pcmarts/open-release-demo-next v1.1.0 — release. open release demo example Security scan passed; signed download, 5-minute URL.

Detect whether normalized public npm or PyPI package registry state changed since a saved fingerprint. Returns a deterministic SHA-256 fingerprint for package/version existence, latest/resolved version, deprecation or yank state, license and runtime requirement. No dependency graph, vulnerability scan or registry mutation. Base mainnet USDC

LLM chat completion with no API key or signup (fast open model, meta-llama/llama-3.3-70b-instruct). OpenAI-compatible: set your SDK base URL to https://keyless.run/fast/v1. Flat $0.002 per call, up to 1500 output tokens. Charged only on success.

Fingerprint the normalized metadata state of one public GitHub release and optionally compare it with a caller-provided previous SHA-256 hash. Forest uses the existing bounded release lookup and does not download assets, inspect repository contents or mutate GitHub state. Base mainnet USDC

Produces a ready-to-post RFC 3161 TimeStampReq for a SHA-256 digest you already computed. The pinned OpenSSL build encodes the message imprint, adds a fresh nonce so a replayed response can be detected, and sets the flag that asks the timestamp authority to include its signing certificate in the reply. The result is returned as a binary artifact together with the imprint it was built around, so the caller can check that the request really covers the intended digest.

Domain WHOIS via RDAP: registrar, creation and expiry dates, age. Registration data from the official RDAP registry: registrar, status, created, updated, expiry, domain age in days, nameservers, DNSSEC.

Takes a cipher policy in OpenSSL syntax and resolves it into the concrete list of TLS 1.2 cipher suites that the pinned build would actually offer, in the order it would offer them. This closes the gap between a policy string in a configuration file and what a server ends up negotiating: aliases expand, exclusions apply, and suites below the build's security level drop out silently in normal operation. Here they simply do not appear in the list, and the count says how many survived.

Given an open-source package (PyPI, npm, Go, Cargo, Maven, NuGet or RubyGems) and optionally a version, returns its known vulnerabilities from OSV.dev (IDs, CVE aliases, severity, fixed-in versions), license, latest version, publish date and deprecation status from deps.dev, plus a one-line recommendation. For coding agents to call before adding or upgrading a dependency. Not charged if the package or version does not exist.

Detect material marketplace listing changes in active state, price, seller, condition or quantity with a deterministic hash. It does not place bids, purchases or infer hidden listing facts. Base mainnet USDC

Daily board of calibrated probabilities for standing binary questions (BTC/ETH/SOL vs price targets, next FOMC, top Polymarket markets, CPI/NFP): probability, 80% interval, base rate, market odds, edge, commitment hash. Cached, refreshed daily — poll it in a loop.

Fingerprint the structural machine contract of a public OpenAPI or Swagger specification and compare it with an optional previous SHA-256 fingerprint to detect API contract drift. Paths, operations, parameters, security and component schema structure are tracked while documentation-only text and examples are ignored. No API operation is executed. Base mainnet USDC

Email address check: syntax, MX, disposable, role and free-provider flags. Validate an email address without sending mail: syntax, MX records, disposable-domain list, role account and free-provider flags, plus a verdict.

Parses a definite-length binary artifact and returns every ASN.1 object it contains with its byte offset, nesting depth, header and content lengths, whether it is constructed, and the type as OpenSSL names it. This is the tool for the moment a certificate, key or signature is rejected with an unhelpful parse error and the question is which byte is wrong. Because offsets are exact, a diff against a known-good artifact localises the difference instead of describing it.

Large stablecoin transfers (USDC/USDT) on Base and Ethereum from public explorers, no key: size in USD, best-effort exchange labels, flow tag (to_exchange / from_exchange / mint / burn / wallet_to_wallet), totals by flow. 60 s cache.

Palmyr: POST /social/twitter/unfollow

Detect meaningful changes in normalized static page metadata and JSON-LD with a deterministic semantic hash. Transport noise and malformed JSON-LD counts are excluded; truncated structured output reports unknown when the observed prefix is unchanged. Base mainnet USDC

Extract all links from a page, split internal and external. Every link on a page with anchor text, deduplicated and split into internal and external.

Extract bounded static HTML form structure without submitting anything. Forest returns field names/types/labels/constraints and submit-control structure, but never current values, textarea contents, hidden tokens, passwords, cookies or authentication material. Base mainnet USDC

Wallet balance: native coin plus USDC/USDT/DAI, ENS name, on 5 chains. Balance of any wallet (0x address or .eth name) on ethereum, base, arbitrum, optimism or polygon: native coin, USDC, USDT and DAI, whether it is a contract, and its verified ENS name.

Look up one exact HTTP method and path in a public OpenAPI or Swagger contract and report whether that documented API endpoint exists. This is a contract/endpoint existence check only; Forest reads the specification and never invokes the API operation. Base mainnet USDC