33 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Ed25519 receipt: registered-app HMAC/format/freshness checks bound to source/operation, not carrier signature or fulfilment proof. EU B2B onboarding, buyer_id, authority, wallet/HMAC source required. https://api.integrit...
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / ant...
US trade-flow + tariff signal by commodity
Full supply chain report — shipping rates, BLS PPI, NY Fed GSCPI, AI summary
Trust check an npm package before an agent installs it: typosquat screen, deprecation, package age, maintainers, weekly downloads, source link.
Critical-minerals supply-concentration & US import-reliance signal
Mineral prospectivity assessment for any region, for exploration and geology agents. Combines USGS MRDS deposit inventory, geochemical anomaly data, and AI geological synthesis to rank what a region is likely to host.
Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names....
Economic impact of sanctions regimes via satellite, shipping AIS and alternative signals — Russia, Iran, Venezuela, DPRK and all OFAC/EU/UN jurisdictions. For compliance and geopolitical agents.
Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available he...
Call before installing packages suggested by a language model. Returns, for each npm or PyPI package name, whether it actually exists in the registry, whether it is deprecated or yanked, and — when the name is not found...
Is this WordPress plugin, npm package or PyPI project abandoned? Status, 0-100 abandonment-risk score, months since last update, and the signals behind it.
Aggregates global weather forecasts using open meteorological data. Useful for supply-chain routing, event planning, and agriculture commodity prediction. List your own x402 service on bazaar.agentexchange.work/listings:...
Full supply chain report — shipping rates, BLS PPI, NY Fed GSCPI, AI summary
CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively...
Leading causes of death for any US state or the nation - deaths, share of all deaths and age-adjusted rates for heart disease, cancer, stroke and more
Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one ca...
Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the s...
toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vu...
Where Brazilian deforestation is concentrated right now: rank municipalities or states by area cleared in a window you choose, filterable by biome (Amazon or Cerrado), from official INPE satellite alerts. Feeds ESG scree...
Verify a package: does it exist, is it deprecated or yanked, and does it have known vulnerabilities? Checked against the npm/PyPI/crates.io registry plus OSV.dev advisories.
The published facts about an npm package that ships an MCP server, read before running it: resolved version and publish date, package and version age, maintainer count, provenance attestation, install scripts (preinstall...
Audit up to 10 dependencies. Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and...
Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities...