npm package risk x402 REST
npm package risk report for coding agents: registry metadata, weekly downloads, license, repository, deprecation and install script risk signals.
relay402.georgespring.workers.dev · 29 listed services · provider site
npm package risk report for coding agents: registry metadata, weekly downloads, license, repository, deprecation and install script risk signals.
public GitHub repository health check: archived status, recency, license, stars, forks, issues and risk flags for dependency or vendor review.
deployment configuration risk scan for YAML, Docker Compose or Kubernetes snippets: flags privileged containers, latest tags, host networking and plaintext secrets.
database migration risk scan for SQL migrations: flags destructive statements, unbounded updates and risky NOT NULL column additions.
Screens a person or entity name against US OFAC sanctions lists: SDN (Specially Designated Nationals incl. aliases) and the Consolidated non-SDN list, refreshed daily from official Treasury sources. Returns match candida...
Checks whether a given user agent may fetch a given path on a host, per the site's robots.txt (specific-agent groups, wildcard rules, Allow/Disallow longest-match). Also returns crawl-delay, sitemap URLs and whether the...
Official public holidays for any of 110+ countries and a given year: date, English and local name, nationwide flag and holiday type. For scheduling, logistics, payroll and commerce agents planning around non-working days...
Resolves an EAN/UPC/GTIN barcode (8-14 digits) to product data: name, brands, quantity, categories, Nutri-Score and image, from the Open Food Facts database (3M+ products, ODbL). For commerce, inventory and shopping agen...
Known-vulnerability check for a software dependency before installing it: queries the OSV.dev database (Google Open Source Vulnerabilities) for npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet or Packagist packages. Retu...
Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no...
repository health brief from a GitHub repo slug or pasted repository notes, returning concise risk flags for agent planning.
composed email trust report from MX, SPF and DMARC DNS records for outreach, onboarding and anti-spoofing agents.
composed domain threat report from DNS infrastructure signals and high-abuse TLD heuristics for agent browsing decisions.
prelaunch audit for an agent spec or checklist: flags obvious launch risks around secrets, unsafe tools, missing evals and rate limits.
Current job openings for a given company: titles, locations, departments, posting dates, application URLs. Sourced from the company's official careers system (Greenhouse). Input: company board token (e.g. 'anthropic').
trace brief for agent runs: scans trace JSON or log text for failures, timeouts and auth/payment errors and returns a compact risk report.
diff scan for planned tool calls: compares before and after snippets and flags destructive, network or secret-related actions.
MCP tool risk scorer for agents: scans a tool JSON description for shell, filesystem, network and secret-access capabilities.
deterministic eval-case generator for agents: creates happy-path, ambiguous-input and adversarial-instruction cases from a goal.
website trust report from a direct HTTPS fetch: status, response headers, HSTS, CSP and clickjacking protection signals.
SSL certificate signal check using public Certificate Transparency records, including issuer and expiry risk where available.
email deliverability and spoofing check from DNS: MX, SPF and DMARC records with concise risk flags.
domain risk report from DNS signals: address records, nameservers, MX records and high-abuse TLD heuristics.
DNS-over-HTTPS lookup for common record types, normalized into a risk report for web and email agents.
DMARC check for a domain: finds the TXT record, policy mode and aggregate-reporting signal for email trust decisions.
local secret pattern scan for pasted files or diffs: detects common private keys, API keys, GitHub tokens and EVM private keys without sending data to an LLM.
PyPI package risk report for agents: package metadata, latest release recency, license, project links, yanked release and supply-chain risk flags.
prompt-injection risk scan: detects instruction override, tool abuse and secret exfiltration phrases before an agent consumes untrusted text.
Finds the closest archived snapshot of any public URL in the Internet Archive Wayback Machine. Returns the snapshot URL, capture timestamp and original HTTP status. Optional timestamp (YYYYMMDD or longer) targets a speci...
Provider identity is derived from the domain or repository in the source record. If two vendors share a host, they appear together here — that is a limitation of the data, not a statement about ownership.