endpoint.

Verify the live price and availability of a product at a URL before you buy or quote it. Fetches the page now, extracts price/currency/availability from JSON-LD, Shopify JSON, OpenGraph or microdata, and returns evidence (method, snippet, content hash, fetch time) plus a confidence score. $0.01 per check.

Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI package lists (up to 50 packages). Per dependency: latest version and publish date, whether your pin is behind, license, deprecation or yanked status, weekly npm downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic, no LLM. Use before adding or bumping deps or when reviewing a lockfile change.

Password - CASA Cybersecurity Assessment - Consolidates evidence on secure communications, including certificate validity, hostname matching, protocol and cipher strength, forward secrecy, and TLS vulnerabilities. It determines whether the service uses a secure, authentic, and correctly configured transport channel.

Verify a block under the SuperRoot — chain 8453 block 51741679

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Classify a caller-supplied operation claim against caller-supplied evidence under deterministic rules and return a machine-readable handoff receipt. Use this when an orchestrator needs a consistent completion state before accepting an agent's work. VERIFIED_COMPLETE means the submitted evidence supports the submitted claim; QSL does not independently observe the underlying real-world action.

Cross-chain ERC-8004 trust score for one (chain, agent) pair — signed JSON with transparent component breakdown (value_avg / client_breadth / volume / recency), per-chain context, and methodology link. USDC pay-per-call on Base mainnet.

Check whether a domain's TLS/SSL certificate is valid, trusted, and not expiring before connecting to it. Performs a live handshake and returns a 0–100 score and tier (VALID/WEAK/EXPIRING/EXPIRED/UNTRUSTED/INVALID) with chain trust, days-to-expiry, signature algorithm, TLS version, and cipher quality. Use before submitting credentials, posting to a webhook, or following a payment link, to catch expired, self-signed, or MITM-risk certificates.

Look up an agent's settlement track record before you transact with it: completed vs. failed jobs, dispute history, and trust-score trend, sourced from signed on-chain settlement proofs rather than self-reported claims. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Compute SHA256 hash or SHA-512, SHA-1 and MD5 checksums for UTF-8 text and return hex plus Base64 digests. Use for SHA256 hashing, checksum verification, integrity checks, content fingerprints, cache keys, deduplication and agent pipelines.

Livecheck Sentinel check - one-shot URL condition check. POST /v1/check with {target, condition, baseline_hash?}. Detectors: status_change, keyword, text_diff, numeric_threshold. Returns current observation + fired when comparable. Fixed $0.02 USDC. No watcher created. Not /v1/verify ($0.01) and not Confirm.

Screen one address against sanctions and scam blocklists — Genesis402 / UnyKorn Operator Network

Clearsigned — the trust layer with no stake in the outcome. Submit {claim, evidence[]}, receive an Ed25519-SIGNED, evidence-bearing receipt (verify offline against GET /pubkey; every receipt is chained in the public ledger at GET /ledger/verify). Flat price, verdict-independent; refunds only for failure to deliver. Current mode is honestly labeled in each receipt.

Identity oracle and trust layer for autonomous AI agents. Bidirectional KYA and trust scoring.

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

Search and verify 360K+ business entities with trust scores and W3C credentials.