First Fold Utility Tool x402 REST
Run a deterministic SHA-256, base64 encode/decode, or UUID utility and return structured JSON.
74 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Run a deterministic SHA-256, base64 encode/decode, or UUID utility and return structured JSON.
Generate a SHA-256 cryptographic hash from UTF-8 text
Capture point-in-time URL facts, response headers, a text excerpt, and a SHA-256 content hash for research and verification.
JSON canonicalization — canonicalize structured data with RFC 8785 JCS; return canonical JSON text, UTF-8 byte length, and SHA-256 hash for integrity checks, signature preparation, and deduplication. Includes an EIP-712...
SHA-256, SHA-384, SHA-512 or SHA-1 of any text in one GET, without an LLM or a local tool: pass text and get the digest as hex or base64. curl: GET /hash?text=hello (algo sha256|sha384|sha512|sha1, default sha256; encodi...
File-hash reputation and known-file context for a SOC or DFIR agent. Give an md5, sha1 or sha256 hash and get CIRCL hashlookup known-file status, a hashlookup trust score and file metadata (name, size, mimetype, source,...
Paid content hash + integrity ledger (cycle 217, x402 $0.01) - GET ?text=<STRING> OR ?data=<BASE64> OR ?sample=1|2|3 OR POST application/json {text|data}. Computes every digest an AI agent needs BEFORE it trusts a downlo...
Paid x402 seller catalog-integrity audit (cycle 185, x402 $0.001) - audits an x402 seller's OWN paid-route catalog for the defects that mechanically suppress demand. GET with no params audits THIS seller live against its...
Paid SMTP credential-leak probe (cycle 158, x402 $0.0005) - actively probes each MX host on ports [25, 465, 587] for credential-handling vulnerabilities. Per-port: opens TCP, reads banner, sends EHLO, captures AUTH mecha...
Paid CSP x Live-Script mapper (cycle 156, x402 $0.001) - fetches target HTML, extracts every <script src=...> URL, and maps each against the target's declared CSP script-src + default-src allow-list. Reports which runnin...
Paid x402 payment receipt parser + on-chain tx verifier (cycle 151, x402 $0.001) - accepts a server-returned X-PAYMENT-RESPONSE base64 (the canonical x402 settlement receipt) OR a raw transaction hash (0x + 64 hex) which...
Paid CSP x Subresource-Integrity (SRI) verifier (cycle 150, x402 $0.001) - fetches URL HTML, extracts every external <script src=> + <link rel=stylesheet href=>, fetches each asset (200KB cap), computes sha256 + sha384,...
Paid llms.txt multi-target drift monitor (cycle 149, x402 $0.001) - up to 20 domains in parallel via ThreadPoolExecutor; per_host H1 + first-5-URLs + sha256 fingerprint; compares to /tmp/llms_txt_monitor_state.json to de...
Paid Content-Encoding integrity + compression-bomb detector (cycle 141, x402 $0.001) - fetches URL 3x: no Accept-Encoding baseline + Accept-Encoding: gzip + Accept-Encoding: br, gzip; records raw bytes + Content-Length +...
Paid CSP inline-fidelity validator (cycle 130, x402 $0.001) - fetches target URL, parses CSP, extracts every inline <script>/<style> block + event handler, computes sha256 of each, reports per-block {hash_in_csp, nonce_i...
Paid TLS server-cert trust chain inspection (cycle 126, x402 $0.001) - opens TLS via ssl.create_default_context, pulls full DER chain via get_verified_chain(), parses each cert (subject/issuer/not_before/not_after/key_ty...
Paid CT-log certificate pre-fingerprint (cycle 124, x402 $0.001) - queries crt.sh for the target domain, parses every returned certificate record, and aggregates total_certs_observed + unique_sha256_count + duplicate_cer...
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token (sha256/sha384/sha512/sha1...
Paid AI-citable source credibility scorer (cycle 109) — fetches URL, extracts article text + meta description + article:published_time, then computes 6 sub-scores: hedging language density (30 terms tracked), sourcing (c...
Paid CSP per-directive source-list extraction + classification (cycle 176, x402 $0.001) - accepts GET ?url=<URL> OR POST application/json {'url':...}; fetches target page; extracts CSP header + meta CSP fallback; tokeniz...
Paid SRI readiness audit - probes every <script src=...> tag on a page, classifies each as same-origin vs third-party, checks for presence of integrity= + crossorigin= attributes, HEAD-probes each script for reachability...
Paid deep Content-Security-Policy analyzer — parses ALL 4 CSP delivery mechanisms (header + meta + report-only variants), classifies each source value (wildcard/scheme/host/nonce/hash/unsafe-inline/unsafe-eval/strict-dyn...
Paid Subresource Integrity hash-match verifier — fetches every <script src=> + <link rel=stylesheet/modulepreload/preload href=> with integrity attribute, SHA-256/384/512-hashes the bytes and compares to declared base64...
Paid Open Graph + Twitter Card spec validator — required OG detection (og:title/type/image/url), recommended (description/site_name/locale/image:width/image:height/image:alt), og:type enum validation (website/article/boo...