605 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
MCP security checks and feedback for users and developers. Choose paid access without reports, or ongoing free access within limits: POST /v1/client-token; 1 check/24h + 1 for a previous-use report. Check URL/DNS, metada...
URL safety preflight: screen a link before an agent opens it — syntax, host/IP, patterns, redirects, optional threat intelligence.
npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk.
Health-check and tool-schema inspection for any public MCP server before you rely on it.
Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains...
Prompt-injection and manipulation scan for untrusted text, HTML, email, and tool output.
Check an x402 endpoint BEFORE paying it. Makes one unpaid request (never sends money), decodes the 402 terms, and verifies: the asset is a real USD stablecoin on that network, the price in USD vs your max_price_usd cap (...
Risk check for an EVM contract/token address
Run a transaction simulation and EVM safety preflight with gas, destination proxy evidence, and optional token security and allowance checks in one decision-ready report.
Domain trust and company-domain intelligence: evidence-backed assessment using RDAP registration data, DNS/security reputation search, and a structured risk analysis. Surfaces fraud, typosquat, and low-trust domains for...
Health and payment-path check. Returns server time and confirms the x402 payment settled. The cheapest endpoint in the catalog at $0.001, intended for testing a client's payment flow.
Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, with MITRE's required...
How old and how active is an address — Genesis402 / UnyKorn Operator Network
Screen one address against sanctions and scam blocklists — Genesis402 / UnyKorn Operator Network
Use before buying or approving an unknown ERC-20 token on Base. Rule-based check straight from the chain, without AI - contract and proxy (upgradeable?), owner and whether it was renounced, risky owner functions in the b...
pactlint (Tanod) source lookup: verified Solidity source, ABI and compiler settings of a contract (Sourcify) Use when an agent needs the verified source, ABI and compiler settings of a contract at a known address.
TLS certificate of a domain: issuer, validity dates, days until expiry, names covered (SAN), whether it matches the domain and is trusted, TLS version and cipher. For uptime and security monitoring.
Follow the redirect chain of a URL (up to 10 hops): status code and time of each hop, final URL, domain changes and HTTPS-to-HTTP downgrades. Unmask short and affiliate links before visiting them.
Analyze raw email headers: sender, recipient, subject, server hops (Received) with delays, SPF/DKIM/DMARC results, Return-Path and Reply-To mismatches and spoofing signals, with a verdict. Investigate phishing or deliver...
Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, sequences...) and tips. Evaluated in memory, never sto...
Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header, claims and the exact reason if invalid. Tokens ar...
Invisible bot protection. Score form submissions 0-100 based on behavioral signals. No CAPTCHAs.
Full-history address-poisoning check before you send USDC on Base. Same risk/lookalike/seenBefore logic as /address/check, but funding history comes from ONE Blockscout index call (x402, up to the sender's 500 most recen...
Offline transaction and signature safety check API for crypto wallets. Offline pre-sign check (no RPC, fast): decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009), an EIP-7702 authorization or an x402 40...