Audit text for malicious AI-skill patterns. Requires `content`. Nothing to audit — crawling, or discovering this endpoint cold? POST /audit/registry runs the same scanner over the newest servers in the official MCP registry: no input required, $0.005.

Scan the newest servers in the official MCP registry for supply-chain risk — no input required

Scan an entire public GitHub repo for malicious AI-skill/supply-chain patterns. Requires `repo`. No repo in mind? POST /audit/registry runs this same scanner over the newest servers in the official MCP registry: no input required, $0.005.

Fetch a URL and audit its content. Requires `url`. No URL to hand? POST /audit/registry runs the same scanner over the newest servers in the official MCP registry: no input required, $0.005.

Crawl a site from a start URL (same-domain, breadth-first) and return each page as clean Markdown

Resolve a domain's DNS records (A/AAAA/MX/NS/TXT/CNAME) and flag basic email/security posture

Extract structured metadata from a page: title, description, OpenGraph, JSON-LD, headings, links

Fetch a URL and grade its HTTP security headers (HSTS, CSP, X-Frame-Options, etc.)

Fetch a PDF by URL and return its text as Markdown-ish plain text, page by page

Fetch a URL and return its main content as clean Markdown (boilerplate stripped)

Fetch up to 10 URLs concurrently and return each as clean Markdown (bulk rate)

Parse an RSS/Atom feed into structured items (title, link, published, summary) — or auto-discover the feed from a site URL

Enumerate a site's URLs from robots.txt + sitemap.xml (sitemap-index aware) — map a domain before crawling it

Vet an x402 server or any URL for scam/phishing/trust in ONE call: transport, content-safety, domain, metadata + x402-compliance sub-scores, each with transparent evidence