All projects matching “headers”

Find the cheapest WORKING x402 service for a task. Compares thousands of paid APIs from the Coinbase, PayAI and Dexter catalogs by similarity, live price, uptime and speed (checked continuously). Send the header "X-Free-Tier: 1" for 20 free requests per day. /v1/check is always free.

Send an HTTP request to any URL from our servers and receive the full response — including the status code, all response headers, and the body content. Supports GET, POST, PUT, PATCH, DELETE, and HEAD. Automatically follows up to 3 redirects. Useful for testing endpoints, verifying servers are responding correctly, debugging redirect chains, or fetching raw data without needing a local setup.

Pay-per-scan AI agent-readability scan. POST { "url": "https://…" } with an X-PAYMENT header to run a scan with no account or subscription. Two tiers: $0.02 (25 pages) and $0.25 (250 pages), USDC on Base.

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Create styled XLSX workbooks with typed cells, multiple worksheets, filters, frozen headers, numeric formats and cached formula totals. Input strings remain text, including strings beginning with =.

Scrapes a URL and returns structured JSON: title, meta tags, headings, paragraphs, links, tables, extracted emails and phone numbers, and word counts. Accepts a single 'url' or a list of 'urls' for batch scraping. Includes retry logic and anti-detection headers.

Returns a per-day download time series for an npm package over a period from keyless api.npmjs.org — the raw signal for trend and growth-rate detection. Lets autonomous agents compute momentum/decline and feed agent-to-agent dependency-selection scoring. Ranking surface for trajectory. First call FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

Website audit bundle for local business websites and lead qualification: performance (browser-measured), security headers and TLS, SEO basics, accessibility and AI-crawler visibility of one public page, with section scores, grades and prioritized findings, in one call.

Audit an HTTP/HTTPS URL for metadata leaks: server/framework headers, author/generator meta tags, HTML comments, and third-party trackers.

Real-time risk-weighted USDC lending APY on Base: Aave/Compound/Morpho read onchain, Moonwell/Euler/Fluid via DefiLlama, source tagged per reading (never estimated). EIP-712 signed by the payment-receiving address (see X-Signal-* headers), which also holds an ERC-8004 identity and attests readings on-chain via EAS. Verified per-asset accuracy is free at /accuracy.json; raw on-chain attestations at

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website

Generate a finished, professional invoice PDF from JSON — recipient and line items in, a ready-to-send application/pdf out. Layouts: standard, legal, creative. Totals and tax are computed server-side so the numbers always add up. First payment auto-creates a wallet profile (token + API key in response headers); returning wallets get sequential invoice numbering and can save a sender letterhead. US

Parse CSV into JSON rows keyed by trimmed snake_case headers. Offline. Amp port.

Use ping when you need a pass/fail verdict that a URL serves expected content: expected HTTP status (default 200), a required body substring, and/or an exact match on one JSON field. One automated fetch at request time, signed receipt with per-condition results. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402

HTTP endpoint health audit for one URL: status and redirect chain, latency p50/p95 over repeated samples, TLS certificate expiry and issuer, the response headers that matter, and a list of detected anomalies (missing HSTS/CSP/X-Content-Type-Options, expiring cert, weak TLS, CORS wildcard, insecure cookies, version disclosure, slow p95, redirect loops). Private, loopback and link-local targets are

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

Detect the technologies a website runs — CMS, ecommerce platform, analytics, marketing/CRM, JS framework, hosting/CDN, chat and payments — straight from its public HTML and HTTP headers. No browser, no proxies, no login. Built for sales targeting and competitive research.

Inspect a public webpage for automation readiness, integration links, forms, robots policy, and security headers.

One dated record row from the Receipts Index: what one AI engine answered for one check on one UTC date, as the businesses it named and the sources it showed. Returns the CSV header and one row; some fields are blank on some rows. Row ids are listed free at /v1/index and a free sample is at /v1/sample. A row id that does not exist returns 404 with no charge.

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.

x402 preflight: before your agent signs a payment, fetch a paywalled URL's 402 and lint it. Parses v1 bodies and v2 PAYMENT-REQUIRED headers, then checks each accepts[] option: known network, canonical USDC, EIP-712 domain (extra.name/version) that a signature will verify against, EIP-55 payTo, zero/contract payTo, amount sanity, timeout, testnet, resource-host mismatch. Returns ok/warn/block per

Lint any x402 endpoint before you pay it: fetches the unpaid 402 challenge (v1 body or v2 PAYMENT-REQUIRED header), decodes price/network/asset/payTo, flags non-USDC assets, testnets, missing bazaar metadata and malformed fields.

Verify a claimed USDC payment on Base: given a tx hash (or an x402 PAYMENT-RESPONSE header) and what you expect (payee, payer, amount, time window, confirmations), reads the chain and returns match / mismatch / not_settled / not_found with per-field checks, finality, the x402 EIP-3009 pattern, a self-payment flag and a second-RPC cross-check. Cannot show who owns an address or that a service was d

A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (/v1/x402-audit) — Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. (https://preflight.agentdiet.dev/v1/preflight/certify)

Capture point-in-time URL facts, response headers, a text excerpt, and a SHA-256 content hash for research and verification.

Return RDAP registration, subdomains, and HTTP headers for a domain.

Domain OSINT, TLS Certificate & Security Headers Recon (/v1/domain-osint) — Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (https://domain-osint.agentdiet.dev/v1/domain-osint)

Public domain DNS, mail configuration and HTTP security headers