Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header…
Images on a page with URL, alt text, declared size, lazy loading and format, counting images without alt text and flagging missing modern formats. For accessibility and…
All links on a page classified as internal or external, with anchor text, nofollow/sponsored, new-tab flags and the most linked external domains. For SEO, crawling and a…
Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, seq…
Pendle markets (fixed yield in DeFi): asset, maturity, days left, implied fixed APY (buying PT), LP APY and liquidity, on Ethereum, Arbitrum, Base, BNB and other chains.
Detect whether a contract is an upgradeable proxy (EIP-1967 transparent/UUPS, beacon, ZeppelinOS, EIP-1167 minimal) and return implementation, admin and beacon. Works on…
Search Solana tokens by name, symbol or mint with Jupiter: every match with verification, organic score, price, market cap, liquidity, holders and risk flags, to tell th…
Subdomains of a domain found in public Certificate Transparency logs (every TLS certificate issued): names, wildcard count and certificate dates. For asset inventory, au…
ERC-20 allowance lookup: how much a spender can move from an owner's balance, flagging unlimited approvals.
Follow the redirect chain of a URL (up to 10 hops): status code and time of each hop, final URL, domain changes and HTTPS-to-HTTP downgrades. Unmask short and affiliate…
Is a token's volume real or inflated (wash trading)? 0-100 organic score and verdict (organic, doubtful, inflated) from volume-to-liquidity turnover, number and size of…
Is a token's volume authenticity getting worse or better? Compares the current organic score, volume, trades and liquidity with snapshots taken ~1h, ~6h and ~24h ago: ST…
Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header…
Validate a Spanish Social Security affiliation number (12 digits: province, number, control) and return the province of registration. Computed locally; nothing stored.
Check whether a URL or domain is listed in abuse.ch URLhaus as a malware distribution site in the last 30 days: exact URL match and other malicious URLs on the same host…
Check an IP against public threat lists: botnet command-and-control servers (abuse.ch Feodo Tracker), Tor exit nodes and hijacked or spam networks (Spamhaus DROP). For f…
Check whether a URL or domain is listed in abuse.ch URLhaus as a malware distribution site in the last 30 days: exact URL match and other malicious URLs on the same host…
Addresses with the most native coin on an EVM chain (ETH on Ethereum, Base, Arbitrum, Optimism, zkSync; POL on Polygon): balance, name or label when known (exchanges, br…
Crypto market regime in one call: BTC and ETH trend vs 50/200-day averages, 30-day realized volatility, open-interest-weighted perp funding, Fear & Greed and stablecoin…
Which contracts a wallet has allowed to move its ERC-20 tokens: checks the chain's main tokens (or the ones you pass) over recent blocks plus common spenders (Uniswap ro…
Check up to 50 CVE IDs against CISA's Known Exploited Vulnerabilities (KEV) catalog. Returns membership, vendor/product, exploitation evidence, ransomware-use status and…
Crypto token risk brief: price action, liquidity, supply dilution, and red flags, summarized in plain English.
Top-selling x402 bazaar services by unique paying buyers in the last 30 days. Send {"limit":25}, optionally with {"query":"weather"} or {"max_price_usd":0.01}. Per listi…
Check an EVM wallet's live token/NFT approvals and get a plain-language verdict (SAFE, CAUTION or RISK) with an explanation
