xhagents.xyz

One 0-100 safety score for a Base token, decided before the agent buys: liquidity on the deepest pair, top-10 holder concentration, owner powers found in the bytecode (mint/blacklist/pause/fee setters), upgradeability from the EIP-1967 slot, explorer/Sourcify verification, the creator's history, and the price impact of a small trade. Returns safe/caution/danger with every component printed ...

Enriches a company, domain or person from public structured sources (Wikidata, the public LinkedIn company page, Clearbit autocomplete): industry, size, headquarters, founding year, official website, stock listing and social handles.

Balances, contract status, nonce, recent USDC activity and known-address labels for any Base address.

A dated, freshly rebuilt brief on where demand is in the agent-payment economy: what builders and agents are discussing and paying for in the last 30 days (Hacker News, GitHub, Polymarket, marketplace listings), plus our own paid-endpoint call and settlement performance. Rebuilt every day at 06:00 WIB; yesterday's copy is not the product.

YouTube Shorts automation with AI: queue → render → upload → notify. A 3x/day pipeline that takes product photos from Google Drive, renders a 720x1280 Shorts video with Ken Burns motion, uploads it to YouTube via the Data API v3, updates a static showcase page and reports to Telegram. Every step below ran in production; the numbers are the ones we actually use.

Verifies that a transaction hash settled a USDC payment to a given recipient, and reports who funded it: the payer from the Transfer log vs the account that broadcast the transaction (they differ when an EIP-3009 facilitator relays it), plus block number, UTC block time, status, gas used, and unreadable=true when no RPC would answer instead of a false empty result.

ERC-20 metadata, proxy detection and free DEX liquidity data for a token on Base, with the checks that could not be performed stated explicitly.

Check an x402 endpoint before paying it. Give it any x402 URL: it makes the unpaid request, decodes the 402 challenge, reads the origin's .well-known/x402 and openapi.json, inspects the payTo address on-chain (USDC inflows, distinct senders, EOA vs contract vs smart-wallet delegation), and returns a 0-100 trust score with buy/watch/avoid plus the evidence and the penalties behind every point ...

Thirteen production playbooks from running an x402 paid API on Base: shipping the endpoint, the payment-verifier rules, the real-money buyer test, the Base RPC capability audit, CDP authentication, directory registration, consolidating Cloudflare/Solana data, an rclone Google Drive bridge, AdSense, multi-size ad slots, nginx route recovery and secure Telegram alerts. Each item carries the mechanism, the commands, the pitfalls that cost us real money and how to verify the result.

Scans the last blocks for USDC and WETH transfers above a USD threshold and returns the largest movements with direction and counterparties. Pending-mempool visibility needs a node with txpool access, which this reports instead of faking.

Funding rate, open interest and price trend for a perpetual pair (Binance public data) plus protocol TVL change from DefiLlama, combined into a labelled sentiment with its weights shown.

Fetches any x402 endpoint, decodes its 402 challenge and reports conformance: version, accepts fields, PAYMENT-REQUIRED header, bazaar metadata and price.

Current Base base fee, suggested priority fees and USD cost estimates for a transfer or an ERC-20 transfer.

x402 seller trust leaderboard — every catalogue origin probed outside-in and scored 0-100, with the verdict spread and the most common reasons points were lost

Document to text (PDF, scans, images, DOCX, HTML) — per-page method, digest of the bytes read

Pulls one X/Twitter post by URL or id (text, author, metrics, language) and/or a public LinkedIn company page (industry, size, headquarters, specialties, followers) as structured JSON.

Runs a live web search and returns ranked results with title, URL, domain and snippet, then fetches the top pages and returns their extracted readable text — content retrieval, not just links.

Register an x402 endpoint so agents can find and pay it (x402scan + Coinbase Bazaar). The complete discovery path for an x402 endpoint: publish machine-readable discovery documents, pass the official validator, list on x402scan, understand what actually triggers Coinbase Bazaar indexing, and prove the listing exists from the registry's own API instead of a success toast. Written from an endpoint set that went from 0 to 11 listed resources, with the exact API payloads a registry expects today.

Build an x402 paid endpoint that passes the validator, gets indexed and takes real USDC. End-to-end recipe for turning any HTTP capability into an x402 endpoint that an unknown agent can find, pay for and consume: the payment gate, the verifier rules, per-route pricing, the concurrency traps, the nginx wiring, the discovery surface, plus the money-path bugs we only found when real USDC moved. Comes with the exact commands we run.

Connect a headless VPS to a user's Google Drive (rclone, no browser on the server). Give a server permanent, scriptable access to someone else's Google Drive: one interactive authorisation on a machine with a browser, then bidirectional sync from the server forever. This is the exact flow we use for both a personal Drive bridge and a scheduled VPS backup.

Searches Coinbase Bazaar and the x402-list directory at once and returns de-duplicated endpoints with price, network, payTo and description, so an agent can find a service to pay without knowing it in advance.

Domain & email audit — SPF, DMARC, DKIM, MX, TLS certificate, HSTS and security headers, scored 0-100