All projects on Base matching “audit”

Token Solana MUDA yang sudah ada daya tarikan dan LULUS saringan keselamatan: kuasa cetak & beku mesti dilumpuhkan, bekalan pembangun kecil, kecairan/pemegang/tumpuan 10 teratas melepasi had anda. Mod "baharu" memberi pelancaran terkini dengan saringan audit sahaja (kecairan belum diindeks — dinyatakan jujur).

Use when you need the list of pages a site publishes (to crawl it, find recent posts, or audit SEO): give a site URL (the sitemap is discovered from robots.txt Sitemap: lines, then /sitemap.xml, /sitemap_index.xml, /wp-sitemap.xml) or a sitemap URL directly. Returns the page URLs with lastmod, changefreq and priority; for a sitemap index, returns its child sitemaps and (expand=true, default) the U

Assay A2A & MCP Pre-Flight Security Audit & TDQS Certification ($0.005 Base USDC)

Full edition of the AI Agent Setup Checklist v1.4: 8,861 words of Markdown in 16 sections. Opens with the rules for which steps need the owner's yes, then a 10-step runbook for launching a paid x402 endpoint (also sold alone, 0.25 USDC), an account registry, 2FA recovery runbooks, a token audit, release sync, directory listing and route retirement. Vendor facts sit in one dated appendix (October 2

Deterministic technical and on-page SEO audit for one public HTTPS URL. Checks title presence/length, meta description, H1 and heading structure, canonical, indexability/robots directives, viewport, language, JSON-LD structured data, internal links, image-alt coverage, compression and HTTPS; returns score, grade, checks and metrics. Machine-accessibility signals are separate and unscored.

Indonesian market sentiment index for one topic: a 0-100 score (50 = neutral), label, risk-on/risk-off mood, counts per sentiment label, top positive and negative driver terms, entities most associated with each direction, and the strongest headlines on both sides. Deterministic lexicon, no LLM — every article in /headlines carries sentiment.matches, so the number can be audited. Useful for tradin

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

How many <audio> elements does the page have? Fetches the URL and counts audio tags (plus, where relevant, how many have alt/src/href/type attributes), and the page's total element count for scale. Structural audits and template comparisons in one number. $0.01 per page.

AgentDiet 4-Node Autonomous B2B & SEC Due Diligence DAG: Executes Company-Enrich, Domain-OSINT, SEC-Intel, and GitHub-Audit in one atomic call.

4-Protocol MCP Glama 5.0/5.0 TDQS, A2A Card & x402/MPP Schema Compiler (/v1/mcp-compiler) — Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop-in 5.0/5.0 schemas, A2A Agent Cards, and x402/MPP configs. (https://mcp-compiler.agentdiet.dev/v1/mcp-compiler)

DEX Liquidity, Slippage & Orderflow Audit API (/v1/token-intel) — Fetches live DexScreener liquidity pools, FDV, 24h volume, and 1h buy/sell orderflow pressure. (https://token-intel.agentdiet.dev/v1/token-intel)

chipscan fast token security audit

Onchain-Risk EVM & Solana Honeypot & Rug Scanner: Audits token contracts across Base, Ethereum, Arbitrum, and Solana for rug-pull vectors.

Assay Live Endpoint Security & Schema Auditor: Audits live A2A, MCP, and x402 endpoints for schema conformance, latency, and payment integrity.

Run a bounded deterministic preflight scan for possible private keys, secret assignments, permissive CORS, debug mode, insecure HTTP, and invalid JSON. Not a comprehensive security audit.

Deterministic FinTech, B2B invoicing, and accounting domain SEO, Core Web Vitals, JSON-LD SoftwareApplication schema & WCAG 2.1 AA audit ($0.05 USDC on Base Mainnet).

Accounting, reconciliation and audit trail for autonomous agent spending. Record every x402 purchase as a receipt; each is matched against the on-chain USDC payment (Base, Solana), missing or unmatched payments are flagged, finance gets a monthly statement and CSV export, and daily batch fingerprints are anchored on a public ledger with a verification page per receipt. USD 1 per agent wallet per c

Audit a supplied OpenAPI contract and return prioritized integration fixes.

Checks an agent's JSON output against a JSON Schema (draft 2020-12 keywords: type, properties, required, additionalProperties, items, enum, const, length, pattern, minimum/maximum, item counts). Returns valid yes/no, each error with its path and the value with disallowed fields removed. $ref, allOf/anyOf/oneOf, if/then and format return an error instead of passing silently.

WeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page. Links are Sogou redirect links that open the mp.weixin.qq.com article in a browser. Sogou may show a captcha under heavy use; that returns 503.

URL safety verdict: follows the redirect chain, detects homograph and punycode hostname tricks, and cross-references the destination host against the URLhaus threat feed. Returns safe, suspicious or malicious with reasons. Single-URL scope; domain-wide grading is /sitegrade and registration facts are /domain-intel.

Phone number intelligence for agents: pass any number and get back whether it is a valid E.164 number, its country, the carrier that holds it, and the line type — mobile, landline, or VoIP. One paid call, no account, no API key. Decide whether a number is worth calling or texting, or flag a VoIP number before you trust it. Free-format numbers are normalized; a syntactically bad number is rejected

FULL token check (BUNDLE): combines GoPlus risk flags (= liquidity-health) + contract/proxy/owner facts (= contract-profile) + Uniswap v3 pools vs WETH/USDC with quote-side liquidity in USD, in a single call. Objective signals, not a verdict. Use this instead of calling liquidity-health and contract-profile separately; use the individual tools only if you need just one aspect.

invinoveritas /validate — EdgeProof: is a strategy's edge real or curve-fit noise? Get a verdict (likely_real / borderline / overfit) backed by Deflated Sharpe

Virtuals Solana DBC State & Supply Receipt. Virtuals Solana launches only. Returns finalized mint controls, ACTIVE_DBC vault custody, tokens outside the observed DBC vault, platform lifecycle, signature/slot provenance, and token-specific tape coverage. Every result below COMPLETE names its reasons and separates our own instrumentation age from real observation loss. It does not verify circulating

Structured crypto market signal: for each CoinGecko id return price, market cap, 24h change, 24h volume, plus a derived momentum score (-100..100), a bullish/neutral/bearish signal, and a volatility flag — enriched data an agent ingests in a trading/research loop without computing it itself. Input: ids (comma-separated).

Payment receipt and settlement proof for x402 and agent payments, by Liquid Logic X. Input: a Base USDC tx hash (optional memo). Output: JSON proof recorded onchain on Arc mainnet (proofId, from/to/amount, Arc tx, refId) plus a public verify link anyone can check. $0.02 USDC on Base, charged only when a proof is returned. Your paying wallet must be the tx sender or recipient. Liquid Logic X also r

Dokimo Verify API (GET) - scheme demo: recomputes a sample dokimo-merkle-v1 proof to its root and verifies nothing of yours. For real caller verification, POST /paid/verify with {leaf, proof_path, root, rule_version_commitment} plus summary and binding for a dokimo-anchor-v2 close (recompute + on-chain anchor check). Scheme: /merkle-spec.html.

Use this service before importing or publishing JSON to check it against a restricted draft-07 schema. Send dataJson and schemaJson as JSON-encoded strings. Max 256 KiB UTF-8 each, depth 32; bounded node and work limits. Supports types, required properties, items, enums and numeric/length bounds. No regex, combinators or external references. Invalid business data returns valid=false.

Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.