Have I Been Pwned Pwned Passwords via k-anonymity: only a 5-char SHA-1 prefix leaves the server. Returns pwned + occurrence count and a GO/HOLD/STOP. Password is not stored. Email breach lookup not offered.

Encode text= into a QR code as SVG (default) or format=dataurl PNG. Offline, no upstream. Built for agents putting payment links, IBANs or URLs onto a page.

🆕 Given a paymaster address, audits whether it's a healthy, active gas sponsor. Reads its UserOperationEvents across both EntryPoints: sponsored op volume, distinct accounts served, success rate, total gas sponsored, and concentration (the share coming from its single busiest app). The read to run before integrating a paymaster (Coinbase / Pimlico / Alchemy / custom), or judging who funds a counterparty's gas. paymaster= required, days= optional (default 30, max 90). Not financial advice.

approval-advisor tells you WHAT to revoke; this builds the HOW: the ready-to-sign transaction (to + calldata) for approve(spender, 0) on a token, plus the live current allowance read from Base (flags unlimited, or 'already revoked'). Hand the result straight to a wallet or agent signer — the action half of approval hygiene.

Exa's own page index, read per call — no Exa account, no subscription. Pass urls= (one, or up to 5 comma-separated) and get each page as clean text with title, author and publish date. Answers from Exa's crawl rather than our fetcher, so it reads pages a plain server-side GET is blocked from. maxChars=500..40000 (default 8000). One URL is $0.002; a batch of 2-5 is $0.008, which the 402 challenge quotes. Pairs with exa-search: search, then read the winners.

Token intelligence for any Base (EVM) token contract address. Returns DexScreener market data (price USD, liquidity, FDV, market cap, 24h volume and change, pair age, DEX) together with GoPlus security checks (honeypot, buy/sell tax, verified source, upgradeable proxy, mintable supply, pausable transfers, owner privileges, holder concentration) and a deterministic rule-based risk score with flags. Use it to screen a Base token before buying, swapping or interacting with it.

Check if a Solana token is safe before buying: one pre-trade call that returns a pass/caution/avoid verdict composed from the rug-pull, scam and honeypot risk screen, wash-trading authenticity, liquidity level and trend, and top-holder concentration — each section scored from cached data and reported with an ok/partial/unknown status. A deterministic 0-10 risk score is attached; unknown legs lower the verdict instead of inventing data. — $0.03 USDC

Turn a USDC settlement into bookkeeping lines: amount, accounts, memo, optional Base tx= enrichment (status, timestamp, to). Returns journal JSON plus a two-line CSV. Not tax advice.

🆕 b20-freeze-check answers one wallet; this enumerates the WHOLE list. Replays the Policy Registry's BlocklistUpdated/AllowlistUpdated events into the full membership of a B20's blocklist/allowlist: every address ever blocked or whitelisted, when, by whom, and the current member set per scope. Compliance-grade visibility no other tool provides. Pass address= (token) or policy= (registry policy ID).

🆕 Cross-chain inflow detection. Reads a wallet's recent USDC MINTS and correlates them with Circle CCTP receives to tell you whether its USDC is freshly bridged in (and from which source chain — Ethereum, Arbitrum, OP, Polygon, Solana…) vs natively issued. Freshly bridged capital is new money / a possible cross-chain hop — a real signal for trading and liquidation agents that no other Base tool surfaces. wallet= required, days= optional (default 30, max 90). Not financial advice.

Heavy session pass: ephemeral CONNECT credentials (60 min + 200MB). For sustained volume use /v1/session/gb.

Convert a web page (by URL) or raw HTML into clean, readable Markdown plus structured metadata (title, description, Open Graph tags, canonical URL, language). Strips scripts, styles and boilerplate tags; preserves headings, links, images, lists, code blocks and tables. Built for agents that need web content as LLM-ready text. POST a JSON body like: {"url":"https://example.com/article"}

Reads the totalSupply of an ERC-20 token contract on Base and returns it as a decimal integer string. Takes token (the ERC-20 contract address, 0x + 40 hex). Base ERC-20 read of token contract address.

Returns base_eth_getbalance and base_eth_getcode results in one paid call, keyed by each part's name. Base bundle of the declared parts. Returns: each named part service's own result, in one paid call, keyed by the part's name -- exactly what each part returns when bought alone; the call succeeds only when every part answers. It takes the union of the parts' query parameters.

ENS resolution on Ethereum mainnet. Pass name (an ASCII .eth name) to get its resolved address, or address (0x + 40 hex) to get its primary ENS name, reverse-resolved and verified forward.

Ethereum mainnet ERC-20 allowance. Takes query parameters token (ERC-20 contract, 0x + 40 hex), owner (0x + 40 hex) and spender (0x + 40 hex). Returns the raw allowance read from the contract. Base ERC-20 read of token + holder + spender addresses.

Returns the transaction receipt for a given transaction hash on Base. Takes one query parameter: hash, the 0x-prefixed transaction hash. Base RPC read of an address, block or transaction.

Returns the current transaction count (nonce) for a Base address via eth_getTransactionCount JSON-RPC. Base RPC read of an address, block or transaction.

Returns the Base transaction receipt for a transaction hash: status, logs bloom, gas used, effective gas price, and contract address when one was created. Takes hash (0x + 64 hex). Base RPC read of an address, block or transaction.

Returns every token ID an owner holds for an Enumerable ERC-721 contract, read on Base. Base ERC-721 read of token + token id.