ToolVet
75trust / 100

Verify

by holdings-13f-verify.iykykblog.workers.dev in Security & trust

x402 APIPassing, checked 3 h ago

SEC Form 13F aggregated holdings verdict: by manager (name or CIK) get the latest-quarter portfolio total, position count, top 10 holdings and quarter-over-quarter change; by CUSIP get how many 13F managers hold the security, aggregate value/shares and top holders. Aggregates computed from public-domain SEC Form 13F data sets.

POST https://holdings-13f-verify.iykykblog.workers.dev/verify

Last 30 days

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed

Uptime
100%
Response time
533 ms typical, 571 ms slowest 5%
Last check
3 h ago
Next check
any minute now

How to call it

POST https://holdings-13f-verify.iykykblog.workers.dev/verify

Each call costs $0.08 in USDC on Base, paid with the request over x402.

Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.

Example request

From the listing.

POST https://holdings-13f-verify.iykykblog.workers.dev/verify
content-type: application/json

{
  "manager": "Berkshire Hathaway"
}

Parameters

ParameterTypeRequiredDescription
cusipstringNo9-character CUSIP, e.g. '037833100' (Apple Inc). Provide manager OR cusip.
managerstringNo13F filing manager name or CIK, e.g. 'Berkshire Hathaway' or '1067983'. Provide manager OR cusip.

Example response

The provider's example. We can't check it without paying.

Example response, 34 lines
{
  "found": true,
  "manager": {
    "cik": "1067983",
    "filed_date": "2026-08-14",
    "form_type": "13F-HR",
    "holdings_count": 29,
    "name": "Berkshire Hathaway Inc",
    "period_of_report": "2026-06-30",
    "top_holdings": [
      {
        "cusip": "037833100",
        "issuer": "APPLE INC",
        "pct_of_portfolio": 22.04,
        "rank": 1,
        "share_type": "SH",
        "shares": 227917808,
        "title_class": "COM",
        "value_usd": 65950296923
      }
    ],
    "total_value_usd": 299253556246
  },
  "quarter_over_quarter": {
    "change_pct": 13.74,
    "exited_positions": 1,
    "new_positions": 1,
    "previous_period": "2026-03-31",
    "previous_total_value_usd": 263095703570
  },
  "query": {
    "manager": "Berkshire Hathaway"
  }
}

Call it from code

The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.08.

curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://holdings-13f-verify.iykykblog.workers.dev/verify' \
  -H 'content-type: application/json' \
  --data-raw '{"manager":"Berkshire Hathaway"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://holdings-13f-verify.iykykblog.workers.dev/verify' \
  -H 'content-type: application/json' \
  --data-raw '{"manager":"Berkshire Hathaway"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode
JavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.08 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.08" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.08 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fholdings-13f-verify.iykykblog.workers.dev%2Fverify&method=POST
const res = await pay("https://holdings-13f-verify.iykykblog.workers.dev/verify", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "manager": "Berkshire Hathaway"
  }),
});
console.log(res.status, await res.text());
Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.08 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.08"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://holdings-13f-verify.iykykblog.workers.dev/verify",
        json={
            "manager": "Berkshire Hathaway",
        },
    )
    print(res.status_code, res.text)

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
3 h agoPassed402542 ms$0.08
6 h agoPassed402533 ms$0.08
11 h agoPassed402571 ms$0.08
14 h agoPassed402595 ms$0.08
18 h agoPassed402421 ms$0.08
27 h agoPassed402508 ms$0.08