All projects matching “redirect”

Trace an HTTP redirect chain to its final destination without downloading page bodies. Returns every hop (URL + status), the final URL, and safety warnings — link-safety grounding for agents before they visit or cite a URL. Clean JSON.

Give this API a list of up to 10 web addresses and it will visit each one to tell you whether it is working, broken, or redirecting visitors somewhere else. You get back the exact status number (like 200 for OK, 404 for not found, 500 for server error), whether the address redirects, and where it redirects to. Great for finding broken links, verifying website migrations, and running quick SEO audi

Resolve an HTTP or HTTPS URL through redirects and return the complete redirect chain, HTTP status for each hop, final URL, and redirect safety findings. Use when an agent needs to determine where a URL actually leads before visiting, citing, downloading, or trusting it.

Send an HTTP request to any URL from our servers and receive the full response — including the status code, all response headers, and the body content. Supports GET, POST, PUT, PATCH, DELETE, and HEAD. Automatically follows up to 3 redirects. Useful for testing endpoints, verifying servers are responding correctly, debugging redirect chains, or fetching raw data without needing a local setup.

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are

Liveness/latency pre-flight for a URL: is it up, HTTP status and class, response latency in ms, whether it redirects (and where), content-type and server.

Returns the page's readable text plus an Ed25519-signed record (final URL after redirects, fetch time, status, sha256 of the body and of the text) that verifies offline. Charged only for 2xx text pages; refused URLs cost nothing.

URL safety verdict: follows the redirect chain, detects homograph and punycode hostname tricks, and cross-references the destination host against the URLhaus threat feed. Returns safe, suspicious or malicious with reasons. Single-URL scope; domain-wide grading is /sitegrade and registration facts are /domain-intel.

Inspect a public URL: HEAD redirect trace, DNS A/AAAA observations and security headers in one report. At most 4 targets, no page body. Includes timestamps, partial-result warnings and factual findings; no safety or reputation verdict.

URL preflight - status, redirect chain, key headers, response time, robots.txt rules for the path and sitemap location

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Check an x402 endpoint BEFORE paying it. Makes one unpaid request (never sends money), decodes the 402 terms, and verifies: the asset is a real USD stablecoin on that network, the price in USD vs your max_price_usd cap (default $0.50), payTo is a sane address (and matches expected_pay_to if given), HTTPS and certificate validity, redirects, and domain age. Returns safe_to_pay, a risk level, findin

Check any x402 paid endpoint before paying it: does it return a valid 402 challenge, which networks/tokens/prices it accepts (decoded to USD), whether amounts are valid atomic units, payTo sanity, testnet-only offers, missing Bazaar input schema, redirects and latency. Returns a verdict (payable / payable with warnings / broken / unreachable) and the exact problems. Useful for agents choosing betw

Check an unsigned Solana transaction before signing. Send its base64 serialization; malformed input is rejected before payment. We simulate it on mainnet and return ALLOW, WARN or BLOCK with SOL and token balance changes and reasons, including dangerous approvals, owner changes, excessive outflows and redirected swaps. Solana only. The published sample is synthetic and only shows an HTTP 402 quote

Use before spending tokens, money or crawler capacity fetching an unfamiliar web resource. Resolves redirects (manually, bounded, re-validated per hop) and returns deterministic HTTP/resource facts — final URL, status, content type and length, response time, a bounded HTML title/canonical peek, and a lightweight generic-bot robots.txt indication — so an agent can decide whether a normal web fetch

Fetch one public HTTP(S) URL for research, extraction, or agent workflows. Returns the final URL, upstream status, content type, and decoded content. Private, local, metadata, and reserved destinations are blocked; redirects are revalidated and response size and duration are bounded.

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Look up a domain: registration data from RDAP (registrar, created, expires, status, nameservers), live DNS records (A, AAAA, MX, NS, TXT, CNAME), the TLS certificate served at the name (issuer, validity, alternative names, fingerprint), and the HTTP front door (status, server, redirect). One JSON answer, no API key, no rate-limited WHOIS. GET with ?name= or POST. $0.005.

Check a URL before fetching it: is it alive, final URL after redirects, HTTP status, content type, HTML title, and whether robots.txt allows your user-agent. Link checker and fetch preflight for agents.

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Sends a request to a web address you provide and reports back everything the server said in response: the status code, all the response headers, how many times it got redirected, and how long the whole thing took.

Inspect a public HTTPS URL for redirects, metadata, content type, word count, and content hash.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are no

Safe Read: fetch one public web page and get its clean main text, title, metadata, a sha256 content hash, and prompt-injection warnings with a 0-100 risk score (visible text, hidden elements, HTML comments, alt/meta attributes, invisible Unicode, base64). SSRF-guarded: DNS-checked and pinned public addresses only, 4 redirects max, 2 MB, 8 s, text/html and text/plain only. Errors are not charged.

Fetch a public https URL and extract HTML head metadata ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Returns JSON { url, final_url, content_type, title?, description?, canonical?, lang?, open_graph, twitter, warnings }.

Fetch a public https CSV URL and parse it into headers + rows ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects, max 5000 data rows (truncated with warning). Optional has_header (default true). Returns JSON { url, final_url, content_type, headers, rows, row_count, warnings }.

Convert HTML to tidy markdown ($0.005 USDC via x402). Pass html (string) and/or url (public https to fetch). At least one required; if both, prefers html and warns. URL fetches use the same allowlist as WELL-002 (https only — http/file/data/localhost/private IPs rejected; 1 MB body, ~10s timeout, max 5 redirects). Returns JSON { source, url?, final_url?, content_type?, markdown, warnings }.

Convert a public https URL that returns JSON to tidy markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Requires JSON content-type or a parseable JSON body. Returns JSON { url, final_url, content_type, markdown, warnings }.

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website