Security & trust

Trust check for any x402 pay-per-call API URL. Live-probes the target: verifies a valid 402 payment challenge, consistency between the challenge and the /.well-known/x402 manifest, payTo address validity, price sanity, Bazaar listing status, and TLS basics. Returns a GO / CAUTION / STOP verdict with reasons.

Verify a Canadian federal corporation by name: corporation number, status (Active/Dissolved/etc.), incorporation (anniversary) date, governing legislation, and registered office address. Corporations Canada open data (OGL-Canada). Federal corporations only — excludes provincial SMEs.

Automaton-Sovereign Value API call

Check whether an automated task or agent execution passed caller-supplied functional, security, privacy, compliance, transaction, abuse, regression and economics gates; ARN evaluates the booleans but does not perform the underlying checks.

toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vulnerable dependencies; JSON report. The package is never run.

astro Known vulnerability list: Known vulnerability list for npm package astro, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a stated minimum; a selector left in testing mode, which asks receivers to treat a failure as unsigned so it cannot contribute to DMARC alignment however correctly it signs; a revoked key, with its consequence; and a key type verifiers do not implement.

Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. Returns one entry per finding with rule, severity, exact line number, the offending line and a suggested fix. Rule-based and deterministic: no LLM, so the same snippet always returns the same findings. Send Python or JavaScript as plain text. Not a

AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base.

Free, no-key, read-only MCP endpoint verification and diagnostics.

An open habitat where security agents register themselves, work in public, and rerun each other.

Screen a vendor for OFAC sanctions and complete vendor due diligence and company verification. This citation-first Vendor Risk Brief checks exact normalized names against current U.S. Treasury OFAC SDN and Consolidated primary-name and alias files, then adds GLEIF legal-entity records, SEC EDGAR company filings, and authoritative RDAP domain-registration evidence. It returns match status, vendor risk signals, identity gaps, domain-age signals, source URLs, evidence timestamps, confidence, and limitations for vendor onboarding, supplier risk, procurement, AML, and counterparty preflight. A name match requires human review; a no-match result is not sanctions clearance or a compliance determination.

Multi-hop exposure analysis over the ChainAnalyzer graph. Returns direct and indirect exposure grouped by risk tier (mixer, darknet, sanctioned entity, exchange, bridge) plus detected money-laundering patterns such as layering and structuring.

Implied volatility and options skew for BTC, ETH, SOL, XRP and HYPE from Deribit: DVOL (or our 30-day ATM implied vol where Deribit publishes none) with its 24h change, the ATM IV term structure, 25-delta risk reversal and butterfly per expiry, put/call ratio by open interest and 24h volume, options open interest in USD, max pain for the next three expiries and the top strikes. Use when you need…

Re-canonicalizes a payload and compares recomputed hash/HMAC against provided values to detect tampering

+1 more from api.ibancheck.co.uk

API usage - Record quality audit: Record quality audit for API usage. Up to 200 supplied typed records. Local numeric and data-quality processing; no external enrichment or forecasting. One of 25 profiles or calculations across 20 shared operations in this sector. 0.01 USDC includes one bounded record quality audit deliverable.

Change audit: Emmet: Audit JSON changes and validate before/after for Emmet. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Elm: Audit JSON changes and validate before/after for Elm. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Elgato Stream Deck: Audit JSON changes and validate before/after for Elgato Stream Deck. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Dust configuration: Audit JSON changes and validate before/after for Dust configuration. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Drupal Routing: Audit JSON changes and validate before/after for Drupal Routing. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Drupal Permissions: Audit JSON changes and validate before/after for Drupal Permissions. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Drupal Migration: Audit JSON changes and validate before/after for Drupal Migration. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: Drupal Info: Audit JSON changes and validate before/after for Drupal Info. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: drone.json: Audit JSON changes and validate before/after for drone.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: .cryproj (generic): Audit JSON changes and validate before/after for .cryproj (generic). Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: cosmos.config.json: Audit JSON changes and validate before/after for cosmos.config.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: commit-check: Audit JSON changes and validate before/after for commit-check. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: commands.json: Audit JSON changes and validate before/after for commands.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.

Change audit: coffeelint.json: Audit JSON changes and validate before/after for coffeelint.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/resolved errors. Up to 100 KB per document; no YAML/TOML parsing or deployment/security guarantee. 0.01 USDC includes one two-document change audit.