Every agent-payable API.

Public product metadata of a Shopify store from its storefront products.json feed (no key): title, handle, vendor, product type, tags, publish and update times, price range, variant and image counts and product link. Only stores that expose products.json; stores that block it return 404.

WSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary). Headlines and short summaries only; full articles are paywalled and not returned. Public feed, no key.

For a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still resolves, and fetches the subdomain once to look for the service's 'unclaimed' page text. Verdicts are evidence, not proof; the list is community-maintained.

DNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup). Shows answers as they resolve now, with TTLs; it does not walk the delegation chain or query the authoritative servers directly.

Asks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL. It shows cache and geo-DNS differences between resolvers; it is two vantage points, not a worldwide propagation survey.

For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time.

GreyNoise Community lookup for an IPv4 address: whether it was seen mass-scanning the internet recently (noise), whether it is a known benign service (riot), its classification (benign, malicious, unknown), name and last-seen date. An address GreyNoise has not seen returns noise=false with a message; it is not a clean verdict.

PubMed article metadata by PMID (NCBI E-utilities esummary, public, no key): title, journal, publication date, authors and DOI for up to 20 ids. Summary fields only, no abstracts.

CNBC top news from CNBC's public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key.

Reads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers). Checks the v=BIMI1 tag and that the URLs are https. It does not download the logo or validate the certificate.

From Shodan's pre-collected passive scan data: whether TCP port 22 was seen open on an IPv4 address and any OpenSSH version identified in its software (CPE) list. This is passive and may be days old; it is not a live SSH banner grab or algorithm audit.

Looks up one MITRE ATT&CK technique (e.g. T1059 or T1059.001) on its official public page: its name, the tactic-level summary text and the page title. Reads one page per call; it does not return the whole matrix or a technique's sub-techniques list.

Has this place been built on or cleared in the last 12 months? Sentinel-2 satellite change detection for any lat/lon: NDVI/NDBI deltas, change direction, confidence and the scene-by-scene evidence.

Domain -> security letter grade (0-100, A-F) from HTTPS reachability, security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), and CAA records. Reports HTTPS connect success/failure, not raw cert expiry -- Workers can't read a remote server's cert metadata directly. For registration facts use /domain-intel; for URL reputation use /linkcheck.

Is the domain's email hosted by siteground mail? Looks up the MX records (Cloudflare DoH) and matches them against siteground-mail's mail-exchanger patterns, returning yes/no, the MX hosts and which matched. Provider detection for deliverability, sales and migration work. $0.01 per lookup.

Enumerate a site's URLs from robots.txt + sitemap.xml (sitemap-index aware) — map a domain before crawling it

Enumerate a site's URLs from robots.txt + sitemap.xml (sitemap-index aware) — map a domain before crawling it

Prüft am Objekt sitemap den Befund Zahl der Adressparameter.

Prüft am Objekt sitemap den Befund Freigabe durch robots.txt.

Prüft am Objekt sitemap den Befund Wert des X-Robots-Tags.

Prüft am Objekt sitemap den Befund Wert der Meta-Robots-Angabe.

Prüft am Objekt sitemap den Befund deklarierte Crawl-Verzögerung.

Prüft am Objekt sitemap den Befund HTTP-Status der Sitemap.

Prüft am Objekt sitemap den Befund technische Indexierbarkeit.

Prüft am Objekt sitemap den Befund ausgelieferten Inhaltstyp.

Prüft am Objekt sitemap den Befund Vorkommen in der Sitemap.

Prüft am Objekt sitemap den Befund selbstreferenzierende kanonische Adresse.

Sitemap extractor: find a domain's sitemaps through robots.txt and the standard location, then list the page addresses they declare

Sitemap reader: list a site's URLs with lastmod (handles sitemap indexes) — Genesis402 / UnyKorn Operator Network

Read one public XML sitemap or sitemap index as structured URLs and source-reported dates. Supports gzip, substring filtering and pagination. Maximum 512 KiB expanded input and 1000 entries. Does not crawl pages or follow child sitemaps. Invalid XML and execution errors are not charged; a valid empty match is charged. Use to find which pages of a docs site to read before calling /extract.

Six cited owner-action lanes for one US address: curated and derived programs, exact program dates, the state appeal rule, state tax framing plus county source pointer, FEMA LOMA point-elevation screen when applicable, and the parcel special-valuation screen. Returns charged:false unless at least two sections are substantive. Lists programs and rules only; no eligibility or action recommendation. npx @velinussage/locus-agent-skill add.

SK Hynix dual-listing price pack ($0.1 USDC). Returns the Korea KRX common share (000660, KRW) and US NASDAQ ADR (SKHY, USD) closing prices side-by-side with the USD/KRW FX rate for premium/discount calculation. Optional ?date=YYYY-MM-DD returns that trading day's close and same-date FX (falls back to the prior trading day on market holidays). SKHY ADR listed 2026-07-13 — earlier dates return null for the ADR leg.

Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'owner/repo/path'} or {content:'...'}.

Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks; 2 rule families + 2 LLM reviewers vote; cross-checks Agentropolis seller trust data. Returns allow/review/block with evidence. Read-only, never executes the code. Advisory.

Bundled execution of the API health check workflow - Is this API endpoint healthy? Liveness check, response headers, and TLS certificate status in one pass. One x402 payment runs 3 underlying tools (http-check, http-headers, tls-cert); partial-success per step.

Bundled execution of the Article digest workflow - Quick research brief on any topic - web search results plus an AI-generated answer in one pass. One x402 payment runs 3 underlying tools (search, answer, search-news); partial-success per step.

Bundled execution of the Brand protection workflow - Is this domain legitimate? WHOIS age, DNS resolution, scam/phishing search results, and HTTP headers for a quick trust assessment. One x402 payment runs 4 underlying tools (whois, dns-lookup, search, http-headers); partial-success per step.

Bundled execution of the Cheapest rail right now workflow - Where should an agent transact this minute? Live gas on Ethereum + every major L2 side by side, Base gas tiers, a fee estimate for your transaction type, and ETH spot to price it all in dollars. One x402 payment runs 4 underlying tools (l2-gas-comparison, gas-snapshot, gas-estimate, crypto-price); partial-success per step.

Bundled execution of the Competitor scan workflow - What's a competitor using? Tech stack, HTTP headers, WHOIS, and page metadata in one call. One x402 payment runs 4 underlying tools (tech-stack, http-headers, whois, meta); partial-success per step.

Bundled execution of the Contact verification workflow - Verify an email address is deliverable - syntax validation plus MX record check on the domain. One x402 payment runs 3 underlying tools (email-validate, dns-lookup, spf-check); partial-success per step.

Bundled execution of the Content grade workflow - Grade a page's content quality - extract the readable content then analyze keyword density. One x402 payment runs 3 underlying tools (extract, keywords, readability-score); partial-success per step.

Bundled execution of the Contract audit workflow - Triage a smart contract before an agent interacts with it: verified Solidity source, heuristic vulnerability scan, known-address check, function-selector resolution, and a read-only dry-run of the exact call you plan to make. One x402 payment runs 5 underlying tools (contract-source, solidity-scan, selector-lookup, address-label, tx-simulate); partial-success per step.

Bundled execution of the DeFi dashboard workflow - DeFi market overview: total TVL, ETH price, Base gas, and global crypto stats in one call. One x402 payment runs 4 underlying tools (defi-tvl, crypto-price, gas-snapshot, crypto-global); partial-success per step.

Bundled execution of the DeFi protocol scanner workflow - Due-diligence a DeFi protocol in one workflow: live token price, market context, protocol TVL across chains, and recent news - the on-chain and off-chain picture together. One x402 payment runs 4 underlying tools (crypto-price, crypto-market, defi-tvl, search); partial-success per step.

Bundled execution of the Document brief workflow - Metadata, an AI-written summary, and a preview of the opening pages of a PDF - understand what a document says without reading the whole thing. The catalog's first AI-summarization pack, complementary to document-intel's deterministic format extraction (no AI, no summarization there). One x402 payment runs 3 underlying tools (pdf-info, pdf-summarize, pdf-extract-pages); partial-success per step.

Bundled execution of the Domain age and legitimacy workflow - How old and legit is this domain? WHOIS registration, DNS resolution, and TLS certificate in one pass. One x402 payment runs 3 underlying tools (whois, dns-lookup, tls-cert); partial-success per step.

Bundled execution of the Earnings deep-dive workflow - Everything you need before a company reports: the upcoming earnings date, the latest financials, recent SEC filings, the latest close, and fresh analyst news - in one pass. One x402 payment runs 4 underlying tools (company-financials, edgar-filings, stock-quote, search); partial-success per step.

Bundled execution of the Earnings watch workflow - Has this company just reported, and what is being said about it? Recent SEC filings, the latest close, and current coverage in one call. One x402 payment runs 3 underlying tools (stock-quote, search, edgar-filings); partial-success per step.

Bundled execution of the Email security workflow - Full email auth posture: SPF, DMARC, DKIM, and composite deliverability score in one call. One x402 payment runs 4 underlying tools (spf-check, dmarc-check, dkim-lookup, email-deliverability); partial-success per step.

Bundled execution of the Entity enrichment workflow - Company name → verified identity + web footprint dossier: Wikidata facts, the official LEI legal-entity record, the SEC EDGAR filer, domain registration, tech stack, and brand favicon - in one pass. One x402 payment runs 6 underlying tools (wikidata-entity, lei-lookup, edgar-company-lookup, whois, tech-stack, favicon-grab); partial-success per step.