utilpeek (Tanod) Unicode inspection: invisible, bidi and look-alike characters
utilpeek (Tanod) Unicode inspection: invisible, bidi and look-alike characters. Use when an agent must detect invisible, bidirectional or look-alike characters in a text.
by tanod.dev · discovered, not yet claimed by its owner · updated 2026-10-11
Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.
What it does
utilpeek (Tanod) Unicode inspection: invisible, bidi and look-alike characters. Use when an agent must detect invisible, bidirectional or look-alike characters in a text.
Tags: utilpeek · text · unicode · fx-rates · qr-code · bazaar · builder-code
Call contract
- Method
- POST
- Input
- json
- Output
- json
- Last paid call
- 2026-10-11
{
"text": "pаypal.com evil"
}{
"bidi": {
"controls": [
"PDF",
"RLO"
],
"trojan_source_risk": true,
"unterminated_lines": []
},
"categories": [
{
"category": "Ll",
"count": 13,
"name": "lowercase letter"
},
{
"category": "Cf",
"count": 2,
"name": "format"
},
{
"category": "Po",
"count": 1,
"name": "other punctuation"
},
{
"category": "Zs",
"count": 1,
"name": "space separator"
}
],
"combining": {
"first_flood_offset": null,
"flood": false,
"max_run": 0
},
"confusables": [
{
"char": "а",
"codepoint": "U+0430",
"looks_like": "a",
"looks_like_codepoints": [
"U+0061"
],
"name": "CYRILLIC SMALL LETTER A",
"script": "Cyrillic"
}
],
"invisible": [
{
"abbr": "RLO",
"codepoint": "U+202E",
"count": 1,
"kind": "bidi_control",
"name": "RIGHT-TO-LEFT OVERRIDE",
"positions": [
11
]
},
{
"abbr": "PDF",
"codepoint": "U+202C",
"count": 1,
"kind": "bidi_control",
"name": "POP DIRECTIONAL FORMATTING",
"positions": [
16
]
}
],
"length": 17,
"mixed_script_text": true,
"mixed_script_words": [
{
"offset": 0,
"scripts": [
"Cyrillic",
"Latin"
],
"skeleton": "paypal",
"word": "pаypal"
}
],
"normalization": {
"NFC": true,
"NFD": true,
"NFKC": true,
"NFKD": true
},
"reasons": [
"bidirectional embedding / override / isolate controls (Trojan Source, CVE-2021-42574)",
"words mixing scripts (possible homoglyph spoofing)"
],
"risk": "high",
"scripts": [
{
"count": 12,
"script": "Latin"
},
{
"count": 4,
"script": "Common"
},
{
"count": 1,
"script": "Cyrillic"
}
],
"source": {
"data": "Unicode 14.0.0 confusables.txt + Scripts.txt (UTS #39 / UCD), bundled unmodified",
"library": "own implementation + Python unicodedata",
"license": "Unicode License V3"
},
"unicode_version": "14.0.0",
"utf16_units": 17,
"utf8_bytes": 22
}Use with an agent
- Discover. Agents find this listing with
GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP toolsearch_resources, or/discovery/resources. - Inspect. Fetch
/resources/35779.jsonfor the price and payment options. - Pay. Call
GET https://tanod.dev/v1/text/unicode. The provider answers402with its payment requirements. An x402 client signs one of the options below and retries withPAYMENT-SIGNATURE. - Execute. The provider returns
200with the data. Agent Bazaar is not in the request path and never sees your payment.
For humans
You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, Polygon, Solana, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.
Pricing & payment
- Price
- $0.001 / request
- Protocol
- x402 v2
- Auth
- No account or API key. Pay per request.
- Networks
- Base, Polygon, Solana
- Demand
- 5 calls · 4 unique payers in 30d (public x402 Bazaar data)
x402 payment requirements
| Scheme | Network | Asset | Amount | Pay to | Timeout |
|---|---|---|---|---|---|
| exact | Base eip155:8453 | USDC | $0.001 | 0x593857A4a4F619543ea12394137C3004ce841720 | 300s |
| exact | Polygon eip155:137 | USDC | $0.001 | 0x593857A4a4F619543ea12394137C3004ce841720 | 300s |
| exact | Solana solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp | USDC | $0.001 | RMk9k3VC8dr4hhjgFh88rGhjAbzfBzHxJJ5n2fTcqus | 300s |
accepts[] (raw JSON)
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "1000",
"amountUsd": 0.001,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:137",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "1000",
"amountUsd": 0.001,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "RMk9k3VC8dr4hhjgFh88rGhjAbzfBzHxJJ5n2fTcqus",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "1000",
"amountUsd": 0.001,
"maxTimeoutSeconds": 300
}
]Schemas
Output schema (JSON Schema)
{
"properties": {
"example": {
"properties": {
"bidi": {
"type": "object"
},
"categories": {
"type": "array"
},
"combining": {
"type": "object"
},
"confusables": {
"type": "array"
},
"invisible": {
"type": "array"
},
"length": {
"type": "integer"
},
"mixed_script_text": {
"type": "boolean"
},
"mixed_script_words": {
"type": "array"
},
"normalization": {
"type": "object"
},
"reasons": {
"items": {
"type": "string"
},
"type": "array"
},
"risk": {
"enum": [
"low",
"medium",
"high"
],
"type": "string"
},
"scripts": {
"type": "array"
},
"skeleton": {
"type": "string"
},
"source": {
"type": "object"
},
"text": {
"type": "string"
},
"unicode_version": {
"type": "string"
},
"utf16_units": {
"type": "integer"
},
"utf8_bytes": {
"type": "integer"
}
},
"required": [
"risk",
"reasons",
"invisible",
"bidi",
"confusables"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}Example shape — generated from the schema, not a captured live response
{
"example": {
"bidi": {},
"categories": [
"value"
],
"combining": {},
"confusables": [
"value"
],
"invisible": [
"value"
],
"length": 0,
"mixed_script_text": true,
"mixed_script_words": [
"value"
],
"normalization": {},
"reasons": [
"string"
],
"risk": "low",
"scripts": [
"value"
],
"skeleton": "string",
"source": {},
"text": "string",
"unicode_version": "string",
"utf16_units": 0,
"utf8_bytes": 0
},
"type": "string"
}Examples
curl "https://tanod.dev/v1/text/unicode"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paidconst res = await fetch("https://tanod.dev/v1/text/unicode");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}import httpx
res = httpx.get("https://tanod.dev/v1/text/unicode")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerDetails
- Provider
- tanod.dev
- Endpoint
- https://tanod.dev/v1/text/unicode
- Machine-readable
/resources/35779.json