592 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, command injection, code and template injection, SSRF, path traversal, insecure deserialization, weak crypto, in...
LP (liquidity pool) lock/burn audit reusing the same GoPlus data as token-risk - checks whether liquidity is locked, burned, or freely held by a single wallet, a rug-pull signal token-risk does not cover. No qualitative...
Token safety scanner for Base (JSON body): 0-100 safety score, risk band, and red flags for any Base token contract.
Run a read-only transaction simulation with eth_call and eth_estimateGas against a supported public EVM RPC without signing or broadcasting.
GoPlus/Honeypot.is-backed token security check - honeypot flag, buy/sell tax, mintability, and ownership renouncement for a given contract address. A pre-trade safety check a bot runs before it buys. Paid in USDC on Base...
Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata a...
WalletTriage — real-time wallet risk check: dangerous ERC20 approvals cross-referenced with a live exploit threat feed. Returns risk_score (0-100), risk_level and actionable findings.
Generates a temporary disposable inbox address using the free 1secmail.com service.
Canonicalizes device_id, nonce and message, computes an HMAC-SHA256 tag with caller-supplied ephemeral key material, and optionally compares a claimed tag in constant time. It does not provision devices, store keys or re...
Current weather + multi-day forecast for any city or lat/lon via Open-Meteo. Temperature, humidity, wind, precipitation, WMO condition codes.
Prompt injection detection API for AI agents. Prompt-injection scan for text your AI agent is about to read (web pages, emails, tool output, MCP tool descriptions): risk score 0-100, verdict, categories and exact spans....
Fetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/CORP/COEP. Scores 0–100 by presence, flags weak HSTS, a...
Static application-security scan of a single code blob for CWE Top-25 logic bugs (SQL injection, XSS, command injection, SSRF, path traversal, insecure deserialization, weak crypto and more). Pass the code and its langua...
Full risk assessment for an SPL token mint: risk score and level, the flags that drove it, bundle detection, the deploying wallet when it is known, and a human-readable summary. Where the mint has already been resolved,...
MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IM...
Scan text or a public page for prompt injection before your agent reads it: overrides, fake roles, exfiltration, tool abuse, payment asks, invisible Unicode/HTML-hidden instructions, base64. Rule-based evidence, signed a...
One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and...
Check an unsigned Solana transaction before signing. Send its base64 serialization; malformed input is rejected before payment. We simulate it on mainnet and return ALLOW, WARN or BLOCK with SOL and token balance changes...
$0.001/page. Password-protect a PDF with 256-bit AES and set permissions. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny
CVE details - CVSS, CISA KEV status, EPSS exploit probability, affected packages and patch priority
Payment-Injection Screen by Agentropolis: send text your agent is about to act on (tool result, web page, email, file). Flags payment-looking instructions: pay/transfer requests, fake licence or refundable fees, swapped...
Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version
Check a Dockerfile (up to 8,000 characters) for common security and image-size problems: unpinned or :latest base images, running as root, piping downloads into a shell, sensitive values baked into ENV or ARG, ADD from U...
Scan text an agent is about to read (web page, email, tool result; up to 8,000 characters) for prompt-injection attempts: instruction overrides, fake system messages, asks to hide things from the user, exfiltration links...