All projects matching “audit”

Audit text for malicious AI-skill patterns. Requires `content`. Nothing to audit — crawling, or discovering this endpoint cold? POST /audit/registry runs the same scanner over the newest servers in the official MCP registry: no input required, $0.005.

DJZS adversarial logic audit of a prediction-market trade intent. Deterministic verdict (PASS/WAIT/FAIL) with risk score, defect flags, verdict_hash, and on-chain Proof-of-Logic receipt. Out-of-scope requests are refused WITHOUT CHARGE. Audit, not advice.

Audits the JSON-LD structured data on one public web page: P1 for no schema or missing required properties, P2 for a low rich-result score, each with the properties to add. Call it when a page is missing rich results in Google or before publishing a page that should earn them. Input: url. Returns in seconds. Errors: 400 invalid input, 502 audit failed, 504 timed out. You are not charged for an err

Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI package lists (up to 50 packages). Per dependency: latest version and publish date, whether your pin is behind, license, deprecation or yanked status, weekly npm downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic, no

Is this API safe to pay? Audit any x402 merchant or paid endpoint BEFORE you send money. Answers whether a service is trustworthy, whether it is a scam or dead, and whether it will actually deliver. Probes the live endpoint for a valid HTTP 402 challenge, detects price drift between the advertised price and the real challenge price, pulls settlement history and unique-buyer counts, and verifies on

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

x402 seller + agent-readiness audit of one origin: live 402 challenge per paid route (up to 5), price vs catalog, HEAD/garbage-header safety, llms.txt, /.well-known/x402, openapi.json, dead doc links. Read-only.

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Publisher discovery repair plan fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.

AI and search visibility check for any live URL. Loads the page as Googlebot, Bingbot, OAI-SearchBot, PerplexityBot, GPTBot, ClaudeBot, CCBot and a browser, and flags JSON, empty or blocked pages served to crawlers. Checks robots.txt per bot, sitemap, llms.txt, noindex, text visible without JavaScript, tags, and how many pages Google shows. Returns the top 3 fixes in plain words.

Analyze French or English marketing and interface copy. Returns a clarity score, repetition data, sentence metrics, CTA detection and concrete fixes.

Fetch any public URL and report whether its HTTP 402 challenge is a schema-valid x402 v2 PaymentRequired, payable in Base USDC, and catalog-ready (bazaar discovery declaration + facilitator support).

Coding Agent GitHub Repo, Dependency & License Security Auditor (/v1/github-audit) — Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.

Coding Agent GitHub Repo, Dependency & License Security Auditor (/v1/github-audit) — Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (https://github-audit.agentdiet.dev/v1/github-audit)

Coding Agent GitHub Repo, Dependency & License Security Auditor (/v1/github-audit) — Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

SEO and AEO website audit. Returns an audit ID and status URL while processing, then a report URL when completed. Check status approximately every 30 seconds.

Full audit: Semgrep + ESLint + Bandit + npm audit (if packageJson provided).

Audited AMERICAS exchange holiday calendars (9 venues): trading weeks, full-day closures, audit horizons, operator sources, provenance manifest.

GitHub-Audit Repository Supply-Chain & Dependency Scanner: Audits open-source repositories for supply-chain risks, CVEs, and secret leaks.

Domain overview: estimate a domain's Google SEO footprint — total organic and paid keywords, estimated traffic (ETV), traffic cost, and how many keywords rank in the top 3, top 10 and top 100. Fast website and domain SEO traffic overview and audit. Unknown domain returns found=false.

On-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt text, internal and external links, word count. Returns each check with its value and pass or fail. No Core Web Vitals, backlinks or keyword volumes.

Use when an agent is about to pay another agent and needs one finished answer first: should you pay this payee? PayCheck ($0.50) runs Flow's whole checker stack on the payee — payee verdict (kind, activity, contract safety), wallet approval-exposure audit, and recent USDC settlement history on Base — returning one grade (ALLOW / REVIEW / BLOCK, 0-100), a verify_status, all checks, the evidence, an

Token safety check for an ERC-20 on Base: is this token a scam, a honeypot, or safe to hold? Examines ownership and mint authority, proxy upgradeability, liquidity and holder concentration, transfer-restriction patterns. Returns hold/caution/avoid with a score and the signals behind it. Heuristic static analysis, not a security audit — a proxy contract can change its implementation after this chec

Complete AI-powered smart contract security audit - analyzes code against checklist and provides detailed findings with severity levels. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} every 5-10 seconds until status is 'completed'. Estimated time: ~120 seconds. PRICING (based on model): DeepSeek: $0.15 USDC, Sonnet: $0.25 USDC, Fable: $0.70 USDC. Payment must match

Get the verified Solidity/Vyper source code for a deployed contract by address, sourced from Sourcify. Returns every source file (path + content), the contract name, language, compiler version and compiler settings (optimizer, evmVersion) — the full human-readable source an agent needs to read, audit or feed to an LLM. Supports Ethereum, Base, Arbitrum, Optimism, Polygon. Unverified contracts retu

MIDAX402: Evidence+ x402 intelligence with expanded corpus retrieval, local risk brief, contradiction scan and concrete action plan. We do not grade our own answer: the verdict is answered or needs_more_data (grounded in the corpus or not); evidence_grade (thin/moderate/broad) grades that evidence, auditable via retrieved_corpus_ids. confidence_score is DEPRECATED, still served as a band projectio

Live call volume and revenue analytics across all WorxAI x402 endpoints — total settled calls, USDC revenue, page/AI-visitor traffic, and a per-endpoint breakdown. Useful for agents benchmarking or auditing this API before committing to a larger dataset purchase. Analytics access costs $0.035 per delivered row per successful call.