Baneado98

Security quick-scan for smart contracts, as an MCP tool and a pay-per-call x402 endpoint. Given an address+chain (or Solidity source) it fetches the Sourcify-verified source, reads live on-chain state (upgradeable proxy? owner an EOA or renounced?) and sc

Email & domain deliverability doctor: live SPF, DKIM, DMARC, MX and DNS health check for any domain, as an MCP tool and a pay-per-call x402 endpoint. Tells an AI agent if mail from a domain will land in inbox or spam, and exactly what DNS records to fix.

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.

Live IP & domain reputation as an MCP tool and a pay-per-call x402 endpoint: geolocation, ASN/organisation, network type (datacenter/VPN/proxy/Tor/residential), reverse DNS (PTR), DNS blocklist (DNSBL) membership and a 0–100 abuse/risk score — from live D

Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Detects typosquatting, malicious install scripts, token/credential exfiltration and other red flags BEFORE you run npm install.

Live web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does a real TLS handshake to grade the SSL/TLS certificate (validity, issuer, days-to-expiry, hostname match, self-signed), the TLS version, HTTP->HTT

Live multi-chain on-chain data in ONE call for AI agents: a wallet's portfolio (native + ERC-20 + USD value) across Ethereum/Base/Polygon/Arbitrum/Optimism, token/contract info, live gas and token prices. MCP server + pay-per-call x402 API. No API key — p

Live email verification (syntax, MX, disposable, role-based, catch-all and a live SMTP mailbox probe) as an MCP tool and a pay-per-call x402 endpoint. Returns VALID/RISKY/INVALID + a deliverability score — without sending any email. For AI agents and list

Audit the LICENSE of every npm dependency before you ship. Resolves each dependency's real license from the live npm registry and flags GPL/AGPL/LGPL copyleft, BUSL/SSPL/Elastic source-available, non-commercial and unlicensed packages incompatible with yo

Audit a package-lock.json for integrity tampering and risky install scripts before npm install.

US municipal DEVELOPMENT COST intelligence for AI agents — the impact/development fees, water & sewer tap (connection) fees and capital-recovery charges a real-estate developer must pay to build, aggregated and NORMALIZED per jurisdiction from public gove

On-chain rug-pull / honeypot risk screen for ERC-20 tokens: owner powers, renounce status, supply concentration, liquidity depth and LP lock. SAFE/CAUTION/HIGH-RISK verdict in one call. MCP server + pay-per-call x402 API. No API key — public RPCs only.

Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…), tokens, private keys (RSA/EC/SSH/PGP), DB connection strings, .env dumps, JWTs and high-entropy strings. MCP server + pay

Audit a wallet's active ERC-20 token approvals for drain risk — the #1 way DeFi wallets get emptied. Flags unlimited allowances to EOAs, unknown or upgradeable spenders and returns the revoke calldata. CLEAN/REVIEW/AT_RISK verdict in one call. MCP server

Decode and explain an EVM transaction BEFORE you sign it. Plain-English breakdown of the calldata, flagging unlimited approvals, EIP-2612/Permit2 gasless permits, setApprovalForAll, transferFrom drains and approvals to a plain-wallet (EOA) spender. SAFE/R

Verify an EVM chainId or RPC endpoint is legit (not spoofed): identity + live eth_chainId/net_version probe. VERIFIED/CAUTION/MISMATCH. MCP + x402.

Multi-CI security scanner with a live threat-intel feed of compromised CI components

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.

Live CORS misconfiguration probe: origin reflection, wildcard+credentials, null-origin, substring bypass. SAFE/RISKY/DANGEROUS. MCP + x402.

Email-auth posture audit (SPF/DKIM/DMARC) via live DNS: is the domain spoofable? PROTECTED/PARTIAL/SPOOFABLE. MCP + x402.

Ocean freight spot rate & FBX container shipping trend: should I book ocean freight now?

Ocean & multimodal freight intelligence suite for AI agents — 47 tools: cross-validated spot & all-in rates, total landed cost by HS code + duty, transit time & reliability (p90), air-vs-ocean, customs & Incoterms, demurrage & detention, port congestion,

Is my EVM tx stuck? Live pending/mined status + underpriced check + replacement (RBF) gas plan. MINED/HEALTHY/STUCK. MCP + x402.

OpenAPI/Swagger security lint: missing auth, unauthenticated mutating endpoints, BOLA/IDOR surface, http servers. SECURE/REVIEW/INSECURE. MCP + x402.

Real static reentrancy auditor for EVM contracts: disassembles deployed bytecode, reconstructs the control-flow graph with symbolic-stack jump resolution, and proves whether an external CALL precedes a reachable state write (Checks-Effects-Interactions vi