Paid services on Base matching “openapi”

Checks an x402 API origin the way x402scan, the CDP Bazaar and agents read it: fetches /openapi.json and /.well-known/x402, then calls each paid route without paying (up to 30) and decodes its 402. Reports routes that do not answer 402, missing or v1-only PAYMENT-REQUIRED headers, prices that differ from the OpenAPI document, resource URLs that differ from the route, wrong USDC EIP-712 domains, mi

Fetch a live https URL and score whether the deploy is actually there. POST {"url":"https://your.site","min_score":80} ($0.02). Default x402-seller profile: HTTPS, HSTS, llms.txt, catalog, OpenAPI, MCP, health. Optional claims[] or profile:"web". Returns 0–100, evidence, do_this_first, ci_failed. Humans: GET /v1/tools/claim-check/report?host=your.site. Badge goes stale after 7 days.

Repair one x402 route's Bazaar discovery metadata in one call. Send a resource URL and one real sample output; get the defect report plus a complete discovery package — full output schema inferred from the sample, a sub-500-char description with a use-when sentence, OpenAPI and well-known snippets, paste-in instructions — that ships only after passing both x402 SDK validators. Use this when your l

Before an AI agent trusts or pays a public API, inspect its public machine-readable evidence and x402 readiness. Submit a public HTTPS domain to check its agent card, OpenAPI, robots policy, and settlement-aware x402 signals, or submit a Base address for public onchain evidence. Returns a timestamped JSON report; not a security or compliance audit.

A registry of token records with a build log. A record is written only by the token's provable controller (on Solana: the pump.fun curve creator or the mint's update authority) and every version carries that ed25519 signature, so a reader verifies against the chain, not a directory. One $0.02 x402 write in USDC on Base, Polygon, Solana or Arc; reads, pages, log and OpenAPI are free.

Return a compact agent-readiness score for OpenAPI or MCP input.

Inspect a public HTTP or HTTPS URL and return a structured site passport. Includes pulse fields, registrable domain, robots and sitemap discovery, feeds, OpenAPI hints, and page metadata. Uses at most eight external HTTP requests and does not execute JavaScript. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to reuse cache; set fresh=true only when a new upstream fetch is required.

Audit a supplied OpenAPI contract and return prioritized integration fixes.

A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (/v1/x402-audit) — Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. (https://preflight.agentdiet.dev/v1/preflight/certify)

Converts one LLM tool/function definition (OpenAI, Anthropic, Gemini, MCP or plain JSON Schema; format auto-detected) into one or more target provider formats. Applies each provider's schema rules: OpenAI strict mode (all fields required, optional fields made nullable, additionalProperties false), Gemini's OpenAPI subset (no $ref, nullable, string enums), $ref inlining and name sanitising. Returns

Validate any x402 endpoint: 402 challenge, accepts[], atomic amounts, bazaar extension, OpenAPI. Score 0-100 + fixes.

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

Return one current Coinbase spot-product snapshot for an exact BASE-QUOTE product id, including venue price, 24-hour price change and provider-reported 24-hour product volume. Forest reads only Coinbase Advanced Trade public market data; it does not infer tickers, infer the provider volume denomination, aggregate venues, read an account or wallet, place orders, provide an executable quote, forecas

Headless scraper proxy for AI agents at $0.01 per accepted scrape. Fetch a public HTTPS URL and return clean LLM-ready Markdown. Agent-safety guarantee: output is validated as clean text before serving; binary or garbled content is rejected with no charge.

Company enrichment and KYB data for due diligence by domain: verify a counterparty, supplier or vendor before outreach, onboarding or payment. Returns firmographics (legal name, LEI, SEC CIK, industry, HQ, founded, employees), domain intelligence (age, email provider, SPF/DMARC), public role emails, socials, plus OFAC SDN and EU sanctions screening. Source-cited; unknowns null. Company data only,

Meridian: a design system for SaaS products people use all day: admin consoles, CRMs and internal tools. Calm, neutral and precise: Manrope headlines over Inter, Meridian Teal with one Burnt Amber accent, tone rather than shadow. Each is an original design system (not a brand look-alike) in the open DESIGN.md format that Claude Code, Cursor and Codex read before building UI: DESIGN.md, W3C DTCG to

Live snapshot of the most liquid carbon credits retirable on Base: the top 3 Klima Protocol carbon classes and the top 3 Carbonmark marketplace listings, with USDC-per-tonne prices and tonnes available. Additionally, the additional endpoints to quote and retire carbon are included; query those endpoints for further discovery, quotes, and retirements. Query /.well-known, /openapi, and /discover to

Access to protected resource

Real-time on-chain crypto bounty radar: scans on-chain ERC-8183 escrow contracts and web3 agent bounty platforms for verified, funded reward opportunities and agent task enrichments on Base ($0.75 USDC). Input: query or chain parameter.

Mezo MUSD mainnet (eip155:31612) immutable fixed-token pinned ERC20 symbol/decimals/totalSupply/code hash, and optional owner/spender public balance/allowance. Complete strict public Mezo read before 0.01 native Circle Base USDC signed x402 payment. Not a backing/peg/yield/bridge-audit claim. No keys, transactions, balances moved or payer self-purchase.

Review a built-in risky Docker Compose control-plane service for privileged execution, host namespaces, broad capabilities, an unconfined seccomp profile, literal environment secrets, a public Docker API port, a mounted runtime socket, missing limits, and mutable images without starting containers