All projects on Base matching “audit”

Smart-contract inspection for any Base token address: which functions exist (mint, pause, blacklist, owner-only), proxy type and admin, verified source, creation block, DEX pool reserves in USD, holder count. Raw facts with sources and timestamps. Information, not investment advice.

Prepaid credit of $0.10 for paid API calls without signing each request. On PageAudit it pays for fix prompts for coding agents at $0.10 each after 3 free units and 30-day plans that check 25, 100 or 300 more pages every day, with a weekly site report, from $3.99. The same token pays the paid APIs of our other products.

Vulnerability scan for a list of packages in one call via OSV.dev: GET ?packages=lodash@4.17.15,pypi:requests==2.19.0,go:github.com/gin-gonic/gin@v1.9.0 (or POST a lockfile). Up to 200 across npm, PyPI, Go, crates.io, Maven and more: per-package advisories, severity, fix versions and upgrade targets; hallucinated and malicious packages flagged. JSON.

Single-signal check: is this website's pricing machine-readable for AI agents? Detects Offer schema with price/availability and pricing-transparency signals. Returns yes/no plus underlying checks and fixes. Useful for procurement and comparison agents.

Use this service before importing or publishing JSON to check it against a restricted draft-07 schema. Send dataJson and schemaJson as JSON-encoded strings. Max 256 KiB UTF-8 each, depth 32; bounded node and work limits. Supports types, required properties, items, enums and numeric/length bounds. No regex, combinators or external references. Invalid business data returns valid=false.

USE WHEN: An autonomous DeFi agent needs to POST { chain, address } to verify smart contract honeypot traps, owner privileges, and pool liquidity.

x402 services ranked by 30-day on-chain settlement volume, optionally by category.

Automated security checks for one x402 endpoint — not a penetration test. Eight non-destructive, unpaid probes: paywall presence, challenge sanity, garbage and forged (invalid-signature) payment rejection, exposure surface, error hygiene, body-size cap, discovery consistency. Returns SECURE / FINDINGS / EXPOSED with a fix note per finding. Use this when you operate an x402 route and want its locks

Base EVM Transaction Calldata, Logs & Transfer Decoder ($0.010 USDC). Deterministic decoding of transaction calldata, status, gas metrics, method selector, and event logs (EIP-3009, Transfer, Swap) on Base Mainnet.

Extract clean, LLM-ready Markdown or token-efficient text from any public webpage for RAG ingestion, research, summarization, or agent context. Strips navigation, ads, scripts, forms, and repeated boilerplate; preserves headings and resolved links; labels fetched content as untrusted; and returns at most 50,000 characters.

Offline EIP-712 typed data (chain-agnostic, no RPC): domain + types + primaryType + message JSON in, the normalized typed data plus domainSeparator, hashStruct and the final digest (the 32-byte value the wallet signs) out — with an optional signature (0x+65 bytes) it recovers the signer address (ecrecover), confirmed against an optional expectedAddress (recover.ok). Structs nest (arrays of structs

Turn any page into readable text: clean markdown plus the sha256 of the extracted content, so an agent can read a link without a browser.

Mobile LCP, Core Web Vitals, LocalBusiness/Organization JSON-LD schema check, and live side-by-side white-label preview scorecard ($0.05 USDC on Base Mainnet).

JSON canonicalization — canonicalize structured data with RFC 8785 JCS; return canonical JSON text, UTF-8 byte length, and SHA-256 hash for integrity checks, signature preparation, and deduplication. Includes an EIP-712 signed attestation. Use when an agent needs an idempotency key, cache key, dedup hash, or verifiable commitment. $0.002 per call. Free verification at POST /v1/verify.

Onchain risk assessment for one token on one chain (Base, Ethereum, BSC, Polygon, Arbitrum, Solana and others): a single risk score from 0 to 100 with a severity level, explicit risk flags such as honeypot, high transfer tax, proxy contract, concentrated holders or thin liquidity, plus current price, total liquidity, holder count, buy and sell tax percentages, owner and creator addresses, the five

One-country brief from the Voidly open censorship observatory: current index status (score, OONI anomaly rate, affected services), up to five recent incidents with citable IDs, and the 7-day censorship-event forecast. Input {"country":"IR"}: two letters (ISO 3166-1 alpha-2, any case). Codes without data return an empty incident list. An unavailable section is omitted. Voidly data CC BY 4.0; OONI-d

Transfer logs for one token contract, optional holder filter, amounts decoded with token decimals, read-only.

Fetch one public web page now and return clean markdown (or plain text) of the main content plus title, description, author, published time, canonical, language and sha256. Charged only on success.

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Autonomous smart contract security auditor — 20+ vulnerability classes, PoC exploits

Free zero-charge live sample returning five findings plus the purchase link for a $0.002 Audit402 report with implementation-ready remediation artifacts.