ToolVet
70trust / 100

Text Unicode

by Tanod utilpeek in Developer tools

x402 APIPassing, checked 39 min ago

utilpeek (Tanod) Unicode inspection: invisible, bidi and look-alike characters. Use when an agent must detect invisible, bidirectional or look-alike characters in a text.

POST https://tanod.dev/v1/text/unicode

This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.

Last 30 days

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed

Uptime
100%
Response time
869 ms typical, 1.1 s slowest 5%
Last check
39 min ago
Next check
any minute now

How to call it

POST https://tanod.dev/v1/text/unicode

Each call costs $0.001 in USDC on Base, paid with the request over x402.

Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.

Example request

The listing's own example input is withheld: it contains instructions aimed at AI agents. Built from the input schema. Replace the values with your own.

POST https://tanod.dev/v1/text/unicode
content-type: application/json

{
  "text": "example"
}

Parameters

ParameterTypeRequiredDescription
list_charsintegerNoList the first N code points with name / category. Default: 0.
normalizestring or nullNoAlso return the text in this normalization form: NFC, NFD, NFKC or NFKD (default none). Default: null.
skeletonbooleanNoUTS #39 confusable skeleton of the whole text. Default: false.
strip_invisiblebooleanNoReturn the text without bidi / zero-width / tag / control characters. Default: false.
textstringYesThe text (at most 200,000 characters).

Example response

The provider's example. We can't check it without paying.

Example response, 117 lines
{
  "bidi": {
    "controls": [
      "PDF",
      "RLO"
    ],
    "trojan_source_risk": true,
    "unterminated_lines": []
  },
  "categories": [
    {
      "category": "Ll",
      "count": 13,
      "name": "lowercase letter"
    },
    {
      "category": "Cf",
      "count": 2,
      "name": "format"
    },
    {
      "category": "Po",
      "count": 1,
      "name": "other punctuation"
    },
    {
      "category": "Zs",
      "count": 1,
      "name": "space separator"
    }
  ],
  "combining": {
    "first_flood_offset": null,
    "flood": false,
    "max_run": 0
  },
  "confusables": [
    {
      "char": "а",
      "codepoint": "U+0430",
      "looks_like": "a",
      "looks_like_codepoints": [
        "U+0061"
      ],
      "name": "CYRILLIC SMALL LETTER A",
      "script": "Cyrillic"
    }
  ],
  "invisible": [
    {
      "abbr": "RLO",
      "codepoint": "U+202E",
      "count": 1,
      "kind": "bidi_control",
      "name": "RIGHT-TO-LEFT OVERRIDE",
      "positions": [
        11
      ]
    },
    {
      "abbr": "PDF",
      "codepoint": "U+202C",
      "count": 1,
      "kind": "bidi_control",
      "name": "POP DIRECTIONAL FORMATTING",
      "positions": [
        16
      ]
    }
  ],
  "length": 17,
  "mixed_script_text": true,
  "mixed_script_words": [
    {
      "offset": 0,
      "scripts": [
        "Cyrillic",
        "Latin"
      ],
      "skeleton": "paypal",
      "word": "pаypal"
    }
  ],
  "normalization": {
    "NFC": true,
    "NFD": true,
    "NFKC": true,
    "NFKD": true
  },
  "reasons": [
    "bidirectional embedding / override / isolate controls (Trojan Source, CVE-2021-42574)",
    "words mixing scripts (possible homoglyph spoofing)"
  ],
  "risk": "high",
  "scripts": [
    {
      "count": 12,
      "script": "Latin"
    },
    {
      "count": 4,
      "script": "Common"
    },
    {
      "count": 1,
      "script": "Cyrillic"
    }
  ],
  "source": {
    "data": "Unicode 14.0.0 confusables.txt + Scripts.txt (UTS #39 / UCD), bundled unmodified",
    "library": "own implementation + Python unicodedata",
    "license": "Unicode License V3"
  },
  "unicode_version": "14.0.0",
  "utf16_units": 17,
  "utf8_bytes": 22
}

Call it from code

The curl command shows the payment challenge.

curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://tanod.dev/v1/text/unicode' \
  -H 'content-type: application/json' \
  --data-raw '{"text":"example"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://tanod.dev/v1/text/unicode' \
  -H 'content-type: application/json' \
  --data-raw '{"text":"example"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode

We don't show code that pays this service: its listing contains instructions aimed at AI agents.

Security scan

  • Invisible Unicode characters in example_input
    {"text":"pаypal.com [U+202E]evil[U+202C]"}

Recent checks

WhenResultHTTPTimePrice
39 min agoPassed4021.1 s$0.001
5 h agoPassed402449 ms$0.001
9 h agoPassed4021.1 s$0.001
13 h agoPassed4021.0 s$0.001
17 h agoPassed4021.0 s$0.001
20 h agoPassed4021.1 s$0.001
24 h agoPassed4021.1 s$0.001
28 h agoPassed4021.1 s$0.001
32 h agoPassed402834 ms$0.001
35 h agoPassed402884 ms$0.001
39 h agoPassed402839 ms$0.001
42 h agoPassed402358 ms$0.001
46 h agoPassed402889 ms$0.001
2 days agoPassed402851 ms$0.001
2 days agoPassed402818 ms$0.001