Audit a whole lockfile for known vulnerabilities and malware in one call: package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, poetry.lock, uv.lock, Pipfile.lock, Cargo.lock or go.sum, up to 1,000 exact versions checked against OSV.dev, with affected packages, severity and versions to upgrade to. POST {url} (raw file) or {content, filename}.

Should a coding agent install this package? Checks one npm, PyPI, crates or Go package version for known vulnerabilities and malware (OSV.dev), deprecation, typosquat look-alike names, install scripts, licence, downloads, release activity and OpenSSF Scorecard, then gives a verdict (ok/caution/avoid), a 0-100 score and every reason. Pass ?ecosystem=npm&name=express.

Watch any public page for changes: we fetch it now (robots.txt respected), fingerprint its text and return a token. Send that token next time and get changed yes/no plus the blocks added and removed since your last check. Nothing is stored on our side. Option to ignore number-only changes. POST {url, token}.

Page change detection with an AI summary: like /page/changes (send back the token from your last check), plus a two-sentence summary of what changed and whether it looks significant (price, policy, product or content change) versus noise. POST {url, token}.

OHLCV candles for a perpetual futures market on Hyperliquid or dYdX (1m to 1d, up to 500), with a summary: change, high/low, USD volume and annualised realised volatility. Pass ?coin=ETH&interval=1h&limit=24 (&venue=dydx).

Live order book for a perpetual futures market on Hyperliquid or dYdX: best bid and ask, spread in bps, USD depth within 10/50/100 bps of mid, and the average fill price and slippage of a market buy and sell of your size. Pass ?coin=ETH&sizeUsd=25000 (&venue=dydx).

Liquidity-pool depth and slippage for a trade size on any token (8 chains incl. Base, Solana, Ethereum): each major pool's liquidity, fee tier and estimated price impact for your amount, the largest trade for 0.5/1/2/5% impact, and whether splitting across pools helps (with the split). ?address=...&chain=base&amountUsd=5000

Product and price from any public product page, as clean JSON: name, brand, price, currency, availability, condition, SKU/GTIN, seller, rating and image, read from the page's own schema.org JSON-LD, microdata or OpenGraph tags. url is the product page's address (https://...). Respects robots.txt; not charged if the page has no structured product data (see /product/ai). ?url=...

Product and price from any public product page, even without structured data: uses the page's schema.org/OpenGraph data when present, otherwise AI reads the page text for name, brand, price, currency, availability and SKU. Says which method was used. url is the product page's address (https://...). Respects robots.txt; not charged if it isn't a product page. ?url=...

What a DeFi protocol earns: fees paid by its users and the protocol's own revenue over the last 24 hours, 7 days, 30 days, a year and all time, the day-on-day change, the share of fees it keeps, and the chains it runs on. Any protocol DefiLlama tracks (Aave, Uniswap, Lido, Hyperliquid...). Protocol figures only, nothing about individual wallets.

Which crypto protocols earn the most: a ranking by fees paid by users or by the protocol's own revenue over 24 hours, 7 days or 30 days, optionally for one chain (e.g. Base, Solana) or one category (Dexs, Lending, Stablecoin Issuer, Derivatives...). Up to 50 rows with amount, day-on-day change and number of chains. DefiLlama data.

Turn text or a link into a QR code. Pass ?text=https://example.com. Returns a crisp SVG image and a data: URL you can drop into HTML or Markdown. Options: ecc (error correction L, M, Q, H), size in pixels, margin, dark and light colours (#hex). Up to 2,000 characters.

Domain registration lookup (RDAP, the modern WHOIS): registrar, abuse contact, created/updated/expiry dates, domain age, days until expiry, status codes, name servers and DNSSEC. Pass ?domain=example.com. Tells you if a domain looks unregistered. Useful for fraud checks, lead research and domain monitoring.

Validate and explain a regular expression (JavaScript flavour): is it valid, what each part means in plain English, whether it risks catastrophic backtracking (ReDoS), and what it matches in up to 20 test strings (with groups). POST {pattern, flags, tests}.

Health report for any public GitHub repository: stars, forks, open issues, last push, latest release and release cadence, commits and active committers in 90 days (bus factor), licence, archived/fork status, community profile and OpenSSF Scorecard, with a verdict (healthy/ok/stale/abandoned), score and reasons. repo is owner/name (honojs/hono) or a github.com URL.

Search inside one public GitHub repository: every line where a word or code snippet appears, with file, line number and a link. Reads up to 120 likely source files per call (skips vendored, built and lock files) and says how many it covered; may lag GitHub by up to 12 hours; narrow big repos with path=src/ or ext=ts. Pass ?owner=honojs&repo=hono&q=getCookie. Then read a file with /repo/file.

Live web search API for AI agents, open-sources tier: fresh results from Wikipedia, Hacker News, DuckDuckGo instant answers and Stack Overflow, merged, de-duplicated and ranked (title, URL, snippet, date). q is the search words; limit caps the results (default 10). Not a full-web index yet: it moves to full-web results (and price) when a premium index is connected; the provider field says which. ?q=...&limit=10

Search, read and summarise in one call (open-sources tier): finds pages via Wikipedia, Hacker News, DuckDuckGo and Stack Overflow, reads the top ones (robots.txt respected) and writes a concise cited answer, plus pages read and all results. Upgrades itself to full-web search (and price) when a premium index is connected. ?q=question&pages=3

Web search API for AI agents, lowest-cost tier: Wikipedia articles, Hacker News stories, DuckDuckGo instant answers and Stack Overflow questions (quota permitting) in one call, merged, de-duplicated and ranked, with titles, links, snippets and dates. Good for facts and for tech news and discussion (Hacker News). q is the search words; limit caps results; detail=brief trims fields. ?q=cloudflare workers

On-page SEO audit of a web page: title, meta description, headings, canonical, noindex, HTTPS, mobile viewport, language, Open Graph cards, image alt text, internal links, JSON-LD structured data, thin content, plus the site's robots.txt and sitemap. A 0-100 score, a grade and a list of issues, most important first, each with the fix. Pure code, same answer every time.

Explain and sanity-check a SQL query before running it: statement type, tables touched, syntax problems (quotes, parentheses, = NULL), risky patterns (UPDATE/DELETE without WHERE, DROP, NOT IN with NULLs, cartesian joins, non-sargable filters, multiple statements) and a plain-English explanation. POST {sql, dialect}.

Stablecoin depeg monitor across 400+ USD, EUR, GBP and other stablecoins: which trade below their peg now and how badly, which are seeing fast redemptions (supply falling, often a run), which trade at a premium, and the status of the 10 largest. Filter by depeg threshold (percent), peg currency, symbol and minimum supply.

Summarise text or any public web page with AI. POST JSON with either "text" (up to 40,000 characters) or "url", plus optional "length" (short, medium, long), "format" (paragraph or bullets) and "language" for the summary. Returns the summary and source details. Failed or empty summaries are not charged.

Convert a date and time between time zones, daylight saving handled. Pass ?time=2026-10-01T15:00&from=Europe/London&to=America/New_York,Tokyo (time can be 15:00, 3:30pm or now). Zones: IANA names, big cities, UTC offsets or unambiguous abbreviations (EST, JST). Returns local time, weekday, UTC offset, abbreviation, DST flag and day shift for each zone.

Token holder concentration now and over time: holder count, top-1 and top-10 share, the top 10 that can actually sell (excluding pools and locks), supply held by exchanges, funds and contracts, labelled top holders, plus stored history with 1/7/30-day changes and a trend (concentrating or distributing). ?address=...&chain=base&days=30

Find the right contract for a token symbol or name across Ethereum, Base, Solana, BNB, Arbitrum, Polygon, Optimism and Avalanche, safely: each match is labelled verified (curated lists), likely-real, unverified or likely-impostor (copycat of the same symbol), with liquidity, 24h volume, price and age. Also accepts an address. ?query=PEPE&chain=ethereum

New token launches with real liquidity: tokens whose first DEX pool opened in the last hour (up to 24h) with at least $10k liquidity (adjustable), newest first, each with a safety pre-screen (honeypot, taxes, mint/freeze, owner powers, locks), price, volume, buys/sells and links. Solana, Base, Ethereum, BNB and more. Filter by chain, maximum age in minutes and minimum liquidity.

Live price of any token on Base, Solana, Ethereum, BNB, Arbitrum, Polygon, Optimism or Avalanche from DEX data: USD price, total liquidity, 24h volume, buys/sells, price change (5m/1h/6h/24h), market cap, FDV, pair count and pool age. Pass ?address=<contract>&chain=base, or ?symbol=ETH (plus chain= to pick one when a symbol is ambiguous). For a full rug-pull check use token-safety.

Full token report, live: safety (honeypot, taxes, owner powers), holders (concentration, exchange/fund/locked share), liquidity (depth, locks, pools), price action, social/news buzz and smart-money signals (trade sizes, buy pressure, exchange and fund flows, whale transfers), with an overall rating and headline, in one call. 8 chains incl. Base, Solana, Ethereum. Pass ?address=...&chain=base. Cheaper 15-min cache: /token/report/cached. AI verdict: /token/report/deep.

Full token report, cached tier (answers up to 15 minutes old, half price): safety (honeypot, taxes, owner powers), holders (concentration, exchange/fund/locked share), liquidity (depth, locks, pools), price action, social/news buzz and smart-money signals (trade sizes, buy pressure, exchange and fund flows, whale transfers), with an overall rating and headline. Base, Solana, Ethereum, BNB, Arbitrum, Polygon, Optimism, Avalanche. Pass ?address=...&chain=base. Fresh data: /token/report.

Rug-pull and scam check for any token on Base, Solana, Ethereum, BNB, Arbitrum, Polygon, Optimism or Avalanche. Checks honeypot, buy/sell tax, mint/freeze authority, hidden owner, proxy, blacklist, holder concentration, locked liquidity, pool age and market data, then gives flags, a 0-100 safety score and a verdict. Pass ?address=...&chain=base.

Upcoming token unlocks for a project (vesting cliffs and emission changes): dates, amounts, % of supply, USD value at today's price, who receives them (team, investors, airdrop) and likely sell pressure, plus totals for the next 30 and 90 days. Pass ?protocol=arbitrum (DefiLlama slug or name)&days=90.

Whale and exchange flows for a token on Base, Ethereum, Arbitrum, Optimism or Polygon, from its latest ~250 transfers: large transfers, deposits/withdrawals per exchange (Binance, Coinbase, OKX...), fund and market-maker flows, DEX buys vs sells, top accumulating and distributing wallets, and plain signals. Pass ?address=...&chain=ethereum&minUsd=10000.

Find the best tool for a job. Describe the task in plain English (e.g. 'check if a token is a rug pull', 'scrape a page to markdown', 'cheap LLM chat') and get a short ranked list of pay-per-call x402 APIs and MCP servers side by side: what each does, exactly how to use it, price, reliability from our own checks, and why it fits. Neutral: ranking is never paid, and you call and pay each tool directly.

Live pre-trade check before buying or selling a token: go/caution/no-go with reasons, from token safety and taxes, liquidity and estimated price impact for your trade size, holder concentration, the chain's swap fee now and the round-trip cost. 8 chains incl. Base, Solana, Ethereum. ?address=...&chain=base&amountUsd=1000&side=buy. Cheaper: /trade/precheck/cached. With AI: /trade/precheck/deep.

Pre-trade check before buying or selling a token, cached tier (up to 5 minutes old): go/caution/no-go with reasons, from token safety and taxes, liquidity and estimated price impact for your trade size, holder concentration, the chain's swap fee now and the round-trip cost. 8 chains incl. Base, Solana, Ethereum. ?address=...&chain=base&amountUsd=1000&side=buy

Translate text between 100+ languages with AI. POST JSON {"text": "...", "target": "French"} (language name or code such as fr, de, es, ja, zh, ar). Optional "source" language, otherwise it is detected. Up to about 12,000 characters of English (4,000 of Chinese/Japanese) per call. Keeps formatting such as Markdown and line breaks. Failed calls are not charged.

Is interest in a topic rising or falling? Wikipedia page views, worldwide news volume (GDELT) and Hacker News stories, each with its total and change over the window, plus an overall verdict. topic is the subject; days is the window (14-90, default 30); wikipedia_article sets the exact Wikipedia title when it differs from the topic. ?topic=AI agents&days=30

UK area profile for a postcode or postcode district (e.g. SW1A): local authorities, wards and constituencies, plus street-level crime in the latest published month within about a mile, counted by category and outcome. Official ONS and police data (OGL).

Official UK bank holidays (England & Wales, Scotland, Northern Ireland) from GOV.UK. Is a date a working day, the next holidays, working days between two dates, or the date N working days after a date (deadlines, SLAs, delivery estimates).

UK food hygiene ratings (Food Standards Agency) for restaurants, takeaways, shops and other food businesses: rating (0-5 or Pass/Improvement Required in Scotland), inspection date, hygiene/structural/management scores, address and location. Search by ?name=...&postcode=... or address. Official FSA data.

Sold house prices for any England or Wales postcode from HM Land Registry Price Paid data (1995 to date): each sale's price, date, street and town (never the house number or name), property type (detached, semi, terraced, flat), new build and tenure, plus median/average/min/max and yearly medians. Pass ?postcode=PL6 8RU. Official data, updated monthly.

UK postcode lookup: coordinates, country, region, local authority, ward, parish, parliamentary constituency, LSOA/MSOA and official ONS codes. Pass ?postcode=SW1A1AA, or ?lat=51.5&lon=-0.12 to find the nearest postcodes. Official ONS data via postcodes.io.

What does a fund own? An investment manager's latest SEC Form 13F portfolio: each US-listed position with shares, value and portfolio weight, plus what changed since the previous quarter (new, increased, decreased, sold out). Hedge funds, Berkshire Hathaway, banks, pension funds. Pass ?manager=Berkshire Hathaway (or a CIK) &limit=20.

Wallet profile on Base, Ethereum or Solana: native balance, token holdings with USD values (top 25), total portfolio value, whether it is a contract, ENS name, and transaction counts. Pass ?address=...&chain=base. For recent transactions, counterparties and balance changes use /wallet/deep.

Deep wallet report on Base, Ethereum or Solana: everything in /wallet (balances, tokens, USD value) plus recent transactions and token transfers, in/out direction, SOL and token balance changes, programs or methods used, top counterparties, failed transactions and last active time. For due diligence, copy-trading research and agent payments. Pass ?address=...&chain=base.

Screens a wallet or contract address before you pay, trade with or accept funds from it: sanctions (OFAC), theft/hacks, phishing, money laundering, mixers, scams, fake tokens and malicious contracts, with a verdict (high-risk, suspicious, clean). Base, Ethereum, Solana, BNB, Arbitrum, Polygon, Optimism, Avalanche. ?address=...&chain=ethereum

Live health check of any x402 endpoint before you pay it: is it up and answering 402, is the payment request valid, prices in USD per network, pay-to wallets, x402 version, Bazaar discovery metadata, response time, and its buyers in the Bazaar. Never pays the endpoint. Give the endpoint's URL and how it is called (GET or POST). For our own endpoints the answer comes from our in-process monitor (a Worker can't call its own address).

Describe a job in plain English, such as 'scrape a web page to markdown', and get the best working x402 services for it, ranked on fit, real buyers (30 days), our uptime and speed checks, and price, with reasons and how to call each. You can set a budget per call. Covers the whole x402 Bazaar catalogue: crypto, search, scraping, LLMs, enrichment and more. For a shortlist re-checked right now, use /x402/find/live.

Like /x402/find, but the shortlist is re-checked right now: we send each top candidate one unpaid request and keep only those answering with a valid x402 price quote, with live price and response time. Plain-English job in, such as 'web search api' with a budget per call; working services out. Never pays them.