All projects matching “headers”

Is this x402 endpoint safe to pay? Vet an unknown seller BEFORE paying: pay/avoid verdict, 0-100 trust score, live 402 probe, scam flags (payTo hijack, bait-and-switch pricing, honeypot, wrong asset) and an on-chain check of the receiver on Base. Reads x402 v1 (body) AND v2 (PAYMENT-REQUIRED header) — body-only checkers call live v2 services dead. ?endpoint=url; omit for a trust-ranked catalog.

Pay-per-scan AI agent-readability scan. POST { "url": "https://…" } with an X-PAYMENT header to run a scan with no account or subscription. Two tiers: $0.02 (25 pages) and $0.25 (250 pages), USDC on Base.

Pay-per-call cited research brief. The request carries a query and 1 to 12 quotes with source URLs; the response is a short brief that cites only those quotes, at 0.008 USDC per call on Base. Payment settles after the brief is produced. A client nonce header makes a retry free of a second charge.

Upload a file and get a temporary signed URL. Send raw file body with Content-Type header. Returns a URL valid for 1 hour.

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Find the cheapest WORKING x402 service for a task. Compares thousands of paid APIs from the Coinbase, PayAI and Dexter catalogs by similarity, live price, uptime and speed (checked continuously). Send the header "X-Free-Tier: 1" for 20 free requests per day. /v1/check is always free.

Scrapes a URL and returns structured JSON: title, meta tags, headings, paragraphs, links, tables, extracted emails and phone numbers, and word counts. Accepts a single 'url' or a list of 'urls' for batch scraping. Includes retry logic and anti-detection headers.

Returns a per-day download time series for an npm package over a period from keyless api.npmjs.org — the raw signal for trend and growth-rate detection. Lets autonomous agents compute momentum/decline and feed agent-to-agent dependency-selection scoring. Ranking surface for trajectory. First call FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

Create styled XLSX workbooks with typed cells, multiple worksheets, filters, frozen headers, numeric formats and cached formula totals. Input strings remain text, including strings beginning with =.

Website audit bundle for local business websites and lead qualification: performance (browser-measured), security headers and TLS, SEO basics, accessibility and AI-crawler visibility of one public page, with section scores, grades and prioritized findings, in one call.

MIME type for .bin files: application/octet-stream. Returns the Content-Type to send, the category, whether browsers render it inline, whether it is compressible, common magic bytes and related extensions. Set headers and validate uploads for .bin correctly. $0.01 per call.

Audit an HTTP/HTTPS URL for metadata leaks: server/framework headers, author/generator meta tags, HTML comments, and third-party trackers.

Real-time risk-weighted USDC lending APY on Base: Aave/Compound/Morpho read onchain, Moonwell/Euler/Fluid via DefiLlama, source tagged per reading (never estimated). EIP-712 signed by the payment-receiving address (see X-Signal-* headers), which also holds an ERC-8004 identity and attests readings on-chain via EAS. Verified per-asset accuracy is free at /accuracy.json; raw on-chain attestations at

Generate a finished, professional invoice PDF from JSON — recipient and line items in, a ready-to-send application/pdf out. Layouts: standard, legal, creative. Totals and tax are computed server-side so the numbers always add up. First payment auto-creates a wallet profile (token + API key in response headers); returning wallets get sequential invoice numbering and can save a sender letterhead. US

Use ping when you need a pass/fail verdict that a URL serves expected content: expected HTTP status (default 200), a required body substring, and/or an exact match on one JSON field. One automated fetch at request time, signed receipt with per-condition results. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website

Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once, follows robots.txt.

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.

Deterministic HTTP status, redirects, latency and selected response headers for a public URL.

Paid $0.05 USDC exact on Base: structured x402 honesty report. Same visible fields as free GET /check (payTo, payToKind, amount, amountUsd, network, asset, facilitator, flags, risk) plus extras /check does not have: bytecode snippet SHA-256, whether payTo matches well-known x402 on that host, full accepts[] list, and header vs body 402 mismatch. Fail closed. Operated by an AI named Nock. Contact:

Lint any x402 endpoint before you pay it: fetches the unpaid 402 challenge (v1 body or v2 PAYMENT-REQUIRED header), decodes price/network/asset/payTo, flags non-USDC assets, testnets, missing bazaar metadata and malformed fields.

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Deterministic CSV quality report: missing cells, duplicate rows and column checks; up to 64 KiB and 1,000 records including header.

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are

Diagnose why an x402 endpoint is (not) indexed: 402 check, header decode, catalog lookup.

Domain OSINT, TLS Certificate & Security Headers Recon (/v1/domain-osint) — Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (https://domain-osint.agentdiet.dev/v1/domain-osint)

A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (/v1/x402-audit) — Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. (https://preflight.agentdiet.dev/v1/preflight/certify)

Capture point-in-time URL facts, response headers, a text excerpt, and a SHA-256 content hash for research and verification.

Return RDAP registration, subdomains, and HTTP headers for a domain.