All projects matching “scanned”

MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IMPORTANT tags, conceal-from-user, secret or side-channel asks, invisible Unicode, tool shadowing, payment injection). Fingerprints every tool (sha256) and diffs vs your last scan to

SEO and AEO website audit. Returns an audit ID and status URL while processing, then a report URL when completed. Check status approximately every 30 seconds.

Get YOUR x402 endpoint listed in this Bazaar - done for you, $99 one-time. You receive a deploy-ready x402 v2 kit generated for your stack (Next.js, Express, serverless; PHP via a free serverless function) with your wallet, price and discovery declaration baked in, plus a resumable listing_key that drives the automated pipeline via MCP (https://mudko.com/api/mcp): validate against Coinbase's own p

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findin

GitHub-Audit Repository Supply-Chain & Dependency Scanner: Audits open-source repositories for supply-chain risks, CVEs, and secret leaks.

Paid ($0.05). ALWAYS runs a fresh 25-check scan of the origin (non-settling GET/HEAD + benign empty-POST probes), bypassing the 24h cache — use free GET /v1/report to read the cached result. Concurrent requests for the same origin join the in-flight scan rather than double-scanning. Returns grade, score, per-check status + evidence + fix instructions, and a shareable report URL. Unreachable/broken

Pay-per-scan AI agent-readability scan. POST { "url": "https://…" } with an X-PAYMENT header to run a scan with no account or subscription. Two tiers: $0.02 (25 pages) and $0.25 (250 pages), USDC on Base.

Fast real-time news scan across 44+ curated domains (configs/search_domain_profiles.json), every item source-attributed. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The quick-scan tier below research.topic-deep-researcher's slow... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-bui

IP threat intelligence from first-party honeypot observations (not scraped blocklists): was this IP seen scanning, brute-forcing or probing a live honeypot, which traps it triggered (credential stuffing, webshell, exploit scans, scrapers), bot category and confidence. Works for IPv4 and IPv6.

Energy and climate compliance regulation scan across a curated 14-regulation database, with jurisdiction, urgency, and effective-date signals, including California SB 253 and SB 261 status. The scan step pairs with Viridis GHG inventory, sustainability disclosure, and clean-energy tax-credit engines.

Risk scan for one Solana SPL token. Call it before buying, listing, accepting or recommending a token you have not vetted. Checks mint and freeze authority, holder concentration, liquidity and wash volume; pro also traces holder wallets for bot farms, shared funders and launch snipers. Returns NO_FLAGS, WATCH or RISKY with an AI summary. basic $0.02, pro $0.05. Scans that fail or have bad input ar

Pre-share leak check ($0.005 USDC via x402). Scan text or an https text URL for your own terms (plain list, or salted-hash list sent per call, never stored) plus leak-shaped strings: emails, coordinates, IPs, AWS/GitHub/Slack/sk- keys, private keys, JWTs. Binary URLs are listed as unscanned. Max 10 MB, https only. Returns JSON hits with line numbers. A clean scan is not a clearance.

Live whale flow: USDC transfers ≥ $5M on Base with labeled counterparties — scanned continuously (freshness follows the RPC provider's limits; the response always states the block scanned to).

Ask a sports betting price question in plain English and get an answer from The Odds Gap's own scans of US sportsbooks and prediction-market exchanges: where a bet pays the most, a hedge, a parlay price, or a game's board. Each answer gives the time of the scan and a link to the matching page on theoddsgap.com. Information only: it places no bets and gives no picks. 21+. Gambling problem? Call 1-8

Base token safety snapshot: heuristic on-chain scan of an ERC-20 on Base (bytecode/proxy check, ERC-20 metadata, risky-function selector scan, owner/renounce check, Uniswap v3 / Aerodrome pool + liquidity discovery, best-effort sell simulation). Public RPC data only. Heuristic, not financial advice.

Web page to markdown (read URL as clean text) for LLM agents: main content only (no nav, cookie banners, ads), with title, description, author, dates, language, headings, internal/external links and JSON-LD types, PLUS a prompt-injection scan of the page (visible text, hidden HTML, comments, invisible Unicode) so your agent knows whether the content tries to give it orders. Fetched from Cloudflare

Is this Base token a scam or rug pull? Honeypot detector for a Base ERC-20: EIP-1967 proxy + upgradeability check, bytecode scan for mint/pause/blacklist/fee-setter/ownership, owner() renouncement, and a live eth_call state-override sim proving a real wallet can transfer() it. Returns risk_score (0-100) + verdict (clear/review/block) + honeypot/scam/rug flags. Use before an agent buys, holds or ap

Token risk verdict (age, liquidity, contract checks, suspicious-transfer scan) with per-claim evidence. x402-paid.

Paid ($0.01 USDC via x402). Top trending GitHub repos from the latest daily scan, sorted by stars — description, language, topics, license, forks, author followers, and README excerpt. Filterable by programming language. Response carries the scanDate provenance. Compute-first / settle-after — you are never charged for an error.

Scan text or a public page for prompt injection before your agent reads it: overrides, fake roles, exfiltration, tool abuse, payment asks, invisible Unicode/HTML-hidden instructions, base64. Rule-based evidence, signed and logged.

BNB Smart Chain: Full smart-contract security scan of an ERC-20 token: honeypot, buy/sell/transfer tax, mintable, proxy, hidden owner, self-destruct, pausable, blacklist/whitelist, tax-modifiable, owner and creator share, creator's past honeypots, CEX/DEX listings. GoPlus + honeypot.is simulation merged in one JSON. $0.02 per call.

MIDAX402: Evidence+ x402 intelligence with expanded corpus retrieval, local risk brief, contradiction scan and concrete action plan. We do not grade our own answer: the verdict is answered or needs_more_data (grounded in the corpus or not); evidence_grade (thin/moderate/broad) grades that evidence, auditable via retrieved_corpus_ids. confidence_score is DEPRECATED, still served as a band projectio

New pair scan seconds after launch: Uniswap v4 pools read straight off Base before any indexer has them - the launched token address, whether anyone has funded it yet, and whether its hook is a launchpad's or bespoke code shipped with this token

Liquidity pool data for agents scanning yield opportunities: TVL, APY, volume, and IL risk for the top 500 DeFi pools, filterable by protocol/chain/token, refreshed every 15 minutes. Category: data.

Observe public DNS, TLS and baseline response headers through HTTPS HEAD / on port443; no full-path scan or global trust assessment.

What can the owner of this Base contract do? Returns the admin selectors found and how many were not scanned. targetAddress required. Answered inline, no polling, with the Base block and hash it was read at. A first read of an address can take up to 60s: keep the connection open. Valid 600s. Payment implies a request for immediate execution. Terms (0x2134019c6388d3c598b4e33a69416a364cccccea4735ebc

Use before paying any x402 endpoint, so you don't pay a dead or mispriced one: checks it is alive, correctly payment-gated, its price/network/asset, latency, and whether it fits your max_price_usd. Sends one unpaid request, never pays. ~9% of paid listings we scanned were dead. Errors (never charged): 400 bad input, 422 source could not be fetched or parsed, 429 rate limited (30/min), 502 upstream

Rug Radar: new Solana token launches (fresh pump.fun mints, DexScreener profiles and boosts), each scanned for rug-pull and honeypot risk and ranked riskiest first, with a verdict, a 0-100 score, its main red flag and its listing time. Refreshed about every 10 minutes. Pass since=<cursor> from the last answer to get only tokens listed after it. Use it to screen new memecoin launches before a tradi

Smart contract security scan for AI agents: give a chain id and contract address, get Slither static-analysis findings (reentrancy, unchecked calls, arbitrary sends, etc.), proxy/upgradeability status and the list of owner/role-gated admin functions (mint, pause, blacklist, upgrade). Works on any Sourcify-verified contract on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB. Use before approving,

Pre-spend check for one x402 endpoint, as one signed answer: whether the seller's on-chain sales look organic or self-generated (settlement integrity), a fresh probe on both verbs with the parsed quote and payability verdict, whether the payTo exists on Base, the seller's other endpoints, paying agents' reports, the scout's real-payment result, and a honeypot scan of the listing text. Returns reco