SiteCheck

PDF to text: send an https link or base64 (up to 15 MB) and get the text page by page plus title, author, page count and dates. Text PDFs only: a scanned PDF without a text layer answers 422 and is not charged.

Legal entity lookup in GLEIF by 20-character LEI or company name (best match plus up to 5 alternatives): legal name, status, jurisdiction, addresses, registration status and renewal date, direct and ultimate parent (or the reporting-exception reason), child counts with the first 10 direct children, and a one-line kycSummary. Source: GLEIF Global LEI Index (CC0).

Website audit in one call: WCAG 2.2 accessibility issues (European Accessibility Act) with fixes and a score, SEO basics, security headers and tech stack.

ENS on Ethereum mainnet. A name (vitalik.eth) resolves to its address, and an address resolves to its primary name, accepted only when that name resolves back to the same address. Returns the avatar and the url, com.twitter, com.github, description and email text records when set. A name that is not registered returns 200 with address null.

A DOI's bibliographic record from Crossref (title, authors, journal, publisher, date, type, citation count, license), or the best matches for a citation-style search (max 10). An unknown DOI answers 404, not charged.

A GitHub user's public profile (name, company, location, blog, bio, followers, public repos, creation date) and their five most-starred repositories that are not forks. Needs the GITHUB_TOKEN secret on the deployment; without it the call answers 503 and is not charged.

Place names and coordinates for a postcode. GB adds district, ward and constituency (postcodes.io); other countries use Zippopotam.us for ZIP and postal codes. A postcode that does not exist answers 404, not charged.

Place names to coordinates and back: up to 5 matches for a name, or the place at a coordinate. Each match has a display name, latitude and longitude, country code and type. Attribution: © OpenStreetMap contributors, ODbL. Results are cached seven days.

The latest Form 4 insider transactions of a US company (ticker, CIK or name): insider name and role, transaction date, code (P buy, S sell, A grant, M exercise, F tax withholding), shares, price and shares owned afterwards, with the filing link. Common-stock lines only; derivative grants are not listed.

Total value locked in DeFi from DefiLlama. For a protocol (its slug, e.g. aave-v3) the current TVL; for a chain (Base, Ethereum...) its TVL with 1-day and 7-day changes. A protocol's history is too large to read here, so it has no change figures. Attribution: Data: DefiLlama. Information only, not financial advice.

A level-2 order book snapshot for a Coinbase pair: best bid and ask, mid price, spread in price and basis points, and the top bids and asks up to depth 50. It is a snapshot, not a quote: prices move between calls. Information only, not financial advice.

A Solana account: lamports and SOL with a USD value, owner program, executable flag and data size. Token accounts and mints are parsed (mint, owner, amount and decimals; supply and authorities). Read-only over Solana JSON-RPC.

ERC-721 facts for one token: owner, collection name and symbol, tokenURI, and its metadata (name, description, image) when the URI is http(s) or ipfs. The metadata fetch has a 5-second timeout and a 256 KB cap; a failed fetch is reported in metadataNote and does not fail the call.

Read-only contract call (eth_call): decodes the return value of a function you name, e.g. balanceOf(address) returns (uint256). Nothing is signed or sent. A function whose name reads like a write (transfer, approve, mint, set...) is refused unless it is declared view or pure.

An EVM block by number, or the latest one: hash, time, transaction count, gas used and limit, and base fee in gwei. Read over public RPC.

PubMed articles matching words, optionally from a year: PMID, title, first five authors, journal, date, DOI and link. Two NCBI requests. Attribution: PubMed (NCBI). Information only, not medical advice.

Validates JSON data against a JSON Schema (draft 2020-12): valid true or false, and up to 50 errors with the instance path, the keyword and the message. Schema and data are each limited to 200 KB. Remote $ref targets are not fetched. No network call.

Explains a cron expression in plain English and lists its next runs in UTC and in a time zone. Five fields (minute hour day month weekday), or six with seconds first. Names (MON, JAN) and steps are supported. Computed in the Worker; no network call.

Checks and formats a phone number with libphonenumber: valid and possible flags, E.164, international and national formats, country, calling code and line type (mobile, fixed line, toll free and so on). Without a + sign, give the country. No network call.

Replaces personal data in a text with placeholders: e-mail addresses, phone numbers, IBANs (mod 97 checked), payment card numbers (Luhn checked only), IPv4 addresses and, with names true, person names found by the chat model. Returns the redacted text and counts per type. Original values are never returned.

Named entities in a text or a page: people, organisations, places, dates and money amounts (from the chat model), plus e-mail addresses, URLs and phone numbers (from patterns), each de-duplicated with a count. With url, the page's readable text is used (robots.txt is respected).

Safety check of a text or a chat turn with Llama Guard 3: safe or unsafe, and the violated categories (S1 to S14, named in plain words). Send text, or messages (up to 20 turns). Classifies only; it does not change or block anything.

Runs a read-only SPARQL query on Wikidata and returns the rows as plain values (ASK returns true or false). Only SELECT and ASK are allowed; updates are refused. A LIMIT of 100 or less is added when missing. 8-second limit. Data is CC0.

Issues or pull requests of a GitHub repository, searched by words and state (open, closed or all), newest updated first: number, title, state, labels, author, comments, dates and link. Needs the GITHUB_TOKEN secret; without it the call answers 503 and is not charged.

The latest releases of a GitHub repository: tag, name, date, pre-release flag, the first 1,500 characters of the notes, and the number of assets. Needs the GITHUB_TOKEN secret on the deployment; without it the call answers 503 and is not charged.

A site's brand assets: its icons (favicon, apple-touch-icon and web app manifest icons, largest first), the og:image, theme colour and site name, read from the page and its manifest. Falls back to /favicon.ico when the page declares no icon.

Current TLS certificates for a domain from Certificate Transparency logs (via CertSpotter): issuer, validity dates and days left, DNS names (up to 100 per certificate), and the distinct subdomains seen. Keyless tier: one request per call; answers are cached an hour.

Third-party script and iframe hosts on a page, each classified (analytics, ads, tag manager, chat, session replay, social, consent, CDN), the cookies its first response sets (names and flags only, never values) and whether a known consent manager is present. Static HTML only: scripts added at run time are not seen.

For eleven AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended and others): allowed or blocked for the page's path under robots.txt, plus the noai and noimageai opt-outs in meta and X-Robots-Tag, and whether llms.txt exists. Reads the page as static HTML; no JavaScript runs.

Whether a site publishes /llms.txt and /llms-full.txt: the parsed llms.txt (title, summary, sections with their links) and the size of llms-full.txt. Reads the site itself, through the same URL guard and size cap as the page tools.