All projects matching “signatures”

Is this transaction, approval or signature safe to sign? Check it before your AI agent or wallet signs it: pre-sign verdict (green/orange/red + reason codes) for EVM and Solana transactions, token approvals and Permit/Permit2/EIP-3009/Seaport signatures. Screens the spender or recipient wallet for OFAC sanctions and scam, phishing or theft reports, and flags unlimited allowances, plain-wallet spen

Takes a kind 9735 receipt directly or fetches it from relays by event id, then runs eight named checks and reports each one separately with its reason. The receipt signature and the signature of the zap request enclosed in the description tag are verified per BIP-340. The invoice is decoded and its amount is compared against the amount tag of the zap request, since those two can disagree and only

Verify a JSON Web Token's signature and claims against a shared secret (HS*) or a PEM public key (RS/ES/PS). Returns { valid, payload } on success or { valid: false, reason } for a bad signature, expired/not-yet-active token, or a failed issuer/audience/subject check. Pass `algorithms` to pin the accepted signing algorithms and prevent algorithm-confusion attacks.

OSCAL evidence bundle for one obligation: EU AI Act Article 50/53, DORA or EU-CRA. Returns selected card objects with signature fields, any retained inclusion proofs, an OSCAL wrapper and assembly manifest. Does not verify input-card signatures. Reports manifest signing status and any unsigned reason. States: ASSEMBLED or ASSEMBLED-EMPTY; zero selected cards stays zero. Supported-card verification

C2PA verdict attestation Tier A. POST raw asset bytes (max 25MB). Rubric runs Google Credentio validation in-sandbox, anchors the verdict to Hedera with ML-DSA-65 post-quantum signature. Durable proof asset X validated against C2PA Trust List Y at time T. Operated by TenPrint.

Know what drove your returns. Deterministic, no-LLM portfolio attribution: send position start/end values, dated cash flows, and a reporting period; get Modified Dietz and XIRR returns, alpha against BTC, ETH, stETH, or a benchmark you supply prices for, plus per-position contribution. Caller-declared data-quality flags, a calculation hash, and an optional EIP-191 signature support transparent rep

Call after your agent completes an action it may later have to prove: seal the hashes of its input and output (only your action label and meta are published) into GBLIN's signed append-only transparency log and get a portable receipt: Ed25519 signature, RFC 6962 inclusion proof, C2SP signed checkpoint; root anchored daily on Base (EAS). Proves existence and time, not correctness. Free reads and de

One-call Solana wallet profile: SOL and SPL/Token-2022 holdings with USD values (top 25 by value), total USD, recent activity (last 100 signatures: count, failure rate, first/last seen, tx per day), programs used with labels (Jupiter, Raydium, Orca, Pump.fun, Meteora, Drift...), top counterparties from the last 15 transactions, and a simple wallet type (bot-like / trader / holder / inactive). Free

PKCS#10 certificate signing request (CSR) inspector — parse requested identities and public-key metadata, calculate a fingerprint, and check the included self-signature without CA approval claims.

EscrowPulse release: the worker submits proof, the principal approves and the worker is paid. Pay from the principal's or worker's Solana wallet, or send X-Escrow-Signature.

Call any view/pure function with a human-readable signature on Ethereum, Base, Arbitrum, Optimism, Polygon or BSC: decoded result, raw hex, block number, chain id; 422 with revert reason on revert.

Checks whether a signature was made by a claimed EVM address: EIP-191 personal_sign messages, EIP-712 typed data or a raw 32-byte digest, verified by ecrecover for wallets or ERC-1271 isValidSignature for smart-contract wallets (Safe, Coinbase Smart Wallet) on Ethereum, Base, Arbitrum, Optimism or Polygon. Returns validity, method, recovered signer and digest. Free sample: https://onchain-health.m

Timestamp a SHA-256 hash: returns a stored, server-signed receipt (id, hash, label, timestamp, signer, message, signature, verify URL) proving the hash was presented at that time.

Check whether a domain's TLS/SSL certificate is valid, trusted, and not expiring before connecting to it. Performs a live handshake and returns a 0–100 score and tier (VALID/WEAK/EXPIRING/EXPIRED/UNTRUSTED/INVALID) with chain trust, days-to-expiry, signature algorithm, TLS version, and cipher quality. Use before submitting credentials, posting to a webhook, or following a payment link, to catch ex

Give this API any text or binary data and it returns its fingerprint under whichever hash algorithms you choose - SHA-256, SHA-512, MD5, BLAKE2, CRC32 and more. It also signs data with a secret key (HMAC) and safely verifies whether an incoming signature matches, using a timing-safe comparison. Language models cannot hash: they emit a string of the right length and character set that is simply wro

Preflight x402 scam check: endpoint risk before you pay — decoy / zombie / price-trap / never-paid? Trust verdict in ~200ms before PAYMENT-SIGNATURE.

Checkup for x402 buyer clients. Pay once and get a field-by-field diagnosis of the payment your client signed (amount, recipient, validity window, clock offset, nonce, EIP-712 signature) and of the request that arrived, plus the facilitator's verify and settle results. Base mainnet payments get the full diagnosis; Base Sepolia payments get a preview with the status of each check only.

Use the proposal and risk register tools to synthesize a review-ready business proposal. Include supplied scope, deliverables, exclusions, acceptance criteria, dependencies, delivery milestones, explicit missing commercial terms, and a risk/mitigation matrix. Reconcile contradictions between tool drafts. Never invent approved prices, binding legal terms, signatures or commitments. Do not expand su

BotsRated (beta): full measurement history for one seller host: every receipt with timestamp, status, latency, hashes, signatures and tx links. Free sample: /v1/sample/report. First 10 calls per client per UTC day are free. Terms: https://botsrated.com/terms

Signed proof of what a web page said: give a URL, get its text, screenshot and TLS details with a timestamped cryptographic signature anyone can verify.

Checkup for x402 buyer clients. Pay once and get a field-by-field diagnosis of the payment your client signed (amount, recipient, validity window, clock offset, nonce, EIP-712 signature) and of the request that arrived, plus the facilitator's verify and settle results. Base mainnet payments get the full diagnosis; Base Sepolia payments get a preview with the status of each check only.

A registry of token records with a build log. A record is written only by the token's provable controller (on Solana: the pump.fun curve creator or the mint's update authority) and every version carries that ed25519 signature, so a reader verifies against the chain, not a directory. One $0.02 x402 write in USDC on Base, Polygon, Solana or Arc; reads, pages, log and OpenAPI are free.

Use ping when you need a pass/fail verdict that a URL serves expected content: expected HTTP status (default 200), a required body substring, and/or an exact match on one JSON field. One automated fetch at request time, signed receipt with per-condition results. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402

Offline EIP-712 typed data (chain-agnostic, no RPC): domain + types + primaryType + message JSON in, the normalized typed data plus domainSeparator, hashStruct and the final digest (the 32-byte value the wallet signs) out — with an optional signature (0x+65 bytes) it recovers the signer address (ecrecover), confirmed against an optional expectedAddress (recover.ok). Structs nest (arrays of structs

Agent data APIs: web search, page crawl, company enrich, X/Twitter mentions — plus cheap LLM. GET any URL → HTTP 402 USDC Solana. Pay, retry PAYMENT-SIGNATURE, get JSON. search, crawl, enrich, twitter, inference. Models: openrouter/free $0.001, google/gemma-4-31b-it:free $0.001, google/gemma-4-26b-a4b-it:free $0.001, n

Decode a BOLT11 Lightning invoice: network, amount, timestamp, expiry, expired flag, payment_hash, description, payee + payee pubkey recovered from the signature. GET ?i=<invoice>

Mandato AR Intent Mandate scope (SKU#19) — verify allowlist+budget+expiry+signature. Does not create or sign.

Detects the technology stack of any public website from one page load plus public DNS: CMS, ecommerce platform, JS framework, web server, CDN/hosting, analytics, ad pixels, chat, payments, consent, plus email provider, email-sending services, DNS host and verified SaaS (MX/NS/TXT). Each hit has categories, version when exposed, confidence 0-100 and evidence. 266 signatures.

JSON canonicalization — canonicalize structured data with RFC 8785 JCS; return canonical JSON text, UTF-8 byte length, and SHA-256 hash for integrity checks, signature preparation, and deduplication. Includes an EIP-712 signed attestation. Use when an agent needs an idempotency key, cache key, dedup hash, or verifiable commitment. $0.002 per call. Free verification at POST /v1/verify.

Commit a SIGNED live call: an ed25519-signed prediction (yes/no) on an OPEN Polymarket market, chain-linked (prev_hash) and content-addressed (sha256). Refuses resolved/closed markets — the signature must precede the outcome. Tamper-evident by construction; verify free at GET /verify. Body: {condition_id, side: yes|no, size_usd?, note?}.