Autonomous x402 payment schema-escrow arbiter, spend firewall, failover & ERC-8004 Sybil oracle
Nothing to run from here
ScorpTech x402 API is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
90/100
tool-list score
112
tools declared
remote
at its publisher
—
calls last 7d
What it does
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http scorptech-x402-api-mcp https://scorptech.it.com/api/x402/mcp
# 2 — ask your agent for something these tools do
# headers_audit, email_auth, domain_intel and 109 more
ScorpTech x402 API costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
ITAll 3 servers
it3 servers
3 categories
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http scorptech-x402-api-mcp https://scorptech.it.com/api/x402/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
112 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Graded HTTP security-header audit of a URL: HSTS, CSP quality, XFO, nosniff, Referrer/Permissions/COOP/CORP/COEP, cookie flags, redirect chain, server info leaks, with fix recommendations. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/headers-audit
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Public http(s) URL or bare hostname to audit |
Email authentication & deliverability posture for a domain: SPF (qualifier, lookup count, duplicates), DMARC policy/rua/pct, DKIM probe across common selectors, MTA-STS, TLS-RPT, BIMI, MX; scored with actionable issues. Useful for spoofing-risk and vendor checks. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/email-auth
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Domain name, e.g. example.com |
One-call domain due-diligence: RDAP registration age/expiry/registrar, A/AAAA/NS/MX/CAA, live TLS certificate (issuer, expiry, SANs, trust), Certificate-Transparency subdomain enumeration, and risk flags (new domain, expiring cert, no CAA). Good for phishing/scam triage of links before an agent visits or pays them. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET htt
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Registrable domain, e.g. example.com |
Fetch and parse robots.txt plus discovered sitemaps for a domain: user-agents, allow/disallow samples, sitemap index vs urlset, URL counts and sample locs. Useful for crawl planning and AI agent politeness checks. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/robots-sitemap
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Domain to inspect |
Lightweight technology fingerprint from public HTML/headers: CMS, frameworks (Next/Nuxt/React/Vue), CDNs, analytics, payments, generator meta, script/stylesheet samples. No invasive probing. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/tech-stack
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Public http(s) URL |
Lightweight RDAP registration age lookup: registered/expiry dates, ageDays, daysToExpiry, registrar, status flags via rdap.org bootstrap. Faster/cheaper than full domain-intel when you only need age. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/rdap-age
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Heuristic phishing-likelihood score for a URL/domain: brand typosquat distance, subdomain depth, punycode, RDAP age, HTTPS reachability. Returns scored signals — not a verdict. Low Bazaar crowding. Price: $0.008 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/phishing-score
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | URL or domain to score |
Search NIST NVD CVE API 2.0 by product/keyword with optional CVSSv3 severity filter. Returns CVE ids, scores, vectors, descriptions and reference URLs. Public NVD data. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/cve-lookup
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product | string | yes | Product or keyword |
| severity | string | no | Optional LOW|MEDIUM|HIGH|CRITICAL |
npm or PyPI package risk/typosquat check: registry metadata, weekly downloads (npm), deprecation, license/repo presence, edit-distance to popular packages, and whether close-name variants already exist. Heuristic — not a malware scanner. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/package-risk
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ecosystem | string | yes | npm or pypi |
| name | string | yes | Package name |
GitHub repository health summary via public API: stars/forks/issues, license, languages, last push age, latest release & commit, heuristic healthScore and notes. Unauthenticated rate limits apply. Price: $0.008 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/github-health
| Parameter | Type | Required | Notes |
|---|---|---|---|
| repo | string | yes | owner/repo or github.com URL |
Extract Open Graph, Twitter Card, title/description, canonical, icons and JSON-LD @types from a public URL. Ideal for link unfurling agents. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/opengraph
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Fetch a public HTML page and convert main/article content to Markdown (Turndown). Scripts/styles stripped; output capped. Good for RAG/agent ingestion. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/url-markdown
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Validate JSON data against a JSON Schema (Ajv + formats). Body: { "schema": {...}, "data": {...} }. Returns valid boolean and error list. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/schema-validate
| Parameter | Type | Required | Notes |
|---|---|---|---|
| schema | object | yes | — |
| data | yes | — |
MX / mail-routing check: sorted MX with inferred provider (Google, M365, Proofpoint, etc.), A/AAAA, SPF presence, null-MX detection. Complements /v1/email-auth. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/mx-check
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
IP ASN + geolocation from free public sources (ipapi.co + RIPE Stat prefix-overview). Country/city/coords, ASN/org, announced prefix. Public IPs only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/ip-intel
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | Public IPv4 or IPv6 |
Decode a Solana mainnet transaction via public RPC: status, fee, compute units, parsed instructions, inner instructions, account keys, logs. No API key. Unique on Bazaar. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/solana-tx
| Parameter | Type | Required | Notes |
|---|---|---|---|
| signature | string | yes | Base58 tx signature |
Check Internet Archive Wayback Machine availability for a URL (closest snapshot timestamp + archived URL). Public availability API. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/wayback
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
All common DNS records for a domain via Cloudflare DNS-over-HTTPS: A, AAAA, NS, MX, TXT, CAA. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/dns-dump
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Certificate Transparency subdomain enumeration via crt.sh JSON API. Returns unique hostnames (capped) issued under the domain. Price: $0.008 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/ct-subdomains
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | — |
Follow HTTP redirects (max 10) with SSRF protections; report each hop status, Location, Server and Content-Type. Detect open-redirect chains and tracking bounces. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/redirect-chain
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
Fast HTTP GET probe: final URL, status, timing, response bytes, and a subset of interesting headers (server, cache, HSTS, CDN). Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/http-probe
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | — |
x402 preflight for AI agents: inspect any paid endpoint BEFORE paying. Fetches the unpaid 402, decodes PAYMENT-REQUIRED (v2 header or v1 body), normalises price to USD, lists networks/assets/payTo/feePayer, validates the offer and Bazaar discovery schema, checks PayAI and Coinbase CDP discovery listing, and returns an OK/RISKY/BROKEN verdict. Never pays the target. Price: $0.005 USDC per successfu
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | x402 endpoint URL |
| method | string | no | HTTP method (default GET) |
| body | string | no | optional JSON body for POST probes (default {}) |
Fetch a public web page and return its main content as clean plain text (boilerplate stripped, lists as bullets, tables tab-separated) plus title, description, language, word count. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/web-to-text
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Public http(s) URL |
| mode | string | no | main (default) or full |
| max_chars | integer | no | 500-500000, default 100000 |
Extract every link on a page as absolute URLs (RFC 3986 resolution, <base href> aware), classified internal/external/other with anchor text, rel and nofollow. Options: filter, dedupe, max_links. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/url-links-extract
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Public http(s) URL |
| filter | string | no | all (default) | internal | external | other |
| dedupe | boolean | no | Dedupe ignoring #fragment (default true) |
| max_links | integer | no | 1-5000, default 1000 |
Generate a QR code (PNG or SVG, base64 + data URI) for any UTF-8 text up to 2953 bytes. Options: ecc L|M|Q|H, size (px/module), margin, format png|svg, fg/bg hex colours. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/qr-generate
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | Text/URL to encode, 1-2953 bytes UTF-8 |
| ecc | string | no | L | M (default) | Q | H |
| size | integer | no | Pixels per module 1-64, default 8 |
| margin | integer | no | Quiet-zone modules 0-16, default 4 |
| format | string | no | png (default) or svg |
| fg | string | no | Foreground hex, default 000000 |
| bg | string | no | Background hex, default ffffff |
Text statistics: characters, words, unique words, sentences, paragraphs, reading/speaking time, Flesch readability (English), language detection (27 languages/scripts), top keywords. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/text-stats
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | Text to analyse (query string; keep under ~6 KB for URL limits) |
| wpm | integer | no | Reading speed 50-1000, default 238 |
| top | integer | no | Top keywords 0-50, default 10 |
Convert an HTML string to clean Markdown (GFM tables, fenced code, nested lists). No fetch. Body: { "html": "...", "base_url"?: "https://...", "extract_main"?: false }. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/html-to-markdown
| Parameter | Type | Required | Notes |
|---|---|---|---|
| html | string | yes | HTML to convert (JSON body; the service caps request bodies at 256 KB) |
| base_url | string | no | Optional http(s) URL used only to absolutise links (never fetched) |
| extract_main | boolean | no | Strip boilerplate, keep main content (default false) |
| include_images | boolean | no | default true |
| include_links | boolean | no | default true |
Inspect an image without decoding pixels: format, dimensions (EXIF-orientation aware), megapixels, animation, sha256, EXIF summary (camera, exposure, GPS). Body: { "image": "<base64>" }. Max ~190KB input image (the service caps POST bodies at 256KB, base64 included). Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/image-info
| Parameter | Type | Required | Notes |
|---|---|---|---|
| image | string | yes | Base64 / data URI / URL-safe base64 image (JPEG, PNG, GIF, WebP, ...); max ~190KB decoded (256KB POST body limit) |
| include_exif_tags | boolean | no | Include raw EXIF tag map (default true) |
Resize / convert an image (GD): width/height up to 4096, fit contain|cover|fill|inside, output png|jpeg|webp|gif, quality, EXIF auto-orient, metadata stripped. Body: { "image": "<base64>", "width": 256 }. Max ~190KB input image (the service caps POST bodies at 256KB, base64 included). Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402
| Parameter | Type | Required | Notes |
|---|---|---|---|
| image | string | yes | Base64 / data URI image (max ~190KB decoded due to the 256KB POST body limit; max 40 MP source) |
| width | integer | no | 1-4096 (width or height required) |
| height | integer | no | 1-4096 |
| fit | string | no | contain (default) | cover | fill | inside |
| format | string | no | same (default) | png | jpeg | webp | gif |
| quality | integer | no | 1-100, default 85 |
| background | string | no | Hex colour used when flattening alpha to JPEG |
| auto_orient | boolean | no | Apply EXIF orientation (default true) |
SEC EDGAR filings search: latest 10-K/10-Q/8-K (or any form) for a company by name, ticker or CIK, with direct document and filing-index links; or full-text search across all EDGAR filings since 2001 (?q=), optionally scoped to one company, form types and a date range. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/sec-edgar-sea
| Parameter | Type | Required | Notes |
|---|---|---|---|
| company | string | no | Company name, ticker (AAPL, BRK-B) or CIK (320193). Required unless q is given. |
| q | string | no | Full-text search phrase (EDGAR FTS, quotes for exact phrase), e.g. "share repurchase" |
| forms | string | no | Comma-separated form types, e.g. 10-K,10-Q,8-K,S-1,DEF 14A, or "all". Default 10-K,10-Q,8-K for company mode, all for full-text. |
| from | string | no | Earliest filing date YYYY-MM-DD |
| to | string | no | Latest filing date YYYY-MM-DD |
| limit | integer | no | Max filings (1-100, default 10) |
Insider trading from SEC Form 4: the latest Form 4 filings for a ticker or CIK parsed from EDGAR ownershipDocument XML. Reporting owner and role, every transaction (code + meaning, shares, price, value, acquired/disposed, holdings after, derivative details) and open-market buy/sell totals. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/
| Parameter | Type | Required | Notes |
|---|---|---|---|
| company | string | yes | Ticker, CIK or company name of the issuer (or an insider's CIK). Aliases: ticker, cik |
| limit | integer | no | Number of most recent Form 4 filings to parse (1-25, default 10) |
| type | string | no | Filter transactions: all (default), buys (acquired), sells (disposed), open-market (codes P/S only) |
Company profile from its own website: name, description, logo, social profiles, contact emails/phones, postal address, schema.org Organization JSON-LD, OpenGraph/Twitter cards, plus RDAP domain registration basics (registered, expires, registrar). SSRF-safe fetch of the public page. Price: $0.03 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Company website URL or bare domain (public http(s) only) |
US weather from the National Weather Service for a latitude/longitude: 7-day (or hourly) forecast periods with temperature, precipitation chance, wind and text forecast, plus all active NWS watches, warnings and advisories for that point. US states, territories and coastal waters only. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402
| Parameter | Type | Required | Notes |
|---|---|---|---|
| lat | number | yes | Latitude (-90..90), US location |
| lon | number | yes | Longitude (-180..180), US location |
| units | string | no | us (F, mph; default) or si (C, km/h) |
| hourly | boolean | no | true for the next 48 hourly periods instead of 14 day/night periods |
Search arXiv papers: title, authors, full abstract, categories, dates, DOI/journal ref and direct abs + PDF links. Plain keywords or arXiv field syntax (ti:, au:, abs:, cat:, AND/OR), optional category filter and sort by relevance or date. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/arxiv-search
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | Keywords, or arXiv syntax like ti:transformer AND au:vaswani |
| category | string | no | arXiv category filter, e.g. cs.AI, cs.CL, math.CO |
| sort | string | no | relevance (default), submitted or updated (newest first) |
| limit | integer | no | Max papers (1-50, default 10) |
| start | integer | no | Offset for paging (default 0) |
Recent earthquakes from the USGS: filter by bounding box or center point + radius, minimum magnitude and time window (last N days or start/end dates). Returns magnitude, place, time, coordinates, depth, tsunami flag, PAGER alert, felt reports and USGS event links. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/earthquakes
| Parameter | Type | Required | Notes |
|---|---|---|---|
| minlat | number | no | Bounding box south latitude (use all four box params) |
| maxlat | number | no | Bounding box north latitude |
| minlon | number | no | Bounding box west longitude |
| maxlon | number | no | Bounding box east longitude |
| lat | number | no | Circle center latitude |
| lon | number | no | Circle center longitude |
| radiusKm | number | no | Circle radius in km (default 250, max 20001.6) |
| minmag | number | no | Minimum magnitude (default 2.5) |
| days | integer | no | Look-back window in days when start is not set (1-365, default 7) |
| start | string | no | Start date YYYY-MM-DD |
| end | string | no | End date YYYY-MM-DD |
| limit | integer | no | Max events (1-500, default 50) |
| order | string | no | time (newest first, default) or magnitude |
Public holidays for 100+ countries (optionally one state/region) and business-day math in one call: list holidays for a year, add or subtract N business days, check if a date is a business day, or count business days between two dates, skipping weekends (configurable, e.g. fri,sat) and public holidays. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptec
| Parameter | Type | Required | Notes |
|---|---|---|---|
| country | string | yes | ISO 3166-1 alpha-2 country code, e.g. US, GB, DE |
| op | string | no | holidays (default) | add | is-business-day | count |
| year | integer | no | Year for op=holidays (default current year) |
| date | string | no | YYYY-MM-DD for op=add and op=is-business-day |
| days | integer | no | Business days to add for op=add (negative subtracts, max +/-1000) |
| start | string | no | Range start YYYY-MM-DD for op=count (inclusive) |
| end | string | no | Range end YYYY-MM-DD for op=count (inclusive) |
| subdivision | string | no | ISO 3166-2 region to include regional holidays, e.g. US-CA, DE-BY |
| weekend | string | no | Weekend days, comma-separated (default sat,sun; e.g. fri,sat) or none |
Search Hacker News stories and comments (Algolia HN index): by relevance or newest first, with date range, story/comment/Ask HN/Show HN filter, author and minimum points. Returns title, URL, points, comment count, author, time, comment text and HN links. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/hn-search
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | Search text |
| type | string | no | all (default), story, comment, ask_hn, show_hn or poll |
| sort | string | no | relevance (default) or date (newest first) |
| from | string | no | Created on/after YYYY-MM-DD |
| to | string | no | Created on/before YYYY-MM-DD |
| author | string | no | HN username |
| minPoints | integer | no | Minimum points |
| limit | integer | no | Results per page (1-50, default 20) |
| page | integer | no | Page number (0-49) |
| exact | boolean | no | Disable typo tolerance (default true when sort=date, false otherwise) |
DNS propagation check: resolves one record type for a domain across Cloudflare 1.1.1.1, Google 8.8.8.8 and Quad9 9.9.9.9 (DNS-over-HTTPS, in parallel) and reports consensus, per-resolver answers, TTLs, rcodes and differences. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/dns-propagation
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Domain or hostname (IDN allowed) |
| type | string | no | Record type (default A) |
| resolvers | string | no | Comma-separated subset of cloudflare,google,quad9 (default all three) |
Inspect a live TLS certificate: subject, issuer, SANs, validity window, days to expiry, SHA-256 fingerprint, key type/size, full presented chain, negotiated TLS version/cipher, chain trust and RFC 6125 hostname match. Implicit-TLS ports 443/465/587/636/853/993/995/5223/8443. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/ssl-cer
| Parameter | Type | Required | Notes |
|---|---|---|---|
| host | string | yes | Hostname, host:port or URL (host is extracted). Public IPs allowed (no SNI). |
| port | integer | no | TLS port: 443 (default), 465, 587, 636, 853, 993, 995, 5223 or 8443 |
Validate an email address without sending mail: RFC 5321/5322 syntax, MX/A lookup (null-MX aware), disposable-domain detection (~10k domains), role-account and free-provider flags, typo suggestion (gmial.com -> gmail.com), overall verdict. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/email-validate
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | Email address to validate (max 320 chars) | |
| check_mx | boolean | no | Look up MX/A records (default true) |
Offline password strength audit (POST only, so the password never appears in a URL or access log; never echoed or stored): zxcvbn-style score 0-4, estimated guesses and entropy, crack-time estimates, weak patterns (common/breached passwords incl. l33t and reversed, keyboard walks, sequences, repeats, dates, personal info) and NIST SP 800-63B checks. Body: { "password": "...", "user_inputs"?: ["ali
| Parameter | Type | Required | Notes |
|---|---|---|---|
| password | string | yes | Password to evaluate, 1-256 chars (JSON body only; never returned) |
| user_inputs | array | no | Optional personal context (username, email, name) that should not appear in the password |
Offline format validator for up to 100 values: email, URL, IPv4/IPv6, domain, UUID (version/variant), credit card (Luhn + brand, number masked in output), IBAN (mod-97 + country length), phone (E.164), JSON, base64/base64url. POST JSON body only (never in the URL): single {"type","value"} or batch {"items":[{"type","value"},...]}. Price: $0.005 USDC per successful call (x402, Solana). Same tool ov
| Parameter | Type | Required | Notes |
|---|---|---|---|
| type | string | no | Single-item mode: format to check |
| value | string | no | Single-item mode: value to check |
| items | array | no | Batch mode: array (max 100) of {"type","value"} objects |
SOL and SPL token balances (classic SPL Token + Token-2022) for a Solana wallet address, via public Solana RPC. Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/sol-balance
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Solana wallet address (base58, 32 bytes) |
| include_zero | boolean | no | Include token accounts with a zero balance; default false |
| include_token2022 | boolean | no | Also query Token-2022 program accounts; default true |
| limit | integer | no | Max token rows returned (largest UI balance first); default 100 |
Solana SPL / Token-2022 mint metadata: decimals, total supply, mint & freeze authority, Token-2022 extensions, and name/symbol/uri from on-chain metadata (Token-2022 or Metaplex), with Jupiter token list fallback. Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/sol-token-meta
| Parameter | Type | Required | Notes |
|---|---|---|---|
| mint | string | yes | SPL token mint address (base58) |
| include_market | boolean | no | Add Jupiter token-list data (verified flag, tags, holder count, usd price); default false |
Heuristic risk screen for a Solana token mint: mint/freeze authority, Token-2022 extensions (permanent delegate, transfer hook/fee, default-frozen, pausable...), metadata mutability, holder concentration, DEX liquidity and pair age (DexScreener), Jupiter verification. Returns a 0-100 score with itemised flags. Read-only; not a security guarantee. Price: $0.01 USDC per successful call (x402, Solana
| Parameter | Type | Required | Notes |
|---|---|---|---|
| mint | string | yes | SPL / Token-2022 mint address (base58) |
| include_holders | boolean | no | Fetch top holders (getTokenLargestAccounts) for concentration analysis; default true |
Native ETH and ERC-20 token balances for an address on Ethereum, Base or Arbitrum via public RPC. Defaults to major tokens (USDC, USDT, WETH, DAI/ARB) or pass up to 20 token contracts. Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/evm-balance
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | 0x EVM address (EIP-55 checksum validated if mixed case) |
| chain | string | no | chain; default "eth" |
| tokens | string | no | ERC-20 contract addresses (JSON array or comma-separated). Omit for the chain default token set. (comma-separated) |
| include_defaults | boolean | no | Also include the default token set when tokens are given; default true |
| include_zero | boolean | no | Include tokens with zero balance; default true |
Decode an EVM transaction (Ethereum, Base, Arbitrum): status, block, timestamp, confirmations, from/to, value, gas used, effective gas price, fee, method selector name, and decoded ERC-20 Transfer/Approval events. Read-only, public RPC. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/evm-tx-info
| Parameter | Type | Required | Notes |
|---|---|---|---|
| hash | string | yes | 0x-prefixed 32-byte transaction hash |
| chain | string | no | chain; default "eth" |
Fiat currency exchange rate (ECB reference rates via Frankfurter, with ExchangeRate-API fallback for 150+ currencies), optional amount conversion and historical date. Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/fx-rate
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | yes | ISO-4217 base currency, e.g. USD |
| to | string | yes | ISO-4217 quote currency, e.g. EUR |
| amount | number | no | Amount of from to convert; default 1 |
| date | string | no | Historical date YYYY-MM-DD (ECB currencies only, 1999-01-04 onward) |
Resolve an ENS name to its Ethereum address (plus optional text records like avatar, url, com.twitter), or reverse-resolve an address to its forward-verified primary ENS name. Read-only, public RPC. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/ens-resolve
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | no | ENS name, e.g. vitalik.eth (ASCII names) |
| address | string | no | 0x address for reverse lookup (use instead of name) |
| texts | string | no | Text record keys to fetch on forward lookup, e.g. avatar,url,com.twitter (comma-separated) |
Geocode an address or place name to latitude/longitude (US Census Geocoder for US street addresses, Photon/OpenStreetMap worldwide), or reverse-geocode lat/lon to an address (with US county/tract). Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/geocode
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Address or place for forward geocoding |
| lat | number | no | Latitude for reverse geocoding |
| lon | number | no | Longitude for reverse geocoding |
| provider | string | no | provider; default "auto" |
| limit | integer | no | limit; default 3 |
| lang | string | no | Photon result language; default "en" |
Basic heuristic risk screen for a Solana or EVM (Ethereum/Base/Arbitrum) wallet: activity & age, bundled OFAC-SDN / mixer list matches for the address and recent counterparties, and (EVM) live token-approval exposure (unlimited allowances, approvals to EOAs or flagged spenders). Read-only; heuristic only, not a compliance determination or security guarantee. Price: $0.02 USDC per successful call (
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Solana base58 address or 0x EVM address (family auto-detected) |
| chain | string | no | EVM chain (ignored for Solana); default "eth" |
| deep | boolean | no | More history: Solana pages up to 5000 signatures and inspects 15 recent txs; EVM finds first outgoing tx block (~25 extra RPC calls); default false |
| lookback_blocks | integer | no | EVM log-scan window (capped per chain by what the keyless RPC allows) |
Sanctions screening of a person or company NAME against the official consolidated lists: US OFAC SDN + non-SDN, UK Sanctions List (FCDO/OFSI), EU Financial Sanctions Files and the UN Security Council Consolidated List, loaded from the official files (no third-party aggregator). Transliteration-aware fuzzy matching; returns scored matches with list source, programmes/regimes, aliases, dates of birt
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | Person or organisation name (any order, Latin or Cyrillic), 3-200 chars |
| type | string | no | Restrict to entity type: any (default), person, entity, vessel, aircraft |
| lists | string | no | Comma list of sources: ofac, uk, eu, un, or all (default) |
| minScore | number | no | Minimum similarity 0.5-1.0 (default 0.85) |
| limit | integer | no | Max matches returned (1-50, default 10) |
Institutional holdings from a fund manager's latest SEC 13F-HR: the information table parsed from EDGAR, aggregated by CUSIP (issuer, class, shares, USD value, portfolio weight, put/call, voting authority), with filing period, totals, amendment and recent-filing links. Look up by manager name or CIK, or pin a specific accession. Price: $0.02 USDC per successful call (x402, Solana). Same tool over
| Parameter | Type | Required | Notes |
|---|---|---|---|
| fund | string | yes | Investment manager name or CIK (e.g. Berkshire Hathaway, 1067983). Aliases: cik, manager |
| limit | integer | no | Top holdings to return by value (1-500, default 25) |
| accession | string | no | Specific 13F-HR accession number (e.g. 0001193125-26-352200); default = latest original 13F-HR |
US Treasury rates: the daily par yield curve (1M-30Y, from treasury.gov) with day-over-day change in bp, 2s10s spread and 3m10y inversion flag, optional TIPS real yield curve, plus Debt to the Penny (total public debt, debt held by the public, intragovernmental holdings) from the Fiscal Data API. Latest by default or as of a past date. Price: $0.01 USDC per successful call (x402, Solana). Same too
| Parameter | Type | Required | Notes |
|---|---|---|---|
| date | string | no | As-of date YYYY-MM-DD (latest published on or before it); default latest |
| curve | string | no | nominal (default), real, both or none |
| debt | boolean | no | Include Debt to the Penny (default true) |
Bulk domain availability: for up to 20 domains, asks the authoritative registry over RDAP (server chosen from the IANA RDAP bootstrap). RDAP 404 = available; registered names return registrar, IANA id, creation/expiry dates, status and nameservers. TLDs without RDAP fall back to a DNS NS check; subdomains are flagged. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domains | string | yes | Comma-separated domains, max 20 (ASCII/punycode). Alias: domain |
Validate an EU VAT number live against the European Commission VIES service: valid/invalid, plus registered trader name and address where the member state discloses them. Accepts IE6388047V style input or ?country= + number; GR is mapped to EL, XI = Northern Ireland. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/eu-vat-validate
| Parameter | Type | Required | Notes |
|---|---|---|---|
| vat | string | yes | VAT number with 2-letter prefix (spaces/dots allowed), e.g. IE6388047V, DE 811569869 |
| country | string | no | Optional 2-letter member state code when vat has no prefix |
IP blocklist reputation for up to 50 IPv4/IPv6 addresses: membership in the Tor exit list, Spamhaus DROP/DROPv6, abuse.ch Feodo Tracker botnet C2 and FireHOL level1 (cached published lists), with matched range/SBL reference, categories and a simple 0-100 risk score. Blocklist membership only; complements /v1/ip-intel (geo/ASN). Price: $0.01 USDC per successful call (x402, Solana). Same tool over H
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ip | string | yes | One or more public IPs, comma-separated (max 50). Alias: ips |
CISA Known Exploited Vulnerabilities check: is a CVE (or up to 100) in CISA's KEV catalog, with date added, federal remediation due date, past-due flag, known ransomware use, required action and CWEs. Or search the catalog by vendor/product, recently added (?days=) or ransomware use. Complements /v1/cve-lookup (NVD). Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET h
| Parameter | Type | Required | Notes |
|---|---|---|---|
| cve | string | no | CVE id(s), comma-separated (max 100) |
| vendor | string | no | Search: vendor/project substring (e.g. Microsoft) |
| product | string | no | Search: product substring |
| days | integer | no | Search: added in the last N days (1-3650) |
| ransomware | boolean | no | Search: only entries with known ransomware campaign use |
| limit | integer | no | Search: max results (1-500, default 50) |
FIRST EPSS exploit-prediction scores for up to 100 CVEs: probability of exploitation in the next 30 days, percentile rank and a simple band, for the latest model run or a past date. Complements /v1/cve-lookup and /v1/cisa-kev for vulnerability prioritisation. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/epss-score
| Parameter | Type | Required | Notes |
|---|---|---|---|
| cve | string | yes | CVE id(s), comma-separated (max 100) |
| date | string | no | Historical score date YYYY-MM-DD (from 2021-04-14); default latest |
HSTS preload check for a domain: current status on the Chromium preload list (hstspreload.org), the official preloadable errors/warnings, and our own live checks of the site's HSTS header (max-age >= 1 year, includeSubDomains, preload, single header) and HTTP->HTTPS same-host redirect, fetched SSRF-safely. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scor
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Registrable domain, e.g. example.com |
Macro indicators by country and year: GDP, real GDP growth, GDP per capita, inflation, unemployment, population, government debt and current account, side by side from the World Bank (WDI actuals) and the IMF World Economic Outlook (DataMapper, incl. projections). Up to 10 countries (ISO2/ISO3) and 8 indicators per call. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: G
| Parameter | Type | Required | Notes |
|---|---|---|---|
| country | string | yes | ISO 3166 alpha-2 or alpha-3 codes, comma-separated (max 10), e.g. US,DEU,JP |
| indicators | string | no | Comma list from: gdp, gdp_growth, gdp_per_capita, inflation, unemployment, population, government_debt, current_account (default gdp,gdp_growth,inflation,unemployment) |
| from | integer | no | First year (default to-5) |
| to | integer | no | Last year (default current year; IMF projections up to +5) |
| source | string | no | both (default), worldbank or imf |
Known vulnerabilities for ONE package version from OSV.dev (GitHub Advisory DB, PyPA, Go, RustSec, OSS-Fuzz, distro feeds): advisory id + CVE aliases, severity (GHSA label or computed CVSS v3 base score), CVSS vectors, CWEs, fixed versions, a heuristic minimal safe upgrade, and links. npm, PyPI, Go, crates.io, Maven, Packagist, RubyGems, NuGet, Pub, Hex, distros. Use POST for a whole dependency li
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ecosystem | string | no | npm, PyPI, Go, crates.io, Maven, Packagist, RubyGems, NuGet, Pub, Hex, CRAN, Debian:12, ... (aliases like pip, cargo, composer, gem accepted) |
| package | string | no | Package name (Maven: group:artifact, Go: module path). Alias: name |
| version | string | no | Installed version; omit to list every advisory for the package |
| purl | string | no | Alternative to ecosystem+package: a package URL such as pkg:pypi/jinja2@2.4.1 |
| details | boolean | no | Include full advisory fields (default true) |
Dependency vulnerability scan (SCA) via OSV.dev querybatch: send up to 500 packages, or paste a lockfile (package-lock.json, yarn.lock, composer.lock, requirements.txt, Pipfile.lock, poetry.lock, uv.lock, Cargo.lock, go.mod, go.sum, Gemfile.lock; auto-detected). Returns a severity summary plus, per vulnerable package, advisories with CVE aliases, CVSS, fixed versions and a heuristic safe upgrade.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| packages | array | no | Array of {ecosystem, name, version} or {purl} objects (max 500) |
| lockfile | string | no | Alternative: the full text of a lockfile/manifest |
| lockfileType | string | no | Optional override: package-lock.json, yarn.lock, composer.lock, requirements.txt, Pipfile.lock, poetry.lock, uv.lock, Cargo.lock, go.mod, go.sum, Gemfile.lock |
| details | boolean | no | Fetch full advisory details (default true; up to 60 per call, cached) |
| onlyVulnerable | boolean | no | Return only vulnerable packages (default false) |
Validate an IBAN offline: ISO 7064 mod-97 checksum, per-country length and BBAN structure from the SWIFT IBAN registry (100+ countries plus national/experimental ones), national check digits for BE, ES, FR (+territories), IT/SM and NO; returns country, SEPA membership, bank code, branch code and account number, and the expected check digits on a typo. Optional BIC/SWIFT structure check (ISO 9362)
| Parameter | Type | Required | Notes |
|---|---|---|---|
| iban | string | no | IBAN, spaces/dashes allowed (max 64 chars) |
| bic | string | no | Optional BIC/SWIFT code (8 or 11 chars); can be given alone |
Wikipedia in one call: search any of 340+ language editions (titles, descriptions, snippets, thumbnails) and get the top hit's summary, or fetch a summary by exact title. Returns title, short description, lead extract, canonical URL, thumbnail/lead image, Wikidata id, coordinates and last-modified, with the CC BY-SA attribution block. Price: $0.005 USDC per successful call (x402, Solana). Same too
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search text (alias: query) |
| title | string | no | Exact article title for a direct summary (redirects followed); use instead of q |
| lang | string | no | Wikipedia language code (default en), e.g. de, fr, ja, simple |
| limit | integer | no | Search results 1-20 (default 5) |
| summary | boolean | no | Also fetch the top result's summary (default true) |
Search PubMed biomedical literature via NCBI E-utilities (esearch + esummary + efetch): PMID, title, authors, journal, publication date, volume/issue/pages, DOI, PMCID, publication types; abstracts only on request (abstracts=true, off by default since they may be publisher-copyrighted; structured sections kept). Full PubMed query syntax ([MeSH], [Author], AND/OR), relevance or newest-first, public
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | PubMed query (alias q); field tags like [MeSH], [au], [ti] allowed |
| limit | integer | no | Articles 1-50 (default 10) |
| sort | string | no | relevance (default) or date |
| from | string | no | Earliest publication date YYYY[-MM[-DD]] |
| to | string | no | Latest publication date YYYY[-MM[-DD]] |
| abstracts | boolean | no | Include abstracts (default false; one extra NCBI call; abstracts may be publisher-copyrighted) |
Find a website's RSS/Atom/JSON feeds and read the latest items: parses <link rel="alternate"> tags, likely feed links and (if none) probes common feed paths, then parses the feed (RSS 2.0, RSS 1.0/RDF, Atom 1.0, JSON Feed) into clean JSON items with title, link, published date (ISO), author, summary, categories and enclosure. Also accepts a feed URL directly. SSRF-safe fetches. Price: $0.005 USDC
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Site URL or feed URL (http/https, public hosts only) |
| items | integer | no | Latest items to return 0-50 (default 10; 0 = discovery only) |
| probe | boolean | no | Probe common feed paths when the page declares none (default true) |
Decode EVM function selectors, calldata and event topics: looks up 4-byte selectors (or 32-byte event topics) in 4byte.directory plus a built-in table of well-known signatures, re-hashes every candidate with Keccak-256 to drop bad entries, and for full calldata ABI-decodes the arguments (address with EIP-55 checksum, uint/int as exact decimal strings, bool, bytes, string, arrays, tuples), ranking
| Parameter | Type | Required | Notes |
|---|---|---|---|
| selector | string | no | 4-byte function selector, e.g. 0xa9059cbb |
| calldata | string | no | Full transaction input data (0x...), decoded against the candidates |
| topic | string | no | 32-byte event topic0 hash |
| signature | string | no | A signature like transfer(address,uint256) to hash into its selector/topic |
| limit | integer | no | Max candidates 1-50 (default 10) |
Extract the main article from a web page (Readability-style content scoring, no headless browser): clean body text with paragraph breaks plus title, byline, site name, published/modified dates, language, excerpt, lead image, word count and reading time. Navigation, ads, share bars, comments and related-links blocks are stripped; JSON-LD articleBody is used when it is fuller. SSRF-safe fetch. Price
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Article URL (http/https, public hosts only) |
| maxChars | integer | no | Text cap 500-100000 characters (default 20000) |
| paragraphs | boolean | no | Also return the text as a paragraphs array (default false) |
Scholarly search over OpenAlex (250M+ works): works with title, authors + ORCID + institutions, year, venue, DOI, citation count, open-access status + OA URL and reconstructed abstract; or authors (works, citations, h-index, institution, topics) or institutions (country, ROR, works, citations). Year range, open-access filter, sort by relevance/citations/date. Falls back to Crossref for works if Op
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | yes | Search text (alias query) |
| type | string | no | works (default), authors or institutions |
| limit | integer | no | Results 1-25 (default 10) |
| page | integer | no | Page 1-50 (default 1) |
| from | integer | no | works: earliest publication year |
| to | integer | no | works: latest publication year |
| oa | boolean | no | works: only open-access (true) or closed (false) |
| sort | string | no | relevance (default), cited, or date (works only) |
| abstracts | boolean | no | works: include abstract (default true) |
Convert data between CSV, TSV, JSON, YAML and XML in one call (auto-detects the input format). CSV header handling and delimiter detection, type inference (numbers, booleans, null), nested objects flattened to dotted CSV columns, XML attributes as @keys and repeated elements as arrays, safe YAML subset (no anchors/tags), optional spreadsheet formula-injection guard. Body: {input, from, to, options
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input | string | yes | The document text (or, for JSON, the value itself) |
| from | string | no | auto (default), csv, tsv, json, yaml, xml |
| to | string | yes | csv, tsv, json, yaml or xml |
| options | object | no | header (default true), inferTypes (true), pretty (true), delimiter (, ; | ), rootName (root), itemName (item), flatten (true), spreadsheetSafe (false) |
Security posture of a public GitHub repository from the OpenSSF Scorecard API: aggregate 0-10 score and rating, every check (Code-Review, Branch-Protection, Dangerous-Workflow, Token-Permissions, Pinned-Dependencies, Signed-Releases, Vulnerabilities, SAST, Fuzzing, Security-Policy, ...) with score, risk level, status and reason, a list of failing important checks, plus GitHub signals: SECURITY.md
| Parameter | Type | Required | Notes |
|---|---|---|---|
| repo | string | yes | owner/name or https://github.com/owner/name |
| details | boolean | no | Include up to 10 raw Scorecard detail lines per check (default false) |
Convert a time between IANA time zones with DST awareness: local time, UTC offset, abbreviation and DST flag on both sides, the offset difference and day shift, and each zone's next DST/offset transition (when, which way, how much). Flags nonexistent (spring-forward gap) and ambiguous (fall-back) wall times. Accepts ISO 8601, HH:MM, epoch seconds/milliseconds or "now"; up to 10 target zones. Offli
| Parameter | Type | Required | Notes |
|---|---|---|---|
| time | string | no | ISO 8601 (2026-03-08T02:30:00, optional Z or +01:00), HH:MM (today), epoch seconds or milliseconds, or "now" (default) |
| from_zone | string | no | IANA zone the input wall time is in (default UTC); also accepts fixed offsets like +05:30. Alias: from |
| to_zone | string | yes | Target IANA zone, or a comma list of up to 10. Alias: to |
Explain a standard 5-field cron expression in plain English and list its next N run times (default 5, max 20) in any IANA zone, DST-correct. Supports lists, ranges, steps (*/n, a-b/n), month/weekday names, 0 or 7 = Sunday and @yearly/@monthly/@weekly/@daily/@hourly/@reboot; applies cron's day-of-month OR day-of-week rule and notes it. Rejects invalid and never-firing expressions with a precise rea
| Parameter | Type | Required | Notes |
|---|---|---|---|
| expr | string | yes | 5-field cron expression or macro, e.g. "*/15 9-17 * * mon-fri" or "@daily". Alias: cron |
| tz | string | no | IANA zone for the run times (default UTC) |
| count | integer | no | Number of next runs, 1-20 (default 5) |
| from | string | no | Start after this time (ISO 8601 / epoch; default now) |
Resolve a stock ticker (or CIK) to the SEC CIK, registrant name, exchange and sibling share classes from SEC EDGAR's company_tickers_exchange list, plus the issuer's Legal Entity Identifier (LEI) from GLEIF matched by normalised legal name, with match confidence, registration status, jurisdiction and alternatives. BRK.B / BRK-B forms accepted. Price: $0.01 USDC per successful call (x402, Solana).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ticker | string | no | Ticker symbol, e.g. AAPL or BRK.B. Alias: symbol |
| cik | string | no | Alternative: SEC CIK number |
| lei | boolean | no | Look up the LEI at GLEIF (default true) |
Federal contracts, IDVs, grants, loans and direct payments from USAspending.gov by recipient, awarding agency (name or abbreviation such as DOD, NASA, HHS), NAICS code or keyword, for a date range (default last 12 months). Returns the top awards by amount or start date with award id, recipient and UEI, amount, outlays, dates, agency and sub-agency, award type, NAICS/PSC and a link, plus the total
| Parameter | Type | Required | Notes |
|---|---|---|---|
| recipient | string | no | Recipient name, UEI or DUNS (free text) |
| agency | string | no | Awarding toptier agency name or abbreviation (DOD, NASA, HHS, VA, DHS, ...) |
| naics | string | no | NAICS code(s), comma-separated (contracts/idvs only) |
| keyword | string | no | Keyword search across award descriptions (min 3 chars). Alias: q |
| type | string | no | contracts (default), idvs, grants, loans, direct_payments, other |
| from | string | no | Start date YYYY-MM-DD (default 12 months ago; >= 2007-10-01) |
| to | string | no | End date YYYY-MM-DD (default today) |
| sort | string | no | amount (default) or date |
| limit | integer | no | Awards per page 1-50 (default 10) |
| page | integer | no | Page 1-100 |
FDA drug facts by brand/generic name or NDC from openFDA: label sections (boxed warning, indications, dosage, contraindications, warnings, adverse reactions, interactions, or any SPL field), FAERS adverse-event report totals with serious count and top reported reactions, and the latest enforcement recalls with class and reason. Not for clinical use; the response carries FDA's disclaimer. Price: $0
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | no | Brand or generic drug name (alias: drug) |
| ndc | string | no | Alternative: product NDC (0573-0164) or package NDC (0573-0164-30) |
| include | string | no | Comma list of label, events, recalls (default all) |
| sections | string | no | Comma list of openFDA label fields, or "all" (default: key safety sections) |
| limit | integer | no | Top adverse reactions to return, 1-25 (default 10) |
| maxChars | integer | no | Max characters per label section, 100-10000 (default 1200) |
Search ClinicalTrials.gov (API v2) by condition, keyword, location, sponsor, recruitment status (or open/closed) and phase. Returns NCT id, title, status, phases, study type, conditions, interventions, lead sponsor, start and completion dates, enrollment, results flag, a short summary and up to 5 sites (ranked by your location), with total count and a page token. Informational only, not medical ad
| Parameter | Type | Required | Notes |
|---|---|---|---|
| condition | string | no | Condition or disease, e.g. type 2 diabetes |
| term | string | no | Other keywords (drug, NCT id, ...). Alias: q |
| location | string | no | City, state or country |
| sponsor | string | no | Lead sponsor or collaborator |
| status | string | no | Comma list: open, closed, recruiting, not_yet_recruiting, active_not_recruiting, completed, terminated, ... |
| phase | string | no | Comma list: early1, 1, 2, 3, 4, na |
| sort | string | no | relevance (default), updated, start |
| limit | integer | no | Studies per page 1-50 (default 10) |
| pageToken | string | no | nextPageToken from a previous response |
Search the U.S. Federal Register (federalregister.gov) for rules, proposed rules, notices, presidential documents and executive orders by keyword, agency (name, short name such as EPA, or slug), type, publication date range and significance. Returns document number, title, type, agencies, action, abstract, citation, effective and comment-close dates, EO number and signing date, docket ids, RINs an
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Full-text search term. Alias: term |
| agency | string | no | Agency name, short name or slug (comma list up to 5) |
| type | string | no | Comma list: rule, proposed_rule, notice, presidential_document, executive_order |
| from | string | no | Published on/after YYYY-MM-DD |
| to | string | no | Published on/before YYYY-MM-DD |
| significant | boolean | no | Only significant (EO 12866) documents |
| order | string | no | newest (default), oldest, relevance (default with q) |
| limit | integer | no | Documents per page 1-50 (default 10) |
| page | integer | no | Page 1-50 |
Detect and redact PII in text: emails, phone numbers (E.164, NANP, keyword-anchored national), credit cards (Luhn + issuer prefix/length, brand), US SSNs (SSA validity rules) and IBANs (registry length + mod-97). Returns counts per type, findings with code-point offsets, confidence and masked values, and a redacted copy using stable labels ([EMAIL_1]) or inline masks. Raw values are only echoed wi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | Text to scan (max 200 KB) |
| types | array | no | Subset of email, phone, credit_card, ssn, iban (default all) |
| style | string | no | label (default, [EMAIL_1]) or mask (j***@example.com) |
| reveal | boolean | no | Include raw matched values in findings (default false) |
Decode a JWT (JWS or JWE header), POST only (token in the JSON body, never in a URL): header, claims, alg/kid, exp/nbf/iat status with leeway, aud/iss checks, and security findings (alg none, HMAC alg-confusion risk, jku/x5u/jwk header keys, missing exp, odd kid). Optionally verifies the signature against a JWKS URL you supply, or one discovered from the token's https iss via OpenID discovery (fet
| Parameter | Type | Required | Notes |
|---|---|---|---|
| token | string | yes | Compact JWT in the JSON body (a "Bearer " prefix is stripped). Alias: jwt |
| jwks_url | string | no | Optional JWKS (or single JWK) URL to verify the signature |
| discover | boolean | no | Verify via OpenID discovery from the https iss claim when no jwks_url is given |
| leeway | integer | no | Clock skew allowance in seconds, 0-600 (default 60) |
| aud | string | no | Expected audience to check |
| iss | string | no | Expected issuer to check |
Diff two texts: unified line diff byte-compatible with GNU diff -u (hunks, context, "No newline at end of file"), or word-level / character-level diff with [-removed-]{+added+} inline markup and merged ops. Myers shortest edit script with a patience fallback for very different inputs; options to ignore whitespace, case and CRLF/LF. Returns added/removed/unchanged counts and a similarity ratio. Off
| Parameter | Type | Required | Notes |
|---|---|---|---|
| a | string | yes | Original text (aliases: old, before) |
| b | string | yes | New text (aliases: new, after) |
| mode | string | no | unified (default, alias line), word or char |
| context | integer | no | Context lines for unified mode, 0-20 (default 3) |
| ignore_whitespace | boolean | no | Treat runs of whitespace as equal |
| ignore_case | boolean | no | Case-insensitive comparison |
| ignore_eol | boolean | no | Treat CRLF and LF as equal (default true) |
| a_label | string | no | Label for the --- header (default a) |
| b_label | string | no | Label for the +++ header (default b) |
Extract public business contact details from a website: email addresses (mailto, visible text incl. [at]/[dot] obfuscation, Cloudflare-protected, JSON-LD) tagged role/personal and same-domain, phone numbers (tel: links, JSON-LD, text), social profiles (LinkedIn, X/Twitter, Facebook, Instagram, YouTube, GitHub, TikTok, Mastodon, ...; share links ignored), JSON-LD organization name/address and conta
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Website URL or bare domain (http/https; ports 80, 443, 8080, 8443) |
| crawl | boolean | no | Also fetch likely contact/impressum/about pages on the same host (default true) |
| max_pages | integer | no | Total pages to fetch including the first, 1-4 (default 3) |
On-page SEO audit of one URL with a 0-100 score, letter grade and prioritised issues (high/medium/low): title and meta description length, robots meta and X-Robots-Tag noindex, canonical, lang, viewport, charset, favicon, H1/heading outline, image alt coverage, internal/external/nofollow links, OpenGraph and Twitter cards, JSON-LD/microdata types, hreflang, mixed content, word count, plus robots.t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Page URL or bare domain (http/https) |
| robots | boolean | no | Also fetch robots.txt and test the URL against it (default true) |
Worldwide weather forecast for any latitude/longitude from MET Norway Locationforecast 2.0 (the Norwegian Meteorological Institute; CC BY 4.0): current conditions (temperature, humidity, wind speed and direction, pressure, cloud cover, next-hour precipitation, condition text) and up to 9 daily summaries (min/max, precipitation total, max wind, dominant condition), optional hourly series, metric or
| Parameter | Type | Required | Notes |
|---|---|---|---|
| lat | number | yes | Latitude, decimal degrees (-90..90) |
| lon | number | yes | Longitude, decimal degrees (-180..180) |
| altitude | integer | no | Optional ground altitude in metres (improves temperature in mountains) |
| days | integer | no | Daily summaries 1-9 (default 3) |
| units | string | no | metric (default) or imperial |
| hourly | boolean | no | Include the hourly series for the requested days (default false) |
| tz | string | no | IANA zone used to group days and format local times (default UTC) |
Trending new GitHub repositories: repos created in the last day, week or month ranked by stars (GitHub REST search API), filterable by language, topic and minimum stars. Returns full name, URL, description, language, topics, stars, forks, open issues, licence, created/pushed dates, owner type and a stars-per-day velocity. Cached 30 minutes. Uses the public API (not HTML scraping). Price: $0.01 USD
| Parameter | Type | Required | Notes |
|---|---|---|---|
| since | string | no | daily, weekly (default) or monthly window for repo creation date |
| language | string | no | GitHub language name, e.g. python, typescript, rust |
| topic | string | no | GitHub topic, e.g. llm, mcp, agents |
| min_stars | integer | no | Minimum stars (default 0) |
| limit | integer | no | Repos to return 1-30 (default 10) |
Repair broken or LLM-style JSON into valid JSON: strips markdown fences and surrounding prose, comments, trailing/missing commas, single or smart quotes, unquoted keys and values, Python/JS literals (True/None/undefined), NaN/Infinity, unescaped inner quotes and control characters, truncated output (closes open strings/arrays/objects) and mismatched brackets. Reports every fix applied, the origina
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | The broken JSON (aliases: json, input). Max 200 KB |
| query | string | no | Optional JSONPath to evaluate on the repaired value |
| pretty | boolean | no | Also return the repaired JSON pretty-printed (default false) |
Sentiment analysis with VADER (Hutto & Gilbert 2014; MIT), the lexicon-and-rules model tuned for social media, reviews and short text: compound score (-1..1), positive/neutral/negative proportions and a label, handling negation, intensifiers, ALL-CAPS, "but" contrast, punctuation emphasis, slang, emoticons and emoji. Per-sentence breakdown, or batch up to 50 texts with a summary. Scores match the
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | no | Text to score (max 100 KB) |
| texts | array | no | Alternative: up to 50 texts (each max 20 KB, total 200 KB) |
| sentences | boolean | no | Include a per-sentence breakdown (default true) |
Food product facts by barcode (EAN-13, EAN-8, UPC-A, UPC-E; GTIN check digit validated) from Open Food Facts (ODbL): name, brand, quantity, categories, ingredients text, allergens and traces, additives, Nutri-Score grade, NOVA processing group, Green-Score, nutrients per 100 g (energy, fat, saturates, carbohydrates, sugars, fibre, protein, salt), labels, origin and image URL. Community data: alway
| Parameter | Type | Required | Notes |
|---|---|---|---|
| barcode | string | yes | EAN/UPC barcode digits (alias: code) |
| lang | string | no | Preferred language for names/ingredients, ISO 639-1 (default en) |
Decode a 17-character Vehicle Identification Number: offline structure check (allowed characters, ISO 3779 check digit, region and WMI, model-year code) plus NHTSA vPIC decoding (make, model, model year, trim, body class, vehicle type, doors, drive type, engine cylinders/displacement/fuel, transmission, manufacturer, plant city/country, GVWR, safety equipment) and optional open NHTSA safety recall
| Parameter | Type | Required | Notes |
|---|---|---|---|
| vin | string | yes | 17-character VIN (I, O and Q are not allowed) |
| year | integer | no | Optional model year hint (resolves the 30-year cycle of the 10th-character year code) |
| recalls | boolean | no | Include NHTSA recalls for the decoded make/model/year (default false) |
Is this software version still supported? End-of-life status from endoflife.date for 400+ products (languages, frameworks, databases, OSes, runtimes, cloud services): status (supported, security-only, eol, unmaintained), release, active-support and EOL dates, days until/since EOL, LTS flag, latest patch for the cycle and whether you are on it, the recommended upgrade cycle, and plain advice. Fuzzy
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product | string | no | Product name or endoflife.date slug (python, nodejs, django, postgresql, ubuntu, ...) |
| version | string | no | Version or release cycle (3.8, 3.8.10, 18, 22.04); omit for all current cycles |
| items | string | no | Batch alternative: comma list of product@version, up to 10 (python@3.8,nodejs@18) |
Split text into retrieval-ready chunks for RAG and embeddings: recursive (paragraph > line > sentence > clause > word), markdown-aware (splits on headings, keeps the heading path per chunk, respects code fences), sentence, or fixed windows; sized in estimated tokens or characters with overlap. Returns each chunk with Unicode start/end offsets, character and token estimates, plus totals. Determinis
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | Text or Markdown to chunk (max 200 KB) |
| strategy | string | no | recursive (default), markdown, sentence or fixed |
| unit | string | no | tokens (default, estimated ~4 chars/token) or chars |
| chunk_size | integer | no | Max chunk size in the unit (tokens 16-8192, default 512; chars 64-32768, default 2000) |
| overlap | integer | no | Overlap between consecutive chunks, at most half of chunk_size (default 10%) |
| include_text | boolean | no | Return chunk text (default true); false returns offsets only |
Hashing, HMAC and encoding toolkit: digests (MD5, SHA-1/2/3, Keccak-256 as used by Ethereum, RIPEMD-160, Whirlpool, CRC32/CRC32C, Adler-32, FNV-1a, xxHash32/64/3/128, MurmurHash3), HMAC (SHA-1/2/3, MD5) with hex or base64 output, encode/decode between UTF-8, hex, base64, base64url, base32, base58 and URL encoding, identification of what a string is (hash type by length, UUID version, JWT, bcrypt/a
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input | string | no | Input string (max 100 KB), interpreted per input_encoding |
| input_encoding | string | no | utf8 (default), hex, base64, base64url, base32, base58 or url: decode the input to bytes first |
| hashes | array | no | Digest algorithms, or "all" (default md5, sha1, sha256, sha512, sha3-256, keccak256, crc32b) |
| hmac_key | string | no | Optional HMAC key (never echoed) |
| hmac_key_encoding | string | no | utf8 (default), hex, base64, base64url |
| hmac_algorithms | array | no | HMAC algorithms (default sha256) |
| encodings | array | no | Output encodings (default hex, base64, base64url, base32, base58, url) |
| identify | boolean | no | Guess what the input string is (default true) |
| generate | object | no | Optional generation instead of / besides input: {"uuid": "v4"|"v7", "count": 1-100} and/or {"random_bytes": 1-1024} |
US Census Bureau geocoder: a one-line US street address (or a lat/lon) to matched address and coordinates plus Census geographies: state and county with FIPS codes, census tract, block group and block GEOID, place/city, congressional district, state legislative districts, ZCTA, metro/micro area and urban area where available. Public-domain US government data; useful for district lookups, data join
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | no | One-line US street address with house number |
| lat | number | no | Alternative: latitude (with lon) |
| lon | number | no | Alternative: longitude (with lat) |
EVM contract introspection on Ethereum, Base, Arbitrum, OP Mainnet, Polygon or BNB Chain via public RPC: bytecode size/hash, EIP-1167 / EIP-1967 / ZeppelinOS / EIP-7702 proxy detection, ERC-165/20/721/1155(/2981) standards, name/symbol/decimals/supply, owner()/paused(), and a bytecode selector scan against 145 known signatures that surfaces capabilities (mint, blacklist, fee setters, trading switc
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | — |
| chain | string | no | — |
Latest ERC-20 or ERC-721 Transfer events for a token contract (optionally filtered to one wallet, in/out/both) on six EVM chains. Adaptive eth_getLogs window with automatic shrink on provider range caps. Returns decoded from/to/value or tokenId, approx age, mint/burn tags. Read-only. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v
| Parameter | Type | Required | Notes |
|---|---|---|---|
| token | string | yes | — |
ERC-20 allowance matrix for an owner across up to 10 tokens × 10 spenders (defaults: major stables/WETH × Uniswap Permit2, 1inch, CoW, 0x, OpenSea Seaport — verified deployed on-chain). Also reports ERC-721/1155 setApprovalForAll. Flags unlimited (max-uint) approvals. Read-only; no log scan. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/a
| Parameter | Type | Required | Notes |
|---|---|---|---|
| owner | string | yes | — |
Live gas tracker across Ethereum, Base, Arbitrum, OP Mainnet, Polygon and BNB Chain: head block age, base fee, 10th/50th/90th percentile priority fees from eth_feeHistory, suggested maxFeePerGas tiers, and estimated cost of a native transfer and an ERC-20 transfer. Read-only. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/evm-g
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chains | string | no | — |
ERC-721 / ERC-1155 token metadata: tokenURI/uri (ipfs/arweave/data/https), ownerOf, collection name/symbol/supply, EIP-2981 royalty. Metadata JSON is fetched SSRF-safe via target_fetch (public-IP pinned). Returns name, description, image (+ http gateway URL), attributes. Read-only. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/
| Parameter | Type | Required | Notes |
|---|---|---|---|
| contract | string | yes | — |
| tokenId | string | yes | — |
Read-only eth_call of any view/pure function from a human signature (e.g. balanceOf(address)(uint256) or function name() view returns (string)). ABI-encodes args, decodes outputs (address/uint/int/bool/string/bytes/arrays), and surfaces Error(string) / Panic(uint256) revert reasons. Six chains. No state change. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET http
| Parameter | Type | Required | Notes |
|---|---|---|---|
| contract | string | yes | — |
| signature | string | no | — |
Offline prompt-injection / jailbreak / exfiltration scanner: 10 rule families (ignore-instructions, reveal-system, role-hijack, delimiter-escape, tool/secret dump, encoding smuggle, policy bypass, authority claim, continuation trap, multilingual) plus hidden-Unicode and long-base64 heuristics. Returns verdict (clean|suspicious|critical), 0-100 score and match spans. Batch up to 20 texts. Price: $0
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | no | — |
US airport delay status from the FAA NAS Status feed (ground delay programs, ground stops, closures, arrival/departure delays) plus OurAirports metadata (name, city, ICAO/IATA, lat/lon). Pass ?airport=SFO (IATA) or KSFO (ICAO), or omit for a nationwide overview. Public-domain sources. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/
| Parameter | Type | Required | Notes |
|---|---|---|---|
| airport | string | no | — |
Offline Dockerfile linter: parses stages/continuations and runs 20+ best-practice and security rules (latest tag, curl|bash, secrets in ENV/ARG, runs-as-root, chmod 777, ADD-vs-COPY, apt cache, no HEALTHCHECK, multi-stage hints). Returns 0-100 score, letter grade and actionable fixes. Does not build or pull images. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: POST h
| Parameter | Type | Required | Notes |
|---|---|---|---|
| dockerfile | string | no | — |
Offline PCRE2 regex tester (JS-compatible i/m/s/u flags): match (with offsets + capture groups), replace, or split. Hard caps on backtracking/recursion and a structural ReDoS warning. Pattern max 2 KB, subject max 200 KB. Returns count, matches/result/parts and engine notes. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/regex
| Parameter | Type | Required | Notes |
|---|---|---|---|
| pattern | string | no | — |
| subject | string | no | — |
Normalized financial statements for any SEC filer by ticker or CIK, straight from EDGAR XBRL: revenue, gross profit, operating income, net income, EPS, assets, liabilities, equity, cash, debt, operating cash flow, capex and free cash flow per fiscal year or quarter, with margins, current ratio, leverage, ROE and YoY growth. Handles concept switches (ASC 606) and IFRS 20-F filers; lists the XBRL co
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ticker | string | no | US-listed operating company ticker (e.g. AAPL, BRK-B). Aliases: symbol, company |
| cik | string | no | SEC CIK instead of a ticker (e.g. 320193) |
| period | string | no | annual (default) or quarterly (3-month periods) |
| limit | integer | no | Periods to return, newest first (1-12, default 4) |
Mutual fund / ETF portfolio from its latest public SEC Form N-PORT: top holdings by value (name, CUSIP, ISIN, LEI, shares, USD value, % of net assets, asset and issuer category, country, maturity/coupon for debt), asset-class / country / issuer / currency mix, top-10 concentration, net assets and monthly returns per share class. Look up by fund ticker (VOO, QQQ, BND), series id or class id. Price:
| Parameter | Type | Required | Notes |
|---|---|---|---|
| fund | string | yes | Mutual fund or ETF ticker, SEC series id (S000002839) or class id (C000092055). Aliases: ticker, series |
| limit | integer | no | Top holdings to return by absolute USD value (1-100, default 25) |
FDA adverse-event reports (openFDA): drug FAERS, device MAUDE, food/supplement CAERS. Filter by drug, product, reaction, dates or raw openFDA search; compact reports or counts on any field (e.g. top reactions for a drug). Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/fda-adverse-events
| Parameter | Type | Required | Notes |
|---|---|---|---|
| category | string | no | drug (default), device or food |
| drug | string | no | drug: brand / generic / reported name |
| product | string | no | device or food product name |
| reaction | string | no | MedDRA reaction term (drug, food) |
| serious | boolean | no | drug: serious reports only (true/false) |
| from | string | no | on/after YYYY-MM-DD |
| to | string | no | on/before YYYY-MM-DD |
| search | string | no | raw openFDA search, ANDed |
| count | string | no | count by this field (e.g. patient.reaction.reactionmeddrapt.exact) |
| limit | integer | no | 1-100 (default 10); count 1-1000 |
| skip | integer | no | offset 0-25000 |
| sort | string | no | field:asc|desc |
| full | boolean | no | full openFDA records (default false) |
FDA recalls (openFDA): drug, device and food enforcement reports (class, status, firm, reason, distribution, lots) plus the device recall database (root cause). Filter by firm, product, class, status, state, dates; count by any field. Newest first. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/fda-recalls
| Parameter | Type | Required | Notes |
|---|---|---|---|
| category | string | no | default drug |
| source | string | no | enforcement (default) or recall (device only) |
| firm | string | no | recalling firm |
| product | string | no | product description phrase |
| reason | string | no | reason-for-recall phrase |
| classification | string | no | recall class (I = most serious) |
| status | string | no | status |
| state | string | no | US state of the firm (2 letters) |
| from | string | no | on/after YYYY-MM-DD |
| to | string | no | on/before YYYY-MM-DD |
| search | string | no | raw openFDA search, ANDed |
| count | string | no | count by field, e.g. recalling_firm.exact |
| limit | integer | no | 1-100 (default 10); count 1-1000 |
| skip | integer | no | offset 0-25000 |
| sort | string | no | field:asc|desc (default newest) |
FDA device records (openFDA): 510(k) clearances, PMA approvals, device classification (product code, class, regulation) and GUDID device identifiers. Search by name, product code, applicant, K/PMA number or raw search; count by any field. GMDN removed. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/fda-device
| Parameter | Type | Required | Notes |
|---|---|---|---|
| dataset | string | no | default 510k |
| name | string | no | device / trade / brand name |
| productCode | string | no | FDA product code, e.g. DQA |
| applicant | string | no | applicant / company |
| number | string | no | K123456 or P123456 |
| deviceClass | string | no | classification: device class |
| from | string | no | on/after YYYY-MM-DD |
| to | string | no | on/before YYYY-MM-DD |
| search | string | no | raw openFDA search, ANDed |
| count | string | no | count by field, e.g. applicant.exact |
| limit | integer | no | 1-100 (default 10); count 1-1000 |
| skip | integer | no | offset 0-25000 |
| sort | string | no | field:asc|desc |
Any BLS time series by id (CPI, payrolls, unemployment, state/metro LAUS, PPI, JOLTS, ECI ...) for a year range: observations newest first with preliminary flags and footnotes, latest value, MoM / YoY change. Up to 25 series per call. Includes BLS retrieval date and disclaimer. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/bls-
| Parameter | Type | Required | Notes |
|---|---|---|---|
| series | string | yes | comma-separated BLS series ids (max 25; 50 with key) |
| startYear | integer | no | default endYear-2; span max 10 years (20 with key) |
| endYear | integer | no | last year (default current year) |
| latestOnly | boolean | no | latest value + changes only |
US macro dashboard from BLS in one call: CPI and core CPI, unemployment, nonfarm payrolls, hourly earnings, participation, PPI and JOLTS openings. Latest value, month, MoM / YoY change and 13-month history. Includes BLS retrieval date and disclaimer. Price: $0.01 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/us-macro
| Parameter | Type | Required | Notes |
|---|---|---|---|
| indicators | string | no | comma-separated subset (default all): cpi, core_cpi, unemployment_rate, nonfarm_payrolls, avg_hourly_earnings, labor_force_participation, ppi_final_demand, jolts_openings |
| history | integer | no | months of history per indicator, 0-24 (default 13) |
abuse.ch SSL Blacklist (SSLBL): check whether a TLS certificate SHA1 fingerprint is blacklisted as malware / botnet C&C infrastructure (listing date and reason, e.g. "QuasarRAT C&C"), check an IP against the SSLBL botnet C2 IP list, or list the most recent blacklisted certificates filtered by reason. Several thousand certificates; CC0, commercial use allowed. Cached locally, refreshed every 30 min
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sha1 | string | no | certificate SHA1 fingerprint, 40 hex (colons / spaces allowed) |
| ip | string | no | IP to check against the SSLBL botnet C2 IP blacklist |
| reason | string | no | list mode: substring filter on the listing reason, e.g. AsyncRAT |
| since | string | no | list mode: only listings on or after YYYY-MM-DD |
| limit | integer | no | list mode: entries 1-500 (default 50), newest first |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install ScorpTech x402 API or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 90 / 100
Release 1.0.0 · scanned 23 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score90
Findings0 threat · 21 capability
Capabilityhigh
Coveragemanifest
Verificationnot in this report
Surface digestde1ef0cd935b3a617395784e0540935e0859f955019fa9c3204c2bab8838ac22
Score vectorthreat 100 → client 90
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | high | capability blast radius (high) — client exposure if the model is manipulated | −6 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| headers_audit | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| email_auth | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| domain_intel | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| robots_sitemap | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| tech_stack | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| rdap_age | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| phishing_score | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| cve_lookup | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| package_risk | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| github_health | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| opengraph | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| url_markdown | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| schema_validate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| mx_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ip_intel | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| solana_tx | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wayback | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| dns_dump | sensitive-sourceuntrusted-input | sensitive-source: keyword "dump"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ct_subdomains | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| redirect_chain | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| http_probe | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| x402_probe | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| web_to_text | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| url_links_extract | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| qr_generate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| text_stats | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| html_to_markdown | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| image_info | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| image_resize | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sec_edgar_search | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sec_form4 | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| company_profile | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| weather_nws | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| arxiv_search | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| earthquakes | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| holidays_business_days | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hn_search | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| dns_propagation | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ssl_cert_info | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| email_validate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| password_strength | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| validate_batch | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sol_balance | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sol_token_meta | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sol_token_risk | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_balance | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_tx_info | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fx_rate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ens_resolve | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| geocode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wallet_risk_basic | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sanctions_screen | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sec_13f | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| treasury_rates | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| domain_availability | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| eu_vat_validate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ip_reputation | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| cisa_kev | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| epss_score | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hsts_preload | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| macro_indicators | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| osv_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| osv_scan_batch | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| iban_validate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wikipedia | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| pubmed_search | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| feed_discover | untrusted-input | untrusted-input: keyword "rss", declares openWorldHint: true (interacts with entities outside the server) |
| evm_selector_decode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| readability_extract | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| openalex_search | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| format_convert | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| repo_posture | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| timezone_convert | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| cron_explain | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ticker_resolver | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| usaspending_awards | external-sinkuntrusted-input | external-sink: parameter "recipient"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| openfda_drug | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| clinical_trials | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| federal_register | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| pii_detect | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| jwt_decode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| text_diff | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| contact_extract | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| seo_audit | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| weather_global | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| github_trending | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| json_repair | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sentiment | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| food_barcode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| vin_decode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| eol_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| text_chunk | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hash_encode | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| census_geographies | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_contract_info | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_token_transfers | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_allowance | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| evm_gas | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| nft_metadata | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| evm_read | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| prompt_injection_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| airport_status | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| dockerfile_lint | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| regex_test | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sec_financials | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fund_holdings | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fda_adverse_events | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fda_recalls | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fda_device | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| bls_series | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| us_macro | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ssl_blacklist | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
airport_status → dns_dump → usaspending_awards
A cross-tool exfiltration chain exists: airport_status → dns_dump → usaspending_awards.
Supply chain and provenance
Integrityfirst-seen
Surface digestde1ef0cd935b3a61
Scanned2026-10-23
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
1.0.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish ScorpTech x402 API can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.