Classify goods against the US Harmonized Tariff Schedule. Give a keyword or an HTS code and get the matching HTS lines with their duty-rate columns, units and footnotes. The cheap supporting lookup that feeds trade/tariff.

US monthly import or export trade flow for a commodity from the Census Bureau. Give an HS code, a direction and an optional partner country and get monthly values, a trend and a supplier-concentration index. Degrades cleanly when the Census key is not configured.

Vulnerability intelligence for a single CVE id. Fuses NVD (CVSS base score and vector, CWE, patch links), CISA KEV known-exploited status, EPSS exploitation probability and OSV.dev affected and fixed versions into one cited JSON with a deterministic patch-priority score. Risk indicators, not advice.

Vulnerability scan for a software package by ecosystem, name and version, or by package-URL (purl). Queries OSV.dev for known advisories, collects their CVE ids and enriches them with NVD CVSS, CISA KEV and EPSS, then returns a prioritized list of advisories with exact fixed versions. Risk indicators, not advice.

Composite account-takeover risk score (0-100) fusing a privacy-preserving password exposure check with a domain's known breach history. The password is hashed locally (k-anonymity, never transmitted). Returns ato_risk_score, a category, per-signal reasons and the raw signals so the agent can re-rank. Risk indicators, not a guarantee.

Fused agricultural signal for a commodity: the USDA Market News spot price is combined with the NASS production and stocks series into computed signals - spot change, price percentile over available history, and production and stocks year-over-year context.

US crop production, yield, acreage and grain stocks from USDA NASS QuickStats by commodity, with an optional state and year. Returns a normalized cited series plus the year-over-year change.

Check whether a password has appeared in known data breaches, using k-anonymity: the password is hashed locally and only a 5-character hash prefix is sent upstream, so the plaintext is never transmitted, logged or stored. Accepts a password, a SHA-1 hash or an NTLM hash. Returns compromised, breach_count and the hash prefix. Credential-exposure indicators, not a guarantee.

List the known public data breaches that affected a domain, from the Have I Been Pwned breach catalogue. Returns normalized breach metadata (name, date, account count, data classes, stealer-log and verified flags) plus a summary. This is which known breaches touched the domain, not whether a specific account is compromised. Breach indicators, not a guarantee.

Phishing/trust verdict for a website domain before an agent transacts with an unfamiliar merchant. Fuses registration age (RDAP), DNS/mail posture (SPF, DMARC, DNSSEC), TLS validity, Certificate Transparency history and a typosquat/homoglyph analysis into a composite trust score 0-100, a category (trusted / caution / untrusted / unknown), per-dimension flags and reasons. Trust indicators, not a guarantee.

Look up the known breaches an email address appears in, returning breach METADATA only (name, date, data classes) and never passwords or leaked personal data. Uses the keyed Have I Been Pwned account API; when no API key is configured the route returns available false and the keyless password and domain routes still work. Breach indicators, not a guarantee.

Drug-interactions label section for a drug by name, with an optional check of whether the label mentions a second drug. A label-text heuristic, informational, not medical advice.

Adverse-event summary for a medical-device brand from the FDA MAUDE database. Returns counts of malfunctions, injuries and deaths by event type. Informational, not medical advice.

Adverse-event summary for a drug from the FDA FAERS database by name. Returns the top reported reactions, the serious and death-flagged fractions and a demographic breakdown as aggregate counts. Informational, not medical advice.

Clinical safety profile for a drug by brand, generic or active-ingredient name or NDC. Fuses FDA identity and approval status, key label sections, an adverse-event summary and a deterministic severity indicator into one cited JSON. Informational, not medical advice.

Pure-compute typosquat and homoglyph check on a hostname: edit-distance to a curated brand list, look-alike character normalization, brand-in-subdomain lures, punycode/IDN, abused free-hosting suffixes and throwaway TLDs. Returns is_typosquat plus the nearest brand, edit distance and reasons. No network — instant, cheap.

Current FDA drug-shortage records for a generic drug name: status, therapeutic category, dosage form, company and dates. Informational, not medical advice.

One macroeconomic or development indicator for one or more countries as a cited time-series. Fuses free authoritative sources (World Bank, IMF) and tags every value with its source, source code, year and country ISO3. Accepts a canonical indicator key or a raw World Bank code.

Key FDA structured-product-label sections for a drug by name: boxed warning, indications, dosing, contraindications, warnings, drug interactions and pregnancy. Informational, not medical advice.

A curated headline basket of key macroeconomic and development indicators for one country: GDP, GDP per capita, growth, inflation, unemployment, population, government debt, current account, life expectancy and CO2 per capita. Latest value plus short history, each value cited to its source.