All projects matching “audit”

Get structured metadata for any public web page in one call: title, meta description, canonical URL, Open Graph and Twitter card tags, favicons, JSON-LD schema types, language and the heading outline. Use it to build link previews and social cards, classify or dedupe URLs, and run SEO and AI-readability audits - far cheaper than fetching and parsing the whole page.

0-100 safety score with components (protocol trust, TVL depth, audits, track record), observed and risk-adjusted APR, and whether STB's Auto-Defense would exit — for every vetted stablecoin vault, or one by ?venue=<id|pool address>.

A stateful, multi-chain spending session for AI agents. One session enforces a hard USDC budget cap across every tool call, with a verifiable receipt and running ledger for each payment — not a one-shot budget check, but persistent spend governance with a full audit trail. The gateway enforces the cap for the paying wallet on Stacks and Base. USDC on Base (standard x402) or Stellar (via the AgentP

Anchor an AI agent decision or audit record to Base mainnet. Submit {schema, payload_hash (SHA-256 hex, 64 chars), metadata}; service queues into a Merkle batch and returns a receipt with pending_anchor status immediately. Full Merkle proof and on-chain anchor_tx available via free GET /v1/notarize/:receipt_id after batch anchors (within batch_threshold receipts or 120s). Include Idempotency-Key h

Audits a website for AI agent and AI crawler readiness from caller-supplied inputs: robots.txt, HTML, headers, llms.txt, sitemap lastmod, /.well-known. Names the policy per AI token (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, Claude-User, PerplexityBot, Perplexity-User, Google-Extended, Gemini-User, KagiBot, Kagi-User, Applebot-Extended, Bytespider, CCBot, Amazonbot, meta-ex

Smart Contract Audit — Security review of a single contract

Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Get structured metadata for any public web page in one call: title, meta description, canonical URL, Open Graph and Twitter card tags, favicons, JSON-LD schema types, language and the heading outline. Use it to build link previews and social cards, classify or dedupe URLs, and run SEO and AI-readability audits - far cheaper than fetching and parsing the whole page.

Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.

On-page SEO audit of one URL: title and meta description length, canonical, robots meta and X-Robots-Tag, robots.txt allow for user-agent *, sitemap.xml with URL count, lang, hreflang, h1-h3 outline, word count, images without alt, internal/external links, Open Graph, Twitter card, JSON-LD schema.org types, favicon, viewport, mixed content; each check pass/warn/fail with a fix and a 0-100 score.

BitBooth Whois: pay 0.01 USDC, get the parsed whois record for any domain — registrar, creation/updated/expiry dates, name servers, status flags, plus the raw whois text. Two-hop resolution via whois.iana.org then the authoritative registry over TCP port 43. 5s per-connection timeout cap. Rejects IPv4/IPv6 inputs and blocks SSRF at the DNS layer. Built for agents auditing domain ownership, monitor

Accessible transport place allocation audit on the actual proposed delivery routes. Sum declared wheelchair_places across all jobs of each active route and compare with vehicle wheelchair_places. No pickup occupancy or certification inferred. Uses the paid-qualified existing VRP planner unchanged, then checks this business rule against the actual proposed route. A rule violation yields dispatch_re

Bibliography verification for AI research agents — POST up to 20 citations (DOIs or free-text references) and get a per-reference verdict: exists/not-found, retracted/withdrawn (Crossref + Retraction Watch + OpenAlex), and title/author/year mismatches against a real record. Built for agents auditing LLM-generated bibliographies before a citation ships.

Notarize an AI agent decision, audit record, or any payload to Base mainnet. Submit SHA-256 hash + metadata; get a tamper-proof verifiable receipt immediately. Merkle proof and on-chain anchor_tx available free after batch (~120s). Use Idempotency-Key to prevent double-charges on retry.

Every field typed. Empty = explained. You never pay for a blank. Multifamily real estate deals feed: property listings with auditable NOI/DSCR underwriting and Hot/Warm/Pass scoring; a filtered query that matches nothing returns free. Want the full workup on one? GET /api/deals/{id}/report ($1.50) adds HUD-underwritten vs claimed NOI/cap, matched distress signals, and a suggested offer range. Sour

Smart Contract Audit — Security review of a single contract

Audit real gas spend across up to 20 Base mainnet transaction hashes you provide — total/average gas used, cost in ETH, per-tx breakdown. POST body required. Experimental/informational only — not financial advice.

Calculates 9 TTM financial ratios (P/E, P/OCF, P/FCF, P/B, EV/EBITDA, ROIC %, Debt/Equity, Current Ratio, Interest Coverage) directly from official SEC EDGAR XBRL filings with accession audit trails. Disclosures: Financial institutions and IFRS ADRs return null for unclassified balance sheet or missing US-GAAP taxonomy tags.

AI crawler visibility audit: is your website visible to AI crawlers (GPTBot, ClaudeBot, PerplexityBot, OAI-SearchBot) so ChatGPT, Claude and Perplexity can read and cite it? Fetched like an AI crawler, without JavaScript: robots.txt, llms.txt, sitemap, soft 404, JSON-LD, and which crawlers are blocked at the edge. $0.01 per check, one payment per check: every rule, a model verdict, a fix with evid

Eagle Eye v1.0.0 — U.S. enterprise-grade wallet compliance screening. OFAC SDN + Circle USDC blacklist on Base. Signed audit receipts. Certified single-address check.

Analyze a Base Mainnet token contract: block-pinned owner(), ERC-1967 proxy slots, ERC-20 metadata, code hash, best-effort source match and prior-snapshot comparison when available. Free POST /v1/prepare returns report_id; paid GET /v1/report reads it for 0.01 USDC via x402. Not a security audit.

Performs comprehensive URL health checks, measuring response time, status code, security headers, and TLS/SSL certificate validity. Route: GET /paid/health-check?url=https://example.com. Ideal for automated monitoring and endpoint auditing.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.

CMS detection confidence audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

Delegated Voting Concentration analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Concentrated LP Range Optimizer analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Check whether a person or company appears on the SAM.gov federal exclusions (debarment) list. Query by name, UEI, or CAGE code. Returns exclusion details and an audit receipt.

Invoice Auditor - Check invoices, estimates and contractor quotes for arithmetic errors, inconsistent line items, missing details, and unclear payment terms in a structured audit.

Is this token safe to buy? Honeypot detection, rug-pull and scam check for any ERC-20 token contract -- flags can't-sell traps, hidden mints, malicious buy/sell taxes, unverified source, and holder concentration. GoPlus-powered token security scan with risk score 0-100. Not an audit.

Cross-Chain Supply Reconciliation analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.