All projects matching “scanned”

MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IMPORTANT tags, conceal-from-user, secret or side-channel asks, invisible Unicode, tool shadowing, payment injection). Fingerprints every tool (sha256) and diffs vs your last scan to

SEO and AEO website audit. Returns an audit ID and status URL while processing, then a report URL when completed. Check status approximately every 30 seconds.

Get YOUR x402 endpoint listed in this Bazaar - done for you, $99 one-time. You receive a deploy-ready x402 v2 kit generated for your stack (Next.js, Express, serverless; PHP via a free serverless function) with your wallet, price and discovery declaration baked in, plus a resumable listing_key that drives the automated pipeline via MCP (https://mudko.com/api/mcp): validate against Coinbase's own p

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findin

GitHub-Audit Repository Supply-Chain & Dependency Scanner: Audits open-source repositories for supply-chain risks, CVEs, and secret leaks.

Paid ($0.05). ALWAYS runs a fresh 25-check scan of the origin (non-settling GET/HEAD + benign empty-POST probes), bypassing the 24h cache — use free GET /v1/report to read the cached result. Concurrent requests for the same origin join the in-flight scan rather than double-scanning. Returns grade, score, per-check status + evidence + fix instructions, and a shareable report URL. Unreachable/broken

Pay-per-scan AI agent-readability scan. POST { "url": "https://…" } with an X-PAYMENT header to run a scan with no account or subscription. Two tiers: $0.02 (25 pages) and $0.25 (250 pages), USDC on Base.

Fast real-time news scan across 44+ curated domains (configs/search_domain_profiles.json), every item source-attributed. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The quick-scan tier below research.topic-deep-researcher's slow... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-bui

IP threat intelligence from first-party honeypot observations (not scraped blocklists): was this IP seen scanning, brute-forcing or probing a live honeypot, which traps it triggered (credential stuffing, webshell, exploit scans, scrapers), bot category and confidence. Works for IPv4 and IPv6.

Risk scan for one Solana SPL token. Call it before buying, listing, accepting or recommending a token you have not vetted. Checks mint and freeze authority, holder concentration, liquidity and wash volume; pro also traces holder wallets for bot farms, shared funders and launch snipers. Returns NO_FLAGS, WATCH or RISKY with an AI summary. basic $0.02, pro $0.05. Scans that fail or have bad input ar

Energy and climate compliance regulation scan across a curated 14-regulation database, with jurisdiction, urgency, and effective-date signals, including California SB 253 and SB 261 status. The scan step pairs with Viridis GHG inventory, sustainability disclosure, and clean-energy tax-credit engines.

Pre-share leak check ($0.005 USDC via x402). Scan text or an https text URL for your own terms (plain list, or salted-hash list sent per call, never stored) plus leak-shaped strings: emails, coordinates, IPs, AWS/GitHub/Slack/sk- keys, private keys, JWTs. Binary URLs are listed as unscanned. Max 10 MB, https only. Returns JSON hits with line numbers. A clean scan is not a clearance.

Live whale flow: USDC transfers ≥ $5M on Base with labeled counterparties — scanned continuously (freshness follows the RPC provider's limits; the response always states the block scanned to).

Ask a sports betting price question in plain English and get an answer from The Odds Gap's own scans of US sportsbooks and prediction-market exchanges: where a bet pays the most, a hedge, a parlay price, or a game's board. Each answer gives the time of the scan and a link to the matching page on theoddsgap.com. Information only: it places no bets and gives no picks. 21+. Gambling problem? Call 1-8

Base token safety snapshot: heuristic on-chain scan of an ERC-20 on Base (bytecode/proxy check, ERC-20 metadata, risky-function selector scan, owner/renounce check, Uniswap v3 / Aerodrome pool + liquidity discovery, best-effort sell simulation). Public RPC data only. Heuristic, not financial advice.

Web page to markdown (read URL as clean text) for LLM agents: main content only (no nav, cookie banners, ads), with title, description, author, dates, language, headings, internal/external links and JSON-LD types, PLUS a prompt-injection scan of the page (visible text, hidden HTML, comments, invisible Unicode) so your agent knows whether the content tries to give it orders. Fetched from Cloudflare

Crypto funding-rate extremes screener: scans all 17 perpetual futures markets (BTC/ETH/SOL/BNB/XRP/DOGE/ADA/AVAX/LINK/DOT/LTC/TRX/BCH/ATOM/NEAR/APT/HYPE). Uses z-score (30-day baseline) to identify statistically extreme funding: |z|≥2 = extreme, |z|≥3 = critical. Returns only assets clearing the threshold. Real-time from Kronos market_signals (OKX data). Pay-per-call via x402.

Identify the courier behind a tracking number (UPS, FedEx, USPS, DHL Express, DPD, Royal Mail and other national posts) from its format, check the check digit where the carrier publishes one, and return the carrier's official tracking link. Several carriers can match the same pattern; each candidate says whether its check digit passed. It does not read live scan events (carriers serve them only th

Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic wallet can actually transfer() the token. Returns risk_score (0-100) + verdict (clear/review/block) + huma

Token risk verdict (age, liquidity, contract checks, suspicious-transfer scan) with per-claim evidence. x402-paid.

Paid ($0.01 USDC via x402). Top trending GitHub repos from the latest daily scan, sorted by stars — description, language, topics, license, forks, author followers, and README excerpt. Filterable by programming language. Response carries the scanDate provenance. Compute-first / settle-after — you are never charged for an error.

Scan text or a public page for prompt injection before your agent reads it: overrides, fake roles, exfiltration, tool abuse, payment asks, invisible Unicode/HTML-hidden instructions, base64. Rule-based evidence, signed and logged.

BNB Smart Chain: Full smart-contract security scan of an ERC-20 token: honeypot, buy/sell/transfer tax, mintable, proxy, hidden owner, self-destruct, pausable, blacklist/whitelist, tax-modifiable, owner and creator share, creator's past honeypots, CEX/DEX listings. GoPlus + honeypot.is simulation merged in one JSON. $0.02 per call.

MIDAX402: Evidence+ x402 intelligence with expanded corpus retrieval, local risk brief, contradiction scan and concrete action plan. We do not grade our own answer: the verdict is answered or needs_more_data (grounded in the corpus or not); evidence_grade (thin/moderate/broad) grades that evidence, auditable via retrieved_corpus_ids. confidence_score is DEPRECATED, still served as a band projectio

Is your x402 service still listed? The Bazaar removes resources that go without settlement, and no one tells you. We keep a daily snapshot of the whole catalog since June, so we can show whether your domain is present today, how its resource count moved day by day, and how long since each resource was last paid for. In our latest scan 620 of 2,147 domains are no longer present. Measured from our o

New pair scan seconds after launch: Uniswap v4 pools read straight off Base before any indexer has them - the launched token address, whether anyone has funded it yet, and whether its hook is a launchpad's or bespoke code shipped with this token

Observe public DNS, TLS and baseline response headers through HTTPS HEAD / on port443; no full-path scan or global trust assessment.

Liquidity pool data for agents scanning yield opportunities: TVL, APY, volume, and IL risk for the top 500 DeFi pools, filterable by protocol/chain/token, refreshed every 15 minutes. Category: data.

What can the owner of this Base contract do? Returns the admin selectors found and how many were not scanned. targetAddress required. Answered inline, no polling, with the Base block and hash it was read at. A first read of an address can take up to 60s: keep the connection open. Valid 600s. Payment implies a request for immediate execution. Terms (0x2134019c6388d3c598b4e33a69416a364cccccea4735ebc

Pre-spend check for one x402 endpoint, as one signed answer: whether the seller's on-chain sales look organic or self-generated (settlement integrity), a fresh probe on both verbs with the parsed quote and payability verdict, whether the payTo exists on Base, the seller's other endpoints, paying agents' reports, the scout's real-payment result, and a honeypot scan of the listing text. Returns reco