All projects matching “dev”

Is this Base token safe to buy? Simulates a real buy and sell (honeypot + hidden tax test), checks owner powers (mint, blacklist, fee changes), whale concentration, liquidity lock and scam lists. Returns scam / high_risk / caution / low_risk with reasons.

Validate an HTTP or HTTPS URL's syntax without contacting the destination.

MCP security checks and feedback for users and developers. Choose paid access without reports, or ongoing free access within limits: POST /v1/client-token; 1 check/24h + 1 for a previous-use report. Check URL/DNS, metadata/schema/auth, OSV/CVE risk and catalog drift before connecting. Verified owners can read consented weekly reports. ALLOW/BLOCK/UNKNOWN uses caller-confirmed versions. No tool exe

Use when an agent has the text of a Japanese invoice or receipt (e.g. OCR output) and needs exact amounts without LLM misreads. Returns registration number (T+13, check digit only, not an NTA registry lookup), total, subtotal, 8%/10% tax breakdown and issue/due dates (Reiwa to ISO). Deterministic rules; text only, no images/PDF. Errors before payment (no charge): 400 body not {text} or over 5000 c

Buy a pixel!

Is Stripe or another SaaS or cloud vendor down right now? Input: ?vendor=stripe (slug, name or domain). Returns status, confidence, active incidents with a summary, official status page, last-checked time and a staleness flag, read live from 60SecMonitor. $0.01 USDC on Base. Untracked vendors return 404 and aren't charged. Up to 25 vendors at once: /v1/status/batch ($0.05). Past incidents: /v1/inc

View the roadmap

Rent a Linux server for a month and get root access: 1 vCPU, 1 GB RAM, 10 GB NVMe, a dedicated IPv4 address, Ubuntu 24.04, in Germany or Finland. Pay per month in stablecoins with x402 or MPP, no account and no card. The answer carries a server id and secret; the IP and the root password follow in about 5 to 10 minutes. Extend it with the renew route.

Fuzzy OFAC sanctions name screening: match a person, company, vessel or aircraft name against every SDN primary name and alias, returning scored potential matches (0-100, default threshold 85) with entity type, sanctions programs, DOB, nationality, aliases and OFAC links, plus the SDN list publication date. Screening aid, not legal advice. Free sample: https://sanctions-screen.mick8511.workers.dev

Find the cheapest WORKING x402 service for a task. Compares thousands of paid APIs from the Coinbase, PayAI and Dexter catalogs by similarity, live price, uptime and speed (checked continuously). Send the header "X-Free-Tier: 1" for 20 free requests per day. /v1/check is always free.

Check NHTSA safety recall campaigns for a vehicle by make, model, and year — or by VIN (decoded live via NHTSA vPIC, then matched). Returns campaign numbers, components, defect/consequence/remedy summaries as published, report dates, units affected, and do-not-drive / park-outside advisories. Recall STATUS only — not a VIN decoder and not a per-VIN remedy-completion check. US federal public data (

Screen a facility or licensee against U.S. Nuclear Regulatory Commission (NRC) Event Notification reports: matching event notifications with event number, date, facility, state, the NRC's facility category, 10 CFR basis, and the published headline and event text, plus counts by category. Federal public data (nrc.gov).

Home-health agency quality verdict by agency name, CMS Certification Number (CCN), or ZIP code. Returns the CMS Quality of Patient Care star rating, the HHCAHPS patient-survey star summary, and key outcome measures (functional improvement, discharge to community, potentially preventable readmissions and hospitalizations) with national averages for comparison. Source: CMS Provider Data Catalog (US

MSHA mine safety verdict by Mine ID, mine name, or operator name: inspections, violation counts (incl. significant & substantial), assessed penalties, accidents/injuries/fatalities, and current mine status. Aggregated from MSHA Open Government Data (US federal public domain).

International phone number validation and normalization (libphonenumber): validity, country, E.164, national/international formats and line type.

Notarize any public web page or API response: fetches the URL server-side, archives the exact bytes, and returns a tamper-evident ed25519 attestation recording the final URL, UTC timestamp, HTTP status, content type, byte length and sha256 hash. Establishes provenance and a chain of custody for what a source said at a point in time, so the signed record can serve as the evidence layer in a later d

Agent Reliability Network: ARN x402 PayGuard provides x402 payment security for autonomous AI agents. Check the seller before you pay with payment preflight and payment-challenge validation. Returns ALLOW, CAUTION, or BLOCK.

x402 debugging/troubleshooting Q&A: Ask any question, get a cited answer. Whether you need HTTP 402 Payment Required help, facilitator verify & settle (CDP @coinbase/cdp-sdk), Bazaar discovery metadata & listing, protocol documentation, Next.js paid routes, or planning, building, and integrating x402 servers: @x402/core @x402/next @x402/express @x402/hono @x402/fastify @x402/fetch @x402/axios @x40

Check whether an ENS identity name for an AI agent, API or MCP server is available on x402 Identity Hub (*.402bot.eth, *.402api.eth, *.402mcp.eth). Returns availability, the mint fee and where to register.

Official central-bank exchange rate for one Latin American currency against USD (BRL PTAX, ARS BCRA, COP TRM, PEN BCRP, MXN FIX), with source, date and staleness flag.

Dragons Eye Lookup: Ransomware leak-site claim lookup by company name or domain. Returns ransomware-group claims (group, dates, country, sector, sources) matching the company or domain. Unverified claims from criminal leak sites; commercially reusable sources only.

Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.

Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/BLOCK verdict before your agent trusts the link.

OrionCMD Checks: Certificate status from CT logs + live HTTPS probe. Issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs (NOT the live served cert), plus a live HTTPS pass/fail probe from Cloudflare's edge.

Pre-sign risk check: decodes a transaction, typed data or sign request and flags risky approvals, permits, blind signing and drainer patterns. Run by Joi, an AI agent.

South African SA ID number validation: Structural validation of a South African identity number with safe decode: Luhn check digit, birth date, gender and citizenship segments (citizen or permanent resident). The structural step in KYC, KYB and customer onboarding or due diligence workflows: derive date of birth, age, gender and citizenship without storing the identity. Run it before a paid regist

Pay-per-use AI audio transcription API. Transcribe short MP3 and WAV audio files using Whisper Large V3 Turbo. No account or API key required. Pay with USDC on Base. 0.02 USDC per request. Maximum 120 seconds and 2 MB; MP3 and uncompressed PCM WAV only. Returns JSON: text, detected language, duration and timestamped segments. Charged only when a transcript is returned.

Check a public URL for meaningful changes and freshness.

Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and t