heinrichstech.com

BitBooth echo endpoint — pays a tiny USDC fee, returns a JSON echo. Reference implementation of the x402 + CDP Facilitator + Bazaar discovery loop.

ERC-20 token balance for any wallet — USDC, USDT, DAI, or any token contract — via balanceOf eth_call, with decimals applied. Ethereum or Base mainnet. Pay 0.003 USDC.

BitBooth DNS: pay 0.002 USDC, get DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, CAA) for any hostname. Built on Node's built-in resolver with a 5s timeout cap. Rejects IP-address inputs and private/loopback hosts. Built for agents inspecting infra, debugging delivery, or pre-flighting a target.

BitBooth Faker: pay 0.001 USDC, get structured synthetic data on demand. Pass a template like { name: "person.fullName", email: "internet.email" } and a count, receive an array of records ready to seed forms, populate test databases, or feed mock data into prompt examples. Backed by @faker-js/faker, deterministic via the optional seed parameter.

BitBooth JSON Repair: take any almost-JSON string (LLM tool output, broken API response, etc.), fix the common errors (trailing commas, single quotes, unquoted keys, missing brackets), and optionally validate against a JSON Schema. Built for AI agents that wrap every tool call in defensive parsing. Pay 0.001 USDC per call, no API key, no subscription.

BitBooth JWT Verify: pay 0.001 USDC, verify a JWT signature + canonical claims (iss / aud / exp / nbf) against an inline publicKey (PEM) or sharedSecret. Supports HS256/384/512 and RS256/384/512. Constant-time HMAC compare, configurable clock-skew tolerance, alg=none rejected. Stateless — caller supplies their key in the request body, BitBooth never stores it.

BitBooth PII Redact: pay 0.002 USDC, strip emails, phones, SSNs, credit cards, IPv4 addresses, and hex-looking secrets from a text blob before passing it to an LLM. Compliance primitive for agents in regulated industries (health, finance, legal). Pure regex — no LLM inference, deterministic output. Pairs with /v1/cdp/prompt-injection-scan as the sanitize-before-model pipeline.

BitBooth Portfolio Scan: pay 0.005 USDC, hand in 1..5 EVM addresses, get back per-address native ETH + USDC holdings on Base mainnet plus a totals rollup. Built for agents tracking treasury splits across multiple wallets or pre-flighting a counterparty across known addresses. Multi-chain expansion deferred to slice-2.

BitBooth Regex Test: pay 0.001 USDC, safely compile and run a regex against a corpus. Returns structured matches with capture groups, indices, and lengths. JS engine flags (g, i, m, s, u, y, d). Hard CPU deadline guards against catastrophic backtracking (ReDoS) — `regex_timeout` is reported instead of stalling. Stateless, no API key.

BitBooth render-pro: full Playwright JS rendering + Readability extraction. Pay 0.05 USDC, get clean markdown back from any URL including SPAs and JS-heavy sites that naive fetch cannot crawl. No API key, no subscription.

BitBooth Sitemap: pay 0.005 USDC, hand in a domain, get back the canonical site URL list discovered via robots.txt + sitemap.xml + sitemapindex chain. Returns a flat deduped list of {loc, lastmod, changefreq, priority} entries capped at 5000 URLs per call, with sitemapindex follow-through capped at 5 child sitemaps. SSRF-blocked, body-capped at 5MB, 10s timeout. Built for crawlers, SEO auditors, and agents that enumerate URLs before paying for the heavier render-pro extraction.

BitBooth Web Diff: pay 0.08 USDC, render any URL with full Playwright JS rendering, and receive both the current markdown snapshot AND a structured diff against the previous markdown you supply. Built for monitoring agents tracking competitor sites, docs pages, pricing changes, or any long-running web change-detection workflow. The first call returns the snapshot; pass it back as previousMarkdown next time to get the diff. No API keys, no subscriptions.

BitBooth Webhook Signature Verify: pay 0.001 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it.

BitBooth Whois: pay 0.005 USDC, get the parsed whois record for any domain — registrar, creation/updated/expiry dates, name servers, status flags, plus the raw whois text. Two-hop resolution via whois.iana.org then the authoritative registry over TCP port 43. 5s per-connection timeout cap. Rejects IPv4/IPv6 inputs and blocks SSRF at the DNS layer. Built for agents auditing domain ownership, monitoring expiry, or pre-flighting a target.