Payment-Injection Screen by Agentropolis: send text your agent is about to act on (tool result, web page, email, file). Flags payment-looking instructions: pay/transfer requests, fake licence or refundable fees, swapped wallets, token approvals, seed-phrase asks, hidden text. Returns clean/caution/likely_payment_injection with evidence. Advisory only.

Email address validation (syntax + domain + MX, no SMTP probing): Validates one email address without contacting the mailbox: RFC 5321 syntax, domain exists, MX / null-MX / implicit-MX, MX hosts resolve, mail provider, disposable-domain flag (CC0 list), role account (info@, support@), free provider,

Extract readable text, metadata, headings, links and JSON-LD from one public static HTML page for research and retrieval.

Checks whether a token contract address is real, matches its claimed symbol, and whether its supply figures match an independent source (CoinGecko) — before trading, coding, or reporting against it. Catches hallucinated/wrong addresses, address-poisoning impersonation, and tokenomics hallucination.

Domain age, registrar and expiry (RDAP): Registration facts for a domain from the official registry RDAP service (successor to WHOIS): registered or not, registrar and IANA id, created / updated / expiry dates, age in days, days to expiry, EPP status codes, nameservers and DNSSEC. Personal contact d

SCV Fresh Feed: 25 newest tokens on base with instant risk scores + market data ($0.005 per call, USDC x402)

Page to Markdown (main content): Fetch one public web page and return its main content as clean Markdown (headings, lists, links, images with alt) plus title, description, lang, canonical and word count. Up to 60,000 characters. Obeys robots.txt. ~1-3 s.

VAPE exploit_check — Contract verification + proxy-swap surface check. Real on-chain/market data, no simulation.

Inspect the latest reviewed cyber event with public sources, affected entities, confidence, freshness, decision significance, and evidence-bearing relationships in structured JSON

Malaysian ringgit exchange rates + OPR (Bank Negara Malaysia data): Bank Negara Malaysia exchange rates against the ringgit (buying, selling, middle; MYR per unit) for one currency or ALL, plus the current Overnight Policy Rate. Source: Bank Negara Malaysia; data subject to the Terms of Use for BNM

Link check: is it alive, where does it really go (redirects resolved): Resolve one link the way a browser would: follows up to 10 redirects (HEAD first, GET fallback), returns alive true/false with a reason (http_404, dns_not_found, timeout...), the final URL and domain, every hop with its status, c

Retrieve a fixed English editorial reference for offset-printing review. It covers job records, material questions, registration and sample checks, process limits, and provenance. The response is reference material, not a production inspection or authorization.

SSL/TLS certificate check (expiry, issuer, SANs, chain): Connects to host:443 and reports the certificate: trusted or not (and why), hostname match, issuer, valid from/to, days left, expired / expiring within 21 days, SAN list, wildcard, key type and size, serial, SHA-256 fingerprint, OCSP/CA URLs,

Token rug check / pre-trade safety verdict (Solana + EVM) for trading bots: go / caution / avoid + reasons, up to 10 tokens per call, ~0.3-1 s, cached 120 s. Solana (pump.fun and Meteora curves, Token-2022) and Ethereum/BSC/Base: authorities, honeypot simulation and taxes, liquidity, holder concentration (pools excluded), buys vs sells, price moves, age. Solana sellcheck=true: a real Jupiter buy+sell round trip (can you get out, at what cost, ghost-quote flag).

ScreenSeal — sanctions screening: a name checked against the OFAC SDN and EU FSF lists. Informational signal, not legal advice.

Web page to Markdown or plain text: fetch one public URL and get its title and main content with scripts, styles, navigation and ads stripped, plus character count and truncation flags. Use this when an agent needs to read a URL for research, RAG, monitoring or summarization without an API key or a browser. One HTTPS fetch of static HTML (no JavaScript rendering, no login pages), up to 20,000 characters, JSON out. Free sample at /api/web-read/sample.

Retrieve a public HTTPS URL from the US, Germany, Japan, Brazil, or India. Use HTTP mode for lightweight retrieval, or browser mode to render JavaScript pages. For pages with bot protection, set max_tier to L2 for managed unblocking at $0.05 USDC; L0/L1 costs $0.02 USDC. Returns the fetched body and an Ed25519-signed receipt for provenance.

Pre-trade safety check: oracle-immune-system verdict for one trade, with verifiable EIP-712 attestation support. BLOCK verdicts are complete checks and are charged.

Web page to clean text, title, links and metadata

Use when an agent is building something Ethereum will hash and must get the same digest the chain gets: Keccak-256 of any string or hex payload, with the byte count. It is NOT SHA3-256, and that confusion is the usual reason a selector or a CREATE2 address comes out wrong. Do not use for file digests or API signatures outside Ethereum (/v1/util/sha256) or for a function selector, which is already built for you (/v1/util/selector).