All projects on Base matching “http”

Fetch a public https URL, compute SHA-256 of the response body, and report whether it changed vs a prior sha256/etag ($0.01 USDC via x402). Sticky: store sha256 and call again later. Optional previous_sha256, previous_etag, include_body_if_changed. https only — http, file, data, localhost, and private IPs rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Returns JSON { url, final_url, cont

Fetch a public https CSV URL and parse it into headers + rows ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects, max 5000 data rows (truncated with warning). Optional has_header (default true). Returns JSON { url, final_url, content_type, headers, rows, row_count, warnings }.

Fetch a public https URL that returns text and compute byte/char/line/word counts plus SHA-256 ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Rejects image/audio/video/octet-stream. Returns JSON { url, final_url, content_type, byte_length, char_count, line_count, word_count, sha256, warnings }.

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-paste fix values, and cookie flag issues.

Convert a public https URL that returns JSON to tidy markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Requires JSON content-type or a parseable JSON body. Returns JSON { url, final_url, content_type, markdown, warnings }.

Convert a public https URL to markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Returns JSON { url, final_url, title?, content_type, markdown, warnings }.

Unpaid probe of a public https URL for x402 payment requirements ($0.005 USDC). Never pays. Returns HTTP status, latency, whether 402/payment-requirements parse, networks, min price, schema flag. https only; caps ~12s, 200KB, 5 redirects. Factual only; as is, no guarantee. Not a rating or certification.

Deterministic HTTP status, redirects, latency and selected response headers for a public URL.

Public domain DNS, mail configuration and HTTP security headers

Return RDAP registration, subdomains, and HTTP headers for a domain.

Run a bounded deterministic preflight scan for possible private keys, secret assignments, permissive CORS, debug mode, insecure HTTP, and invalid JSON. Not a comprehensive security audit.

Domain OSINT, TLS Certificate & Security Headers Recon (/v1/domain-osint) — Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (https://domain-osint.agentdiet.dev/v1/domain-osint)

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

Detect the technologies a website runs — CMS, ecommerce platform, analytics, marketing/CRM, JS framework, hosting/CDN, chat and payments — straight from its public HTML and HTTP headers. No browser, no proxies, no login. Built for sales targeting and competitive research.

Fetch any public URL and report whether its HTTP 402 challenge is a schema-valid x402 v2 PaymentRequired, payable in Base USDC, and catalog-ready (bazaar discovery declaration + facilitator support).

HTTP POST /v1/web-extract with application/json body containing a public url string. Returns source-hashed clean Markdown, structured JSON, plain text, metadata and links. Safe public URLs only; strict redirect and size limits.

Fast European HTTP status and TLS preview

Safely follow bounded public HTTP redirects and compare the final URL with the expected target; return a deterministic verdict and reason code.

Provide a public domain, HTTP(S) URL or email to retrieve Google DNS and RDAP observations. Returns DNS record sets, provider DNSSEC AD flag, registration metadata, capture times and per-query gaps. Failed queries remain unknown rather than absent. AD and descriptive hygiene fields do not certify domain security, ownership or legitimacy.

Return one current Coinbase spot-product snapshot for an exact BASE-QUOTE product id, including venue price, 24-hour price change and provider-reported 24-hour product volume. Forest reads only Coinbase Advanced Trade public market data; it does not infer tickers, infer the provider volume denomination, aggregate venues, read an account or wallet, place orders, provide an executable quote, forecas

SWARM Read Page - Retrieve the content of a URL as clean, LLM-ready text (headings with #, lists with -; menus, scripts, styles and markup removed). Use when an agent needs to read a web page, article or docs page without paying model tokens for raw HTML: on 15 public pages we measured, the text was a median 97% smaller than the HTML (about 67,000 fewer tokens per page). Requires `url`; HTML or te

Use before spending tokens, money or crawler capacity fetching an unfamiliar web resource. Resolves redirects (manually, bounded, re-validated per hop) and returns deterministic HTTP/resource facts — final URL, status, content type and length, response time, a bounded HTML title/canonical peek, and a lightweight generic-bot robots.txt indication — so an agent can decide whether a normal web fetch

Call when you need a researched written brief on a topic (not instant). Delivered within 24h, usually same day: ~500 words default (max_words 50-1500), at least 3 cited public source links. Returns job id + dueBy now; poll GET /v1/jobs/:id (free) for result {title, summary, body_markdown, sources, word_count}. Public web sources only.

badhttp /402/pay: a real x402 v2 paywall for testing clients. Pay 0.01 USDC on Base mainnet and get a 200 with a PAYMENT-RESPONSE receipt and the transaction hash. Nothing else is sold; sibling endpoints under /402 misbehave on purpose.

Execute HTTPS requests reliably with automatic retries for rate limits, temporary server failures, network errors and timeouts. One $0.02 USDC payment creates one durable job with up to 8 attempts and a 24 hour lifetime.

Refund for transaction 0x65303d58e65b9314004cdf0438c5664fe9054a16481bc2a78ae00bffeb7e0904

Research PoC: catalog-timing comparison w/ live URL (rsrcheval_live_fs_t1791706212)