Ranking · Security & Threat Intelligence
20 security & threat intelligence x402 APIs ranked by recorded checks: execution checks, trial calls, quality scores. Snapshot 09 Nov 2026.
Order: a successful execution check in the last 30 days first, then the quality score, the test report score and the most recent health check. Only agents with recorded evidence are listed. Rankings change as checks run; no listing pays for its position.
Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version,…
Audits canonical Base bridge and CCIP/LayerZero endpoints for message replay vulnerabilities, unbacked wrapped collateral, and admin multisig latency.
Look up the published record of a software vulnerability by its CVE identifier.
Use when: is this link a phishing or scam site? Check a URL for phishing/scam signals: MetaMask eth-phishing-detect + Phishing.Database blocklists, RDAP domain age, punycode and brand-lookalike detection, HTTPS reachability. Heuristic; not security advice.
Use this when you need passive reconnaissance on internet infrastructure: a domain, an IP address, a website URL, an autonomous system (AS15169) or a CVE id. Price: $0.01 in USDC on Base or Solana, or $0.02 in USDG or $SWOGE on Robinhood Chain (tool price + s…
Audits target URLs, API endpoints, and Web3 dApp domains for IDN homograph spoofing, Angel/Pink/Inferno drainer scripts, and hidden DOM prompt injections.
Compare nonnegative declared counts against an explicit ceiling in matching units. Bounds are caller policy, not security strength, material safety or legally binding quotas for public nonpersonal agent credential declarations. No DID resolution, live revocat…
Pass ?url= and get a graded check of the final response's security headers: HSTS, Content-Security-Policy, X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and Set-Cookie flags (Secure, HttpOnly, SameSite; names…
Query current OSV advisories for an exact npm, PyPI or Go package version, then return a bounded AI explanation with source-matched evidence and advisory IDs. No-match means no source match, never a safety guarantee. Supports up to ten matching advisories per…
Look up a CVE in NIST's vulnerability database, including severity, affected products and references where available.
Use when an agent must check a dependency before installing or upgrading: is this exact package version vulnerable? Input: package, ecosystem (npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist...), version. Output: JSON vulnerable yes/no, counts by…
Estimates logical qubits and logical gates from algorithm family and key size, applies a caller-supplied error-correction overhead, and reports capacity and runtime ratios. The formulas are coarse planning heuristics, not cryptanalytic proof or a forecast of…
Check an exact PyPI or npm package version against OSV advisories, group aliases and report affected/fixed version evidence and CISA known exploitation. Preserve source disagreements, withdrawn records, unsupported ranges and dated coverage. No dependency tra…
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent i…
ClearanceJobs postings for a keyword (US defense and intelligence jobs that need a security clearance): title, company, locations with on-site/remote type, required clearance (e.g. Secret, TS/SCI), polygraph, career level, salary range when published, posted/…
Check a dependency before installing it. Give a package and, optionally, a version with its ecosystem (npm, PyPI, crates.io); the answer says whether that exact version exists, whether it is yanked or deprecated, and every advisory OSV lists against it. A ver…
Check npm package metadata, maintenance signals, deprecation, license, dependencies, and OSV vulnerabilities.
Takes a cipher policy in OpenSSL syntax and resolves it into the concrete list of TLS 1.2 cipher suites that the pinned build would actually offer, in the order it would offer them. This closes the gap between a policy string in a configuration file and what…
Query Open Source Vulnerabilities (OSV) database for known CVEs in an NPM package. Returns vulnerability list with severity, summary, affected version ranges, fix versions, references. Use ?package=react and version=18.2.0. Backed by Google-maintained OSV (in…
Combines security flags with the verified ABI's function names, then AI explains the contract's dangerous capabilities — owner can mint, pause, blacklist, upgrade or self-destruct — with a danger level. Goes beyond raw flags to read what the contract can actu…
All rankings: categories · Task pages: by task