Security & trust

Validate an NPI number (checksum) and enrich via the CMS NPPES registry

Full wallet risk profile in one call: behavior classification + credit score (0-100) + labeled-counterparty exposure (last N days, default 7). Returns verdict (low_risk/medium_risk/high_risk/flagged), risk_score, primary_tag, red_flags (zero-history, sanctioned/mixer/scam), plus identity/credit/exposure detail. Replaces classify+score+exposure in one paid call. For AI agent due diligence and payment-routing risk gating. Accepts payment on Base or Solana — either network works.

Look up known vulnerabilities for a package+version via OSV API. Supports npm, PyPI, Maven, Go, Cargo, NuGet. Returns CVEs with severity and fix versions.

Generate production nginx server blocks with SSL, proxy_pass, WebSocket support, security headers, gzip, rate limiting.

Verify an email address. Uses one verifier credit on all attempted verifications.

Query Open Source Vulnerabilities (OSV) database for known CVEs in an NPM package. Returns vulnerability list with severity, summary, affected version ranges, fix versions, references. Use ?package=react and version=18.2.0. Backed by Google-maintained OSV (industry standard). Accepts payment on Base or Solana — either network works.

Comprehensive domain reputation report combining RDAP (modern WHOIS), DNS records, email security (SPF/DKIM/DMARC), SSL certificate inspection, and domain age. Returns risk_summary (low/medium/high) and specific risk_reasons. Use ?domain=example.com. Built for fraud detection, marketing list verification, KYA workflows, and security agents. Accepts payment on Base or Solana — either network works.

ssl certificate checker, SSL certificate validator, check SSL certificate, SSL certificate expiration, HTTPS certificate check, SSL chain analyzer. Get full TLS handshake details for any domain: issuer, subject, SANs, validity dates, days remaining, fingerprint, serial, protocol, cipher. For AI agents, security audits, monitoring, HTTPS pipelines, tls certificate check, certificate expiry Accepts payment on Base or Solana — either network works.

Validate a DEA number format and checksum

Audit agent wallet — structured USDC spend summary from public ledger

Verify a Brazilian investment fund by CNPJ against the official CVM registry: is it registered, is it operating, who is the manager (gestor) and administrator, its class and ANBIMA classification, plus the latest daily NAV, net assets and shareholder count. The instant check against fake-fund and Ponzi schemes marketed as investment funds. Free sample, no payment: https://api.brazilayer.com/v1/fundos/amostra

Verify whether a Brazilian company is a financial institution authorized by the Central Bank of Brazil (banks, credit unions, consortia, regulated societies), plus its officially VERIFIED internet domains, refreshed daily from the official registry. Instant check for crypto exchanges, fintechs and compliance agents onboarding Brazilian counterparties or detecting fake-bank phishing. Accepts full CNPJ or 8-digit root. Free sample, no payment: https://api.brazilayer.com/v1/bcb/amostra

Analyze raw HTML you provide and get structured SEO data as JSON: title, meta description, canonical, H1-H6 outline, links, JSON-LD blocks and structural checks (single H1, heading order, duplicates, JSON-LD validity). Use it to audit a page before publishing. No URL fetching, no JavaScript execution. Max 64 KiB of HTML.

A call bundle: 500 API calls within 4 hours for one $1 payment, the per-call rate in one settlement. Returns a token for the X-MMNM-Pass header on any API call (an agents page spends 1, a log page 3, the export 25). Unused calls expire; no refunds.

Per-entity report built from one real check's signals: identity, sanctions and PEP screening, domain signals, trust score (risk.trust_score, 0-100, 100 = best), correlations with the caller's earlier reports, sources and an evidence hash. A source that did not answer is shown unavailable, never clean.

Reputation scoring with linear trust decay: after its first week a score loses 2-5 points a week by risk cluster (none for a sanctions-flagged entity), plus a bonus of up to 5 points for repeat verifications.

MCP tool: quick risk score for entity name + country pair.

Sanctions screen of a company or person name against the OFAC SDN, EU and UN sanctions lists, held locally and refreshed daily. Returns each matched entry: list, entry id, matched name, programmes, countries, listing date and match score. Exact normalised or word-order-insensitive name match only; a name match is not a determination.

Current UTC Time (paid x402 time endpoint). Current UTC time from the server: unix seconds, ISO 8601, weekday, and local wall-clock time for any IANA time zone via ?tz=. A paid x402 time endpoint for agents that need a trusted clock.

Before onboarding or a payment run: screen up to 500 IBANs in one call for sanctioned banks (BIC) and high-risk jurisdictions against the official OFAC, EU, UN and FATF lists, for KYB/AML compliance

Deep verify. Checks a claim against Wikipedia, Google News titles, Europe PMC reviews and trials (health and science claims), FRED data (US economic indicators), Wikidata structured facts (dates, quantities, offices held) and SEC EDGAR filings (US public companies: financials, listing status, former names), and flags a contradiction when sources disagree. Async: returns a job_id; poll GET /v1/jobs/{id} (free) for verdict, evidence for and against, citations and receipt. $0.75 USDC.

Analyze raw HTML you provide and get structured SEO data as JSON: title, meta description, canonical, H1-H6 outline, links, JSON-LD blocks and structural checks (single H1, heading order, duplicates, JSON-LD validity). Use it to audit a page before publishing. No URL fetching, no JavaScript execution. Max 64 KiB of HTML.

Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score

Fusion anti-abuse risk score for an email and/or IP in one call. Combines domain-level email intelligence (MX, SPF, DMARC, disposable, free, role) with IP reputation into a deterministic 0-100 score with per-dimension reasons. Works with either input alone.

Trust check an npm package before an agent installs it: typosquat screen, deprecation, package age, maintainers, weekly downloads, source link.

Multi-source IP reputation with one combined authority score (0-100). Polls four independent reputation sources in parallel and blends them: AbuseIPDB (crowd-sourced abuse confidence), abuse.ch threat-lists (Feodo botnet C2 + ThreatFox + Spamhaus DROP + Tor exit nodes), blocklist.de (fail2ban attack-report network), and StopForumSpam. Returns combinedScore, a verdict (clean / low / suspicious / malicious), which sources flagged it, per-source opinions (score + weight + detail), and enrichment (ISP, usage type, country, ASN, Tor). An authoritative threat-list hit (botnet/malware/hijacked netblock) hard-floors the verdict at malicious. Per-source isolation: a down feed degrades that opinion only. The one-call answer for 'should I trust this IP?' instead of trusting a single feed.

Detect whether a phone number is mobile, landline, VOIP, toll-free, or premium rate. Essential for SMS delivery verification and communication routing.

Verify Seal AI decision receipts: signed evidence anyone can check, no account needed.

AI-powered organic supply chain verification: certification, OFAC, FDA import checks.

See how AI assistants answer about your brand