All projects on Base matching “credentials”

529 withdrawal & rollover checker — is THIS withdrawal qualified? K-12 (OBBBA $20k cap from 2026 + expanded categories), postsecondary credentialing, SECURE 2.0 Roth rollovers (15-yr/5-yr/earned-income/$35k gates computed), student-loan cap, non-qualified tax + 10% penalty math with exception routing — plus the California non-conformity traps (K-12, credentialing and 529→Roth are ALL CA-taxable +

Catch drift when everything still looks green. Check available Apify Actor run history and sampled output for schema drift and unexpected empty results. Additional checks cover HTTP responses, credential validity and available quota. One paid call returns a timestamped verdict and supporting details. A successful run or valid credential does not guarantee useful data. This endpoint checks once; it

MCP security: catch a rug pull or tool poisoning between two tools/list results of the same MCP server — the version you approved and the one it serves now. Flags instructions aimed at the model, override and concealment wording, credential and wallet paths, covert actions, hidden Unicode, new URLs and addresses, a dropped readOnlyHint, new command or path parameters and look-alike tool names; ver

Rule-based multi-label text classification over a fixed taxonomy (urgency, financial_promise, credential_request, crypto_mention, cta, legal_offer, medical_claim, seo_spam, url_shortener, press_release, question, has_contact). Deterministic - identical text always yields identical labels.

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and l

IP threat intelligence from first-party honeypot observations (not scraped blocklists): was this IP seen scanning, brute-forcing or probing a live honeypot, which traps it triggered (credential stuffing, webshell, exploit scans, scrapers), bot category and confidence. Works for IPv4 and IPv6.

Screen up to 3000 characters of untrusted text for prompt injection, secret exfiltration, deceptive payments and phishing. Jev risk scores, five attack families and an exact suspect passage. French, English and Spanish evaluation; probabilistic screening, not a security guarantee. Text is processed by the Jev provider; live credentials are outside the supported input scope.

Secret scan for exposed API keys, tokens, passwords, and credentials in text — returns redacted output without exposing matched secret values. Ideal for agent pre-flight checks before sharing config or logs.

What a Base transaction costs right now, with the RPC provider and trust level behind the number, so a caller can tell a credentialed reading from a degraded one before pricing a transaction.

Check whether a domain's TLS/SSL certificate is valid, trusted, and not expiring before connecting to it. Performs a live handshake and returns a 0–100 score and tier (VALID/WEAK/EXPIRING/EXPIRED/UNTRUSTED/INVALID) with chain trust, days-to-expiry, signature algorithm, TLS version, and cipher quality. Use before submitting credentials, posting to a webhook, or following a payment link, to catch ex

Check Python for syntax errors, lint and type mistakes, unsafe constructs and hardcoded credentials, and against the examples the caller supplies, without running it.

Pre-install scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill, MCP server or tool list, or inline content. Matches OSV and OpenSSF malicious-package advisories, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and MCP tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 of the input and an Ed25519-si

Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'own

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findin

AI Security Guard content scanner. Detects prompt injection, intent drift, and credential exfiltration. $0.0015-$0.024 by size. Full docs: https://aisecurityguard.io/v1/skill

One public GitHub Actions source-file static preflight, read anonymously from GitHub Contents API. No buyer-supplied host, no code execution, no private repository or credentials.

Preflight untrusted text for common prompt-injection, credential-exfiltration, and tool-abuse patterns. Deterministic heuristic scan; not a guarantee of safety.

Wallet risk score 0-100 with component breakdown for an EVM address.