{
  "x402Version": 2,
  "id": 10993,
  "slug": "10993",
  "resource": "https://agentbit.app/v1/security/url-threat",
  "description": "Screen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain nesting), a safe server-side redirect trace with cross-host detection, and an optional URLhaus malware-database lookup. Returns a 0-100 risk score with named flags. Honest scope: heuristics + public threat data, not a sandbox.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x4395C7e383b7e05665aad7f36ed77c01923Dd965",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "10000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "bazaar": {
      "info": {
        "description": "URL threat screening for agents that click links. Layer 1 — structural heuristics that catch most commodity phishing: IP-literal hosts, punycode/homoglyph hosts (xn--), embedded credentials (user@host tricks), plain-http, known URL shorteners, deep subdomain nesting, excessive length or percent-encoding. Layer 2 — a safe server-side redirect trace: the URL is followed hop by hop (max 5) with SSRF protection at every step and no body execution, reporting each hop's status and flagging redirects that land on a different host than they started (URLs whose redirect chain dives into private network space are flagged hard). Layer 3 — when a free abuse.ch Auth-Key is configured, the URL is checked against URLhaus, the live malware-distribution database; a listing raises the score to high with the threat type and reference link. Output is a 0-100 risk score, clear/review/high verdict and named flags. Honest scope: this is heuristic and public-threat-data screening, not sandbox detonation — a clear result is not proof of safety.",
        "errors": [
          {
            "code": "PAYMENT_REQUIRED",
            "description": "Missing or invalid payment — retry with a valid PAYMENT-SIGNATURE header",
            "retryable": true,
            "status": 402
          },
          {
            "code": "VALIDATION_ERROR",
            "description": "Request body does not match the input schema",
            "retryable": false,
            "status": 422
          },
          {
            "code": "RATE_LIMITED",
            "description": "Too many requests from this client",
            "retryable": true,
            "status": 429
          },
          {
            "code": "UPSTREAM_TIMEOUT",
            "description": "Upstream data source unavailable — safe to retry",
            "retryable": true,
            "status": 502
          }
        ],
        "input": {
          "body": {
            "url": "https://bit.ly/3example"
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "networks": [
          "eip155:8453"
        ],
        "output": {
          "example": {
            "disclaimer": "Heuristic and public-threat-data screening, not a sandbox detonation.",
            "flags": [
              "URL_SHORTENER"
            ],
            "host": "bit.ly",
            "redirect_trace": {
              "cross_host_redirect": true,
              "final_status": 200,
              "final_url": "https://example.com/",
              "hops": [
                {
                  "status": 301,
                  "url": "https://bit.ly/3example"
                },
                {
                  "status": 200,
                  "url": "https://example.com/"
                }
              ],
              "reachable": true
            },
            "risk": "clear",
            "risk_score": 15,
            "url": "https://bit.ly/3example",
            "urlhaus": {
              "checked": false,
              "note": "Set a free abuse.ch Auth-Key in Settings to enable the URLhaus lookup."
            }
          },
          "type": "json"
        },
        "pricing": {
          "amount": 0.01,
          "currency": "USDC",
          "firstCallFree": true,
          "model": "per-call",
          "quoteHint": "Send your wallet address in an X-BUYER-WALLET header on the unpaid request to receive your personalized (volume-discounted) quote.",
          "volumeDiscounts": [
            {
              "minCalls30d": 100,
              "percent": 10
            },
            {
              "minCalls30d": 1000,
              "percent": 20
            }
          ]
        },
        "reliability": {
          "measuredAt": "2026-09-06T13:16:27+00:00",
          "p50LatencyMs": 297,
          "p95LatencyMs": 297,
          "sampleSize": 1,
          "successRatePercent": 100,
          "windowDays": 30
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "description": {
            "type": "string"
          },
          "errors": {
            "items": {
              "properties": {
                "code": {
                  "type": "string"
                },
                "description": {
                  "type": "string"
                },
                "retryable": {
                  "type": "boolean"
                },
                "status": {
                  "type": "integer"
                }
              },
              "required": [
                "status",
                "code"
              ],
              "type": "object"
            },
            "type": "array"
          },
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "description": "URL Threat Check input. Screen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain nesting), a safe server-side redirect trace with cross-host detection, and an optional URLhaus malware-database lookup. Returns a 0-100 risk score with named flags. Honest scope: heuristics + public threat data, not a sandbox.",
                "properties": {
                  "url": {
                    "description": "Absolute http(s) URL to screen",
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "headers": {
                "additionalProperties": {
                  "type": "string"
                },
                "type": "object"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "queryParams": {
                "additionalProperties": {
                  "type": "string"
                },
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "networks": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          },
          "pricing": {
            "properties": {
              "amount": {
                "type": [
                  "number",
                  "null"
                ]
              },
              "currency": {
                "type": "string"
              },
              "firstCallFree": {
                "type": "boolean"
              },
              "maxAmount": {
                "type": "number"
              },
              "model": {
                "type": "string"
              },
              "quoteHint": {
                "type": "string"
              },
              "volumeDiscounts": {
                "items": {
                  "properties": {
                    "minCalls30d": {
                      "type": "integer"
                    },
                    "percent": {
                      "type": "number"
                    }
                  },
                  "required": [
                    "minCalls30d",
                    "percent"
                  ],
                  "type": "object"
                },
                "type": "array"
              }
            },
            "type": "object"
          },
          "reliability": {
            "properties": {
              "measuredAt": {
                "type": "string"
              },
              "p50LatencyMs": {
                "type": [
                  "integer",
                  "null"
                ]
              },
              "p95LatencyMs": {
                "type": [
                  "integer",
                  "null"
                ]
              },
              "sampleSize": {
                "type": "integer"
              },
              "successRatePercent": {
                "type": "number"
              },
              "windowDays": {
                "type": "integer"
              }
            },
            "required": [
              "successRatePercent",
              "sampleSize",
              "windowDays"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "agentbit.app",
  "lastUpdated": "2026-09-06T13:16:27.12Z",
  "quality": {
    "calls30d": 1,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-09-06T13:16:26.622Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "agentbit.app",
    "manifest_name": "agentbit.app",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}