All projects matching “audit”

4-Protocol MCP Glama 5.0/5.0 TDQS, A2A Card & x402/MPP Schema Compiler (/v1/mcp-compiler) — Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop-in 5.0/5.0 schemas, A2A Agent Cards, and x402/MPP configs. (https://mcp-compiler.agentdiet.dev/v1/mcp-compiler)

DEX Liquidity, Slippage & Orderflow Audit API (/v1/token-intel) — Fetches live DexScreener liquidity pools, FDV, 24h volume, and 1h buy/sell orderflow pressure. (https://token-intel.agentdiet.dev/v1/token-intel)

A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (/v1/x402-audit) — Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. (https://preflight.agentdiet.dev/v1/preflight/certify)

Assay Live Endpoint Security & Schema Auditor: Audits live A2A, MCP, and x402 endpoints for schema conformance, latency, and payment integrity.

Onchain-Risk EVM & Solana Honeypot & Rug Scanner: Audits token contracts across Base, Ethereum, Arbitrum, and Solana for rug-pull vectors.

4-Protocol MCP Glama 5.0/5.0 TDQS, A2A Card & x402/MPP Schema Compiler (/v1/mcp-compiler) — Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop-in 5.0/5.0 schemas, A2A Agent Cards, and x402/MPP configs.

Assay A2A & MCP Pre-Flight Security Audit & TDQS Certification ($0.005 Base USDC)

Run a bounded deterministic preflight scan for possible private keys, secret assignments, permissive CORS, debug mode, insecure HTTP, and invalid JSON. Not a comprehensive security audit.

How the forecast for a symbol has changed over time: direction flips, confidence drift, upside_prob evolution, forecast range revision, and audited accuracy of each revision. Each revision includes market_key (e.g. btc-10m, btc-1h, or null for background scheduler) and timeframes. ?hours=24 (max 168), ?market_key=btc-10m to filter by market, ?limit=144 (max 1000), ?summary=1 for summary-only.

Deterministic FinTech, B2B invoicing, and accounting domain SEO, Core Web Vitals, JSON-LD SoftwareApplication schema & WCAG 2.1 AA audit ($0.05 USDC on Base Mainnet).

Use when you need the list of pages a site publishes (to crawl it, find recent posts, or audit SEO): give a site URL (the sitemap is discovered from robots.txt Sitemap: lines, then /sitemap.xml, /sitemap_index.xml, /wp-sitemap.xml) or a sitemap URL directly. Returns the page URLs with lastmod, changefreq and priority; for a sitemap index, returns its child sitemaps and (expand=true, default) the U

Audit a supplied OpenAPI contract and return prioritized integration fixes.

Checks an agent's JSON output against a JSON Schema (draft 2020-12 keywords: type, properties, required, additionalProperties, items, enum, const, length, pattern, minimum/maximum, item counts). Returns valid yes/no, each error with its path and the value with disallowed fields removed. $ref, allOf/anyOf/oneOf, if/then and format return an error instead of passing silently.

URL safety verdict: follows the redirect chain, detects homograph and punycode hostname tricks, and cross-references the destination host against the URLhaus threat feed. Returns safe, suspicious or malicious with reasons. Single-URL scope; domain-wide grading is /sitegrade and registration facts are /domain-intel.

Phone number intelligence for agents: pass any number and get back whether it is a valid E.164 number, its country, the carrier that holds it, and the line type — mobile, landline, or VoIP. One paid call, no account, no API key. Decide whether a number is worth calling or texting, or flag a VoIP number before you trust it. Free-format numbers are normalized; a syntactically bad number is rejected

FULL token check (BUNDLE): combines GoPlus risk flags (= liquidity-health) + contract/proxy/owner facts (= contract-profile) + Uniswap v3 pools vs WETH/USDC with quote-side liquidity in USD, in a single call. Objective signals, not a verdict. Use this instead of calling liquidity-health and contract-profile separately; use the individual tools only if you need just one aspect.

Virtuals Solana DBC State & Supply Receipt. Virtuals Solana launches only. Returns finalized mint controls, ACTIVE_DBC vault custody, tokens outside the observed DBC vault, platform lifecycle, signature/slot provenance, and token-specific tape coverage. Every result below COMPLETE names its reasons and separates our own instrumentation age from real observation loss. It does not verify circulating

invinoveritas /validate — EdgeProof: is a strategy's edge real or curve-fit noise? Get a verdict (likely_real / borderline / overfit) backed by Deflated Sharpe

Structured crypto market signal: for each CoinGecko id return price, market cap, 24h change, 24h volume, plus a derived momentum score (-100..100), a bullish/neutral/bearish signal, and a volatility flag — enriched data an agent ingests in a trading/research loop without computing it itself. Input: ids (comma-separated).

Dokimo Verify API (GET) - scheme demo: recomputes a sample dokimo-merkle-v1 proof to its root and verifies nothing of yours. For real caller verification, POST /paid/verify with {leaf, proof_path, root, rule_version_commitment} plus summary and binding for a dokimo-anchor-v2 close (recompute + on-chain anchor check). Scheme: /merkle-spec.html.

Use this service before importing or publishing JSON to check it against a restricted draft-07 schema. Send dataJson and schemaJson as JSON-encoded strings. Max 256 KiB UTF-8 each, depth 32; bounded node and work limits. Supports types, required properties, items, enums and numeric/length bounds. No regex, combinators or external references. Invalid business data returns valid=false.

Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.

Smart-contract inspection for any Base token address: which functions exist (mint, pause, blacklist, owner-only), proxy type and admin, verified source, creation block, DEX pool reserves in USD, holder count. Raw facts with sources and timestamps. Information, not investment advice.

Payment receipt and settlement proof for x402 and agent payments, by Liquid Logic X. Input: a Base USDC tx hash (optional memo). Output: JSON proof recorded onchain on Arc mainnet (proofId, from/to/amount, Arc tx, refId) plus a public verify link anyone can check. $0.02 USDC on Base, charged only when a proof is returned. Your paying wallet must be the tx sender or recipient. Liquid Logic X also r

Single-signal check: is this website's pricing machine-readable for AI agents? Detects Offer schema with price/availability and pricing-transparency signals. Returns yes/no plus underlying checks and fixes. Useful for procurement and comparison agents.

Prepaid credit of $0.10 for paid API calls without signing each request. On PageAudit it pays for fix prompts for coding agents at $0.10 each after 3 free units and 30-day plans that check 25, 100 or 300 more pages every day, with a weekly site report, from $3.99. The same token pays the paid APIs of our other products.

Vulnerability scan for a list of packages in one call via OSV.dev: GET ?packages=lodash@4.17.15,pypi:requests==2.19.0,go:github.com/gin-gonic/gin@v1.9.0 (or POST a lockfile). Up to 200 across npm, PyPI, Go, crates.io, Maven and more: per-package advisories, severity, fix versions and upgrade targets; hallucinated and malicious packages flagged. JSON.

Use this service before importing or publishing JSON to check it against a restricted draft-07 schema. Send dataJson and schemaJson as JSON-encoded strings. Max 256 KiB UTF-8 each, depth 32; bounded node and work limits. Supports types, required properties, items, enums and numeric/length bounds. No regex, combinators or external references. Invalid business data returns valid=false.

USE WHEN: An autonomous DeFi agent needs to POST { chain, address } to verify smart contract honeypot traps, owner privileges, and pool liquidity.

x402 services ranked by 30-day on-chain settlement volume, optionally by category.