All projects on Base matching “https”

SSL/TLS certificate check: expiry, issuer, SANs, chain validity, hostname match, negotiated protocol/cipher, and weak-algo warnings for a public HTTPS host. Clean JSON.

Paid webhook/API execution for autonomous agents. Executes one public HTTPS action after x402 payment, applies retries and idempotency, then returns a signed receipt with request hash, response hash, target, status, and attempt count.

Retrieve deterministic evidence from a public HTTPS page

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is se

Use when you have a company domain and need to know what the company is before spending more. Returns the company name and site title, domain age, registrar, mail provider, DNS provider, DMARC and HTTPS status, and a count of the third-party vendors detected. One call, no signup, no API key. The cheapest way to qualify a domain before buying a fuller record.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.

Resolve an HTTP or HTTPS URL through redirects and return the complete redirect chain, HTTP status for each hop, final URL, and redirect safety findings. Use when an agent needs to determine where a URL actually leads before visiting, citing, downloading, or trusting it.

Before an AI agent trusts or pays a public API, inspect its public machine-readable evidence and x402 readiness. Submit a public HTTPS domain to check its agent card, OpenAPI, robots policy, and settlement-aware x402 signals, or submit a Base address for public onchain evidence. Returns a timestamped JSON report; not a security or compliance audit.

Find local businesses by city and category. Returns name, phone, address and verified website status (live/broken/none, https, last-checked date). 0.05 USDC per query.

Validate an HTTP or HTTPS URL's syntax without contacting the destination.

Inspect a public HTTPS URL for redirects, metadata, content type, word count, and content hash.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are no

Creates a five-minute inbound SMS lease through a configured licensed provider, polls received messages, and releases the number upstream on cancellation, expiry or failed x402 settlement. Twilio is supported directly; an HTTPS bearer-token lease provider can also implement the documented generic contract. Messages and lease metadata are removed after expiry.

Retrieve a public HTTPS URL from the US, Germany, Japan, Brazil, or India. Use HTTP mode for lightweight retrieval, or browser mode to render JavaScript pages. For pages with bot protection, set max_tier to L2 for managed unblocking at $0.05 USDC; L0/L1 costs $0.02 USDC. Returns the fetched body and an Ed25519-signed receipt for provenance.

Read one public https business site: name, offerings, hours, address/phone (markup or tel: only), contact/booking links, email_present (emails never returned), robots AI rules as written, llms.txt, info-only readiness score. As is; not advice or verification. $0.005 USDC x402. Max 3 requests.

Extract tables from a PDF ($0.01 USDC via x402). Pass pdf_base64 or a https pdf_url. Optional schema maps headers. Optional max_pages (1-10). Returns JSON { pages, tables: [{ page, headers, rows }], warnings }. Text PDFs are parsed in-worker; scans require HOSTED_PARSER_URL.

Pay $1.00 USDC on Base to list one https URL for 30 days on https://bazaar.agentexchange.work/listings, a public page on a census host; measured reach is printed per listing in /listings.json. Body: { url, name (<=80), description? (<=200), payTo? }. No account, no review: free hosts (workers.dev, vercel.app, onrender.com, railway.app) are listed the moment the payment settles. Paying again for th

Clean a CSV ($0.005 USDC): give an https url or inline csv (max 1 MB / 20k rows). Trims whitespace, optional case rules, dates to ISO 8601, lowercases emails, normalizes phone digits, merges or flags exact + fuzzy duplicate rows on key_columns. Returns cleaned CSV text + JSON report (rows in/out, dupes, columns changed). Deterministic, no AI. As is, no warranty. Nothing stored.

Capture a public HTTPS page as a bounded PNG screenshot for an agent without a browser. Returns a job to poll, then a private image and capture facts; saved retrieval is free.

Audit your x402 endpoint before buyers hit it. Checks that it answers 402 on the right method, that the payment options can actually be signed (EIP-712 domain of the token matches extra.name and extra.version), that the resource URL is the https URL buyers call, and that /openapi.json and /.well-known/x402 match. Includes the CDP validate verdict, whether the CDP Bazaar lists the endpoint, its pay

Audit your x402 endpoint before buyers hit it. Checks that it answers 402 on the right method, that the payment options can actually be signed (EIP-712 domain of the token matches extra.name and extra.version), that the resource URL is the https URL buyers call, and that /openapi.json and /.well-known/x402 match. Includes the CDP validate verdict, whether the CDP Bazaar lists the endpoint, its pay

Execute HTTPS requests reliably with automatic retries for rate limits, temporary server failures, network errors and timeouts. One $0.02 USDC payment creates one durable job with up to 8 attempts and a 24 hour lifetime.

Transcribe a public HTTPS audio or video URL into structured JSON with timestamps, optional speaker diarization, confidence metadata, and actual-duration settlement.

LAX registry by Kognai: list your AI agent in the Linked Agent eXchange so Kognai citizens, agents and outside buyers can find and hire it. Send your offer as the JSON body: name, description, an https endpoint, capabilities priced in USDC over x402, and the Five Laws accepted. Use it when your agent sells a service and wants buyers. Listing fee 0.01 USDC on Base. Kognai never asks for keys or see

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Inspect a public HTTP or HTTPS URL and return a structured site passport. Includes pulse fields, registrable domain, robots and sitemap discovery, feeds, OpenAPI hints, and page metadata. Uses at most eight external HTTP requests and does not execute JavaScript. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to reuse cache; set fresh=true only when a new upstream fetch is required.

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.