All projects matching “security”

Fast deterministic security triage of one prompt, skill, or public URL.

Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.

An agent-only messaging network. Agents register with an Ed25519 key and talk in public rooms and end-to-end encrypted private rooms and DMs. POST /v2/lookup finds agents by id, handle, name or query; POST /v2/rooms searches the public room directory by name or topic, no identity needed; POST /v2/sync publishes signed events. Auth rides in the body. Pay per request in USDC; no account, no API key.

Key indicators of any country: GDP, real growth, GDP per capita, inflation, population, unemployment, public debt, exports, life expectancy and internet use, with the last years of each. World Bank open data.

Economic data / macro indicators for any country, live: GDP, growth, GDP per capita, inflation (CPI), unemployment, population, interest rates, exchange rate, debt, trade, FDI or any World Bank indicator code. Annual for 200+ economies from the World Bank; monthly EU inflation and unemployment from Eurostat. Returns the series, latest and previous values, the change and the source's update stamp.

Fetch any public web page and return its main readable content as clean Markdown or plain text plus metadata (title), stripping nav/ads/boilerplate (trafilatura). Optional JS rendering via headless browser for SPAs; markdown or text output. Robots-respecting, public content only — the reader/scraper building block for RAG and agent pipelines.

Use before an agent buys or swaps into a Base token: token-risk, sellability (honeypot, tax), swap route and price impact for your size, and deployer reputation in one GO/HOLD/STOP verdict with a receipt. GO only when every check ran clean; an outage is HOLD. Coinbase tokenized stocks get stock checks (transfer policy, wallet eligibility, premium vs reference). GO/HOLD return `enforce`: a Cobalt c

US Treasury par yield curve from 1 month to 30 years (percent) for the latest day or any date since 1990, with 10y-2y and 10y-3m spreads, inversion flag and up to 60 days of history. Use for risk-free rates, discounting, macro analysis or answering where 10-year yields are.

On-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt text, internal and external links, word count. Returns each check with its value and pass or fail. No Core Web Vitals, backlinks or keyword volumes.

Search a live public Shopify storefront and return current public products, variants, prices, availability, images, and declared agent-commerce capabilities.

Speech-to-text API (audio transcription) for AI agents. Send MP3, WAV, M4A or OGG/Opus (body, audio_url or base64, up to 30 min); get transcript, language, timestamped segments, optional SRT/VTT; task=translate gives English. $0.003 per audio minute, rounded up; the 402 quotes your file's exact total. Search intents: speech to text api, transcribe audio file, mp3 to text, wav to text, pay per minu

VAPE rug_pull_alert — Owner-power / rug-risk flags (mint, blacklist, pausable transfers, LP concentration). Real on-chain/market data, no simulation.

Repariert die typischen Fehler aus Sprachmodell-Ausgaben und Fremdsystemen: Markdown-Zaun, haengende Kommas, einfache Anfuehrungszeichen, unquotierte Schluessel, Kommentare, typografische Anfuehrungszeichen, unsichtbare Zeichen, fehlende Klammern, NaN und Infinity. Liefert das geparste Objekt und ein Protokoll jeder einzelnen Reparatur.

Applies a transparent heuristic: cycle fade scales with equivalent full cycles and depth-of-discharge exponent; calendar fade scales with square-root time and a temperature factor. Coefficients are caller supplied or declared defaults. This is not cell-chemistry validation, warranty advice or a safety prognosis.

URL safety verdict: follows the redirect chain, detects homograph and punycode hostname tricks, and cross-references the destination host against the URLhaus threat feed. Returns safe, suspicious or malicious with reasons. Single-URL scope; domain-wide grading is /sitegrade and registration facts are /domain-intel.

Prompt-injection screen for text or a web page an agent is about to read: finds instruction overrides (many languages and obfuscated spellings), fake system or role markers, jailbreak personas, data-exfiltration links, requests for keys or seed phrases, tool, shell, or payment hijacks, and hidden content (invisible Unicode smuggling, zero-width and bidi characters, HTML comments, hidden elements,

Search functions or classes by meaning and by keyword. ``mode=bm25`` ranks by lexical match, ``mode=vector`` by embedding similarity to the query text, and ``mode=hybrid`` (default) fuses both rankings with reciprocal rank fusion. Returns up to ``top_k`` matches with their repository, file path and score; the ``domain``, ``ontology_concept_uri``, ``confidence_min`` and ``has_tests`` filters apply

Searches repository names and properties. Returns a paginated envelope with items, total, page, page_size, and total_pages, sorted by composite score.

Compact financial statements from SEC XBRL company facts: about 40 standard us-gaap and dei line items (revenue, net income, EPS, cash, debt, shares...), one value per calendar period, last 10 years and 12 quarters, fiscal Q4 derived. A tag a company stopped using ends in that year.

Change detection for anything with a URL, built for monitoring loops: probe one x402 resource or web page WITHOUT paying it and answer BASELINE, UNCHANGED, or CHANGED with a field-by-field diff (price, asset, payTo, schema, page body) against the last check for that watch. Use this when an agent runs on a schedule and needs to know what changed before spending money or attention. Watch and pack st

Is this x402 API trustworthy? Body {url}. Returns its latest Kertivo Index endpoint trust score/grade (A, B, F, C-never-live, C-went-dark, or ungraded) and run date, plus evidence from a real paid test call: 402 status, price, payTo, settlement tx, on-chain check, HTTP status after paying, latency, schema and delivery result. Not in the index: status not_indexed. Also a public claims tally (buyer-

npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk.

Datakoot Economy Intel: Get a snapshot of a country's key macro indicators (latest available values): GDP, GDP per capita, GDP growth, inflation, unemployment, and population. $0.01 USDC per call, charged only on success.

Real-time pre-trade signal: a probability snapshot of Hyperliquid's HIP-4 prediction markets - crypto price binaries, sports outcomes, tournament winners, Fed rate decisions, and more. Fields are parsed verbatim from Hyperliquid, so new market types appear automatically. Optional template/underlying filters narrow the result; limit caps rows (max 500). Subscribe to webhook alerts via GET /v1/predi

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

Call before buying or swapping into any Base token. Simulates a real buy and sell in its deepest pool (honeypot, buy/sell tax, round-trip loss), reads owner powers (mint, pause, blacklist, tax, proxy), liquidity, age and holder concentration. Returns SAFE / CAUTION / DANGER / SCAM with every risk explained. Failed checks are not charged.

0-100 safety score with components (protocol trust, TVL depth, audits, track record), observed and risk-adjusted APR, and whether STB's Auto-Defense would exit — for every vetted stablecoin vault, or one by ?venue=<id|pool address>.

Check a Ethereum wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDT, WETH, DAI...) to common spenders (Permit2, Uniswap Universal Router v4, Uniswap Universal Router, Uniswap SwapRouter02...); flags unlimited approvals.

Use when an agent is about to pay an x402 endpoint, seller domain or wallet it has not used before. Returns ok_to_pay, caution, dont_pay or no_payment_needed with reasons: live payment terms, its Coinbase Bazaar listing and paying wallets in 30 days, whether the live pay-to address matches the listing, real-USDC check, price vs. similar tools, and seller domain age. Read-only: never pays or signs.

Partner tier of the dns.pizza bot observatory: every network (ASN), named crawler, TLS (JA4) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots.