← All headings
Security & risk checks
2,882 listings from 1,079 providers, 2,382 answering · counted
Filed by addrbook from the words in each listing, so a heading says what a listing claims to be for.
Showing 351–375, one row per provider, those answering first · names and descriptions as their source publishes them
- x402.tokenizen.nl/api/vuln-searchx402.tokenizen.nltokenizen vulnerability pattern search, 1032 exact-reconciled findings from 10 Sherlock contestsLivechecked Evidence 1/4x402x402 Bazaar8 payers1 more from tokenizen.nl
- Verdix Address Risk (lite)api.verdixapi.comVerdix lite ($0.01): call before an agent sends funds to an unfamiliar address on Base or Ethereum (chain=ethereum). Checks OFAC, known scam/phishing addresses (GoPlus), address poisoning and burn addresses; phishing tokens and flagged deployers on Base only. Ethereum poisoning data is a daily scan, not live. Clean = no_known_risk, never safe; for safe use /risk/address/quick.Livechecked Evidence 1/4x402x402 Bazaar8 payers2 more from verdixapi.com
- Agentic Honeypotagentichoneypot.comLatest US Treasury securities auction results as clean JSONLivechecked Evidence 1/4x402x402 Bazaar8 payers
- vrsaiapi.vrsai.techCheck an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdrawal/deprecation, and verified provenance evidence. Returns ALLOW, REVIEW, BLOCK, or UNKNOWN with machine-readable reasons.Livechecked Evidence 1/4x402x402 Bazaar8 payers
- DNS / Email Security Auditx402-hono-api.inraby.workers.devDNS email security audit — SPF, DMARC, DKIM, BIMI, and MTA-STS check for domain spoofing and deliverability risk. Agent-friendly dns email security screen at micropayment pricing.Livechecked Evidence 1/4x402x402 Bazaar8 payers1 more from inraby.workers.dev
- Otto AIx402.ottoai.servicesToken security scanner — is this token safe to buy? Honeypot, rug-pull, and scam detection for any token contract — flags can't-sell traps, hidden mints, malicious buy/sell taxes, and holder concentration. Powered by GoPlus across 8 chains.Livechecked Evidence 1/4x402x402 Bazaar7 payers1 more from ottoai.services
- pkg-oraclemcp-snowy-dew-9447.fly.devChecks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.Livechecked Evidence 1/4x402x402 Bazaar7 payers
- Exa-Compatible Page Contentsagent-search.centorprat.workers.devDrop-in Exa-compatible contents: send urls (or ids) and text / highlights options exactly as for Exa /contents and get results with id, url, title, author, publishedDate, text and highlights plus per-URL statuses, as clean markdown with a prompt-injection verdict. Up to 10 URLs for $0.004. Not affiliated with Exa.Livechecked Evidence 1/4x402x402 Bazaar7 payers14 more from centorprat.workers.dev
- billitright.co/run-transport_securitybillitright.coPassword - CASA Cybersecurity Assessment - Consolidates evidence on secure communications, including certificate validity, hostname matching, protocol and cipher strength, forward secrecy, and TLS vulnerabilities. It determines whether the service uses a secure, authentic, and correctly configured transport channel.Livechecked Evidence 1/4x402x402 Bazaar7 payers
- SWARMswarm-agent.netSWARM Site Check - Website uptime and link check in one call: is a URL up, its HTTP status, final URL after redirects, response time and TLS/certificate errors. Use when an agent monitors sites on a schedule, verifies a link or domain is reachable before scraping or citing it, or needs to detect a non-200 answer or a broken redirect. Requires `url`. Instant, no AI. $0.002.Livechecked Evidence 1/4x402x402 Bazaar6 payers
- pkgsafe.adrwent.fyi/checkpkgsafe.adrwent.fyiCall before installing or updating an npm or PyPI dependency. Returns a verdict (ok, caution, avoid, unknown) plus evidence signals: install script added, maintainer or publisher change, very recent publish, build provenance dropped, known malware and vulnerability advisories. A clean result is not a guarantee of safety.Livechecked Evidence 1/4x402x402 Bazaar6 payers
- nbx4nbx4.devAnalyze a Base Mainnet token contract: block-pinned owner(), ERC-1967 proxy slots, ERC-20 metadata, code hash, best-effort source match and prior-snapshot comparison when available. Free POST /v1/prepare returns report_id; paid GET /v1/report reads it for 0.01 USDC via x402. Not a security audit.Livechecked Evidence 1/4x402x402 Bazaar6 payers1 more from nbx4.dev
- datastand.dev/api/bazaar/cheapestdatastand.devCost-optimised endpoint selection: name a capability (web search, token safety, enrichment) and get the x402 endpoints that provide it ranked cheapest-first in USDC per call, with adoption stats. Refreshed daily from the Bazaar discovery index. The corpus is the most-used slice of the Bazaar, so read `price_floor_complete` and `corpus.cutoff` for whether the price floor you get is the Bazaar's or only ours — both are free on the catalog listing.Livechecked Evidence 1/4x402x402 Bazaar6 payers1 more from datastand.dev
- Safe Readx402-preflight-grokbot.netlify.appSafe Read: read a webpage (URL to clean text) with a prompt injection scan. Fetch one public web page and get its clean main text, title, metadata, a sha256 content hash, and prompt-injection warnings with a 0-100 risk score (visible text, hidden elements, HTML comments, alt/meta attributes, invisible Unicode, base64). SSRF-guarded: DNS-checked and pinned public addresses only, 4 redirects max, 2 MB, 8 s, text/html and text/plain only. Errors are not charged.Livechecked Evidence 1/4x402x402 Bazaar6 payers
- x402-v2-mint-token-risk.vercel.app/v1/token-riskx402-v2-mint-token-risk.vercel.appRead-only Base ERC-20 risk heuristics (honeypot/tax/liquidity/ownership). Data only, not advice. Free public Base RPCs. No charge on empty/failed. Port of amp token-risk.Livechecked Evidence 1/4x402x402 Bazaar6 payers
- Extendivo SafeFetchapi.extendivo.comFetch and extract clean text from public HTTP/HTTPS URLs for AI agents, with SSRF protection, redirect revalidation, and prompt-injection risk signals.Livechecked Evidence 1/4x402x402 Bazaar6 payers1 more from extendivo.com
- presign-guardpresign-guard.fizzl.euHoneypot and rug pull check for a token: is it safe to buy? Checks a Solana or EVM token before you buy, hold or accept it (mint or freeze authority still active, LP not locked, buy/sell tax, low liquidity, brand-new token, concentrated holders) and answers green/orange/red with a grade (SAFE/CAUTION/RISKY/AVOID), the reasons, a one-line summary and market data. Bulk: 100 checks for $0.80 via /v1/credits.Livechecked Evidence 1/4x402x402 Bazaar5 payers2 more from fizzl.eu
- Sift Web Toolssift.srv1996466.hstgr.cloudToken safety check: risk score, liquidity, supply held by owner and pools, upgrade, mint and blacklist powers. Check a token before trading it (Base, Ethereum, Arbitrum, Optimism, Polygon). Reads the contract from the chain: proxy, mint, blacklist, pause, fee and trading switches, owner. On Base and Ethereum also finds Uniswap v3 and Aerodrome pools, estimates liquidity in dollars and shows supply held by pools, owner and burned. 0-100 risk score with plain-English flags.Livechecked Evidence 1/4x402x402 Bazaar5 payers2 more from srv1996466.hstgr.cloud
- threat-feedx402-store.dgdb.workers.devLive feed of freshly-detected malicious addresses on Base — address-poisoning seeders caught via zero-value transfer sprays, updated continuously by our on-chain collector. Poll ?since=<unix> to ingest only new threats into your agent's blocklist. Deterministic, evidence-backed, machine-readable.Livechecked Evidence 1/4x402x402 Bazaar5 payers
- Quant Agent Shopquantagentshop.comOn-page SEO audit of one URL: redirects, title and description lengths, canonical, robots meta and robots.txt for Googlebot, GPTBot and ClaudeBot, hreflang, headings, image alt, links, Open Graph, JSON-LD, sitemap, security headers with a grade, and a list of issues. Use to check a page before or after publishing. Reads the first 300 KB; no JavaScript rendering. Social networks are refused. Typical response 1 to 3 s. Failed calls are not charged.Livechecked Evidence 1/4x402x402 Bazaar5 payers
- CVE Vulnerability Lookupagentsvc.ioLook up a vulnerability by CVE or GHSA id (NVD: description, CVSS score and vector, CWE, CISA known-exploited flag; OSV: affected packages and fixed versions) or check a package version for known vulnerabilities via OSV.dev (npm, PyPI, Maven, Go, crates.io, RubyGems, NuGet, Packagist, Debian ...). Params: cve_id, or package + ecosystem (+ version, recommended), limit (default 20).Livechecked Evidence 1/4x402x402 Bazaar5 payers9 more from agentsvc.io
- Payment-Injection Screenseenly-injection-screen.vercel.appPayment-Injection Screen by Agentropolis: send text your agent is about to act on (tool result, web page, email, file). Flags payment-looking instructions: pay/transfer requests, fake licence or refundable fees, swapped wallets, token approvals, seed-phrase asks, hidden text. Returns clean/caution/likely_payment_injection with evidence. Advisory only. Free allowance: 5 calls/day per client network with no payment: add header "X-Free-Allowance: use" (or ?free=1) to a valid request.Livechecked Evidence 1/4x402x402 Bazaar5 payers
- audit-site-web.pga-agent.fr/api/base-token-safetyaudit-site-web.pga-agent.frTechnical resale check for a Base token address: purchase then resale simulated on its main pool, measured purchase/sale tax, LP burned or locked, top-10 holder share, owner powers (mint, pause, blacklist, proxy), age. Raw facts with severity tags only. Not investment advice.Livechecked Evidence 1/4x402x402 Bazaar5 payers
- CodePulsecodepulse.waltsoft.netPackage security scanner — CVEs, license check, typosquat detection.Livechecked Evidence 1/4x402x402 Bazaar5 payers1 more from waltsoft.net
- api.remix.live/mcp/x402-http/get_audit_checklistapi.remix.liveAI-powered smart contract audit checklist matching - analyzes contract code and returns relevant security checklist items. Returns immediately (202 Accepted) with a polling URL. Poll GET {jobStatusUrl} every 5-10 seconds until status is 'completed'. Estimated time: ~90 seconds. PRICING (based on model): DeepSeek: $0.05 USDC, Sonnet: $0.15 USDC, Fable: $0.30 USDC. Payment must match selected model.Livechecked Evidence 1/4x402x402 Bazaar5 payers1 more from remix.live