Agent Data Tools: Company, compliance and checks
io.github.Nutshell2000/agent-data-tools-complianceVersion 1.196.070 tools: OFAC sanctions, counterparty checks, company, domain, email. 25 free calls.
Status
Responds101 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 14:43 UTC
- Latency
- 101 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 21:12 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://agent-data-tools.revmesh2074.workers.dev/mcp/complianceResponds101 msNo sign-in
Claude Code
claude mcp add --transport http agent-data-tools-compliance https://agent-data-tools.revmesh2074.workers.dev/mcp/complianceClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: agent-data-tools-compliance
Remote MCP server URL: https://agent-data-tools.revmesh2074.workers.dev/mcp/complianceCursor
{
"mcpServers": {
"agent-data-tools-compliance": {
"url": "https://agent-data-tools.revmesh2074.workers.dev/mcp/compliance"
}
}
}VS Code
code --add-mcp '{"name":"agent-data-tools-compliance","type":"http","url":"https://agent-data-tools.revmesh2074.workers.dev/mcp/compliance"}'Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
62 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
audit_contractSmart contract audit in one call: send a verified contract address (Ethereum, Base, Arbitrum, Optimism, Polygon) or Solidity source and get, within a minute or two, findings by severity with function, line, exploit scenario and fix, the owner and upgrade keys read on chain, a score and a Markdown report. Automated (static checks plus AI reviewers), not a manual audit. Use before deploying, integrating with or buying into a contract. Price $1.00/call via x402 USDC or a card key (/credits); failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
check_counterpartyScreen a payee before paying, trading or onboarding: one call vets an address on Base, Ethereum, Arbitrum or Optimism with an OFAC SDN match, account type and activity, USD holdings and, on Base, wallet or contract risk checks; add the payee's domain for its age and trust flags. One block, review or pass verdict with reasons. Screening aid, not legal advice or a security audit. Use before paying, trading with or onboarding an address. Example: address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
check_payeeFast check of a payee before an agent pays it: OFAC SDN match on the address, account type (wallet, delegated wallet or contract) and nonce on Base, Ethereum, Arbitrum, Optimism or Polygon, and optionally the payee domain's age and trust flags. One block, review or pass verdict with reasons. Screening aid, not legal advice. Use before an x402 or USDC payment to an unfamiliar address; holdings and wallet heuristics: check_counterparty. Example: address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045. Price $0.005/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
check_x402_sellerAudit an x402 seller before an agent buys from it: decodes the endpoint's 402 terms without paying, OFAC-screens each payTo address, reads its account type and nonce on the payment network, checks the seller domain's age and trust flags, and flags non-USDC assets and high prices. One block, review or pass verdict with reasons. Never signs. Screening aid, not legal advice. Use before the first payment to an unfamiliar x402 seller. Example: url=https://agent-data-tools.revmesh2074.workers.dev/btc-fees. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
companyFacts about a company by name or Wikidata ID: official website, founding date, country, headquarters, industries, CEO, founders, parent, employee count, stock tickers and exchanges, and LEI, with Wikidata and Wikipedia links. Public domain data (CC0), best for established and listed companies. No match returns 422, uncharged. Use to enrich leads, vendors and counterparties or ground an answer about a company. Example: name=Spotify. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
company_enrichmentCompany enrichment from a domain: the site's name, description and logo, its tech stack (CMS, frameworks, analytics, hosting), email provider and email security (SPF, DMARC), who hosts the server, DNS records, and the domain's registrar, age and expiry. Public DNS, RDAP and the home page only. Use for lead enrichment, company research, vendor checks or sales prospecting. Example: domain=stripe.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
company_lookupCompany lookup by name, website domain or Wikidata id: official website, founding date, country, headquarters, industries, CEO, founders, parent, employee count, stock tickers and LEI, from Wikidata (CC0). No match is an uncharged 422. Use to enrich a lead, vendor or counterparty with company data, or to ground an answer about a business. Example: name=Spotify. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
contract_auditContract audit for Solidity and Vyper: give a verified contract address (Ethereum, Base, Arbitrum, Optimism, Polygon) or paste the source, and one call returns security findings by severity with function, line, exploit scenario and fix, who holds the owner and upgrade keys on chain, a score and a Markdown report, in about a minute. Automated review, not a manual audit. Use before deploying, integrating with or buying into a contract. Price $1.00/call via x402 USDC or a card key (/credits); failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
cveLook up a CVE by its ID: what the vulnerability is, its CVSS score and severity, whether CISA lists it as exploited in the wild (KEV) and since when, the EPSS probability of exploitation in the next 30 days, CISA's SSVC points, the weakness (CWE), affected products with fixed versions, and patch and advisory links. Use to triage a security alert, rank what to patch first, or check an advisory before upgrading a dependency. Example: cve=CVE-2021-44228. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
cve_lookupCVE vulnerability lookup by ID (CVE-2021-44228): the description, CVSS score and severity, whether CISA lists it as exploited in the wild (KEV) and since when, the EPSS probability of exploitation in the next 30 days, the weakness (CWE), affected products with fixed versions, and patch and advisory links. Use to triage a security alert, decide what to patch first, or check an advisory before upgrading a dependency. Example: cve=CVE-2021-44228. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
dns_lookupLook up DNS records of a domain over DNS-over-HTTPS (Cloudflare 1.1.1.1): A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DS, DNSKEY or HTTPS, with each answer's TTL, the response code (NOERROR, NXDOMAIN…) and whether DNSSEC validated. Use to check email (MX, SPF in TXT), verify a domain, or debug a DNS change; for whether the change has spread use dns_propagation. Example: name=example.com. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
dns_propagationCheck whether a DNS change has propagated: the same record queried at five public resolvers (Cloudflare, Google, AdGuard, AliDNS and DNSPod), each resolver's answers and TTLs, whether they all agree, and the majority answer. Record types A, AAAA, CNAME, MX, NS, TXT, CAA. Use to see where an old value is still cached after changing a record, moving hosting or setting up email; for one lookup use dns_lookup. Example: name=example.com. Price $0.03/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
dns_recordsDNS lookup of a domain: A, AAAA, MX, TXT, CNAME, NS, CAA, SOA and other records through Cloudflare DNS over HTTPS, with TTLs, the response code and DNSSEC validation. Use to check where a domain points, its mail servers or a TXT verification record. Example: name=example.com. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
dockerfile_lintCheck a Dockerfile (up to 8,000 characters) for common security and image-size problems: unpinned or :latest base images, running as root, piping downloads into a shell, sensitive values baked into ENV or ARG, ADD from URLs, apt and pip cache left in layers, sudo, chmod 777 and an exposed SSH port. Returns each finding with its line, a severity and a fix, plus a score. Use before building or shipping an image. Example: dockerfile=FROM node:latest
COPY . /app
CMD node /app/server.js. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | No |
domainDomain intelligence in one call: DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA), DNSSEC status, registrar, registration and expiry dates with domain age in days (RDAP/WHOIS), and email authentication (SPF and DMARC records and policies, whether the domain accepts mail). Use for lead qualification, phishing and trust checks, and deliverability audits. For a trust verdict with named flags use domain_report. Example: name=cloudflare.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
domain_availabilityIs a domain name free? Check one name across up to 20 TLDs at once (default com, net, org, io, ai, co, app, dev, xyz, me): available, taken (with registrar, creation and expiry dates) or likely available, from each registry's RDAP server, with DNS where a TLD has no RDAP. Use to pick a product or company name, or to check a brand before launch. Availability is not a price quote: premium and reserved names exist. Example: name=agentdatatools. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
domain_reportA trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non-resolving domains, plus the key facts (registrar, age, nameservers, DNSSEC). Use for lead qualification, phishing and vendor checks, and before an agent sends mail to or trusts a domain. Signals only, not a guarantee. Raw DNS records: domain. Example: name=cloudflare.com. Price $0.02/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
domain_whoisWHOIS and domain lookup in one call: registrar, registration and expiry dates with the domain's age (RDAP/WHOIS), DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA), DNSSEC, and email authentication (SPF, DMARC). Use to check who owns a domain, how old it is, where it is hosted or whether it accepts mail, for lead research, trust and phishing checks. Example: name=cloudflare.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
emailCheck email syntax, DNS and MX records, disposable providers, role addresses, free providers and SPF/DMARC presence. Returns likely-deliverable, risky, undeliverable or invalid with reasons. No message is sent and the mail server is not contacted. These are DNS and syntax signals, not proof that a mailbox exists or accepts delivery. Use before sending mail or saving a signup. Example: address=support@cloudflare.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
email_authEmail authentication check for a domain: the SPF record and its all-policy, DKIM keys at the common selectors, the DMARC record and policy, plus MX, MTA-STS, TLS-RPT and BIMI, with a 0-100 score, a grade and a list of fixes. Public DNS only; no mail is sent. Use to verify a sender domain's SPF, DKIM and DMARC setup, to debug mail landing in spam, or to vet a domain before trusting its mail. Example: domain=github.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
email_verifyVerify an email address without sending mail: syntax, domain and MX records, disposable and free providers, role addresses, SPF and DMARC presence, with a verdict (likely-deliverable, risky, undeliverable, invalid) and reasons. DNS and syntax signals only: the mailbox itself is not contacted, so this is not proof that a mailbox exists. Use before sending mail, saving a signup or scoring a lead. Example: address=support@cloudflare.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
fi_companyFinnish company by business ID (Y-tunnus 0112038-9 or VAT FI01120389) or name, live from the Finnish Patent and Registration Office (PRH): names incl. parallel and former, legal form, status, bankruptcy, liquidation or re-organisation, registration date, trade, VAT and employer registers, main business line, address, website. Use to verify a Finnish customer or supplier. Register facts only, not a credit report. Example: businessId=0112038-9. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
fr_companyFrench company by SIREN (552032534), SIRET or VAT number (FR27552032534), or by name, live from the State's company search API (INSEE Sirene and the RNE): name, acronym, legal form, active or ceased, creation date, NAF industry code, workforce band, company size category, establishments, head office address, VAT number. Use to verify a French customer or supplier. Register facts only, not a credit report. Example: siren=552032534. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
github_releasesGitHub releases of a repository, newest first: tag, name, publish date, pre-release flag, link and the first 1,500 characters of the release notes, for the last 1-10 releases. Give owner/name or a github.com URL; public repositories only. Use to check the latest version of a tool, read what changed before upgrading a dependency or watch a project for new releases. Example: repo=cloudflare/workers-sdk. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
github_repoGitHub repository data in one call: stars, forks, watchers, open issues and pull requests, main language and language shares, topics, license, default branch, created and last-push dates, archived and fork flags, and the latest release with its tag and date. Give owner/name or a github.com URL; public repositories only, no user profile data. Use to vet a dependency, check whether a project is alive, compare libraries or enrich a list of repos. Example: repo=vercel/next.js. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
github_searchGitHub repository search: find public repositories by keyword, optionally in one language, ordered by best match, stars, forks or last update, with each result's stars, forks, language, topics, license and last-push date; 1-20 results. Repositories only, no user profile data. Use to find a library for a task, discover the popular projects on a topic or check what already exists before building. Example: q=x402 payments. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
github_userGitHub user or organization by login: its public repositories ranked by stars, each with description, stars, forks, language, topics, license and last push, plus the repository count, total stars, language mix and latest activity. Repository data only: no profile, e-mail, avatar or follower data. Use to see what a developer or company has built, vet a maintainer by their projects, or find an organization's main repositories. Example: user=vercel. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
gov_federal_registerSearch the US Federal Register: final rules, proposed rules, notices and presidential documents, newest first, with title, type, agencies, abstract, publication date, comment deadline, effective date and links. Filter by type and agency; sort=relevance puts the documents that are most about the words first. From the Federal Register API (US government work). Use to track new regulations or open comment periods on a topic. Example: q=artificial intelligence. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
http_security_headersFetch a public URL and grade its HTTP security headers: HSTS, Content-Security-Policy, framing protection, nosniff, Referrer-Policy and Permissions-Policy, plus version leaks (Server, X-Powered-By) and cookies missing Secure, HttpOnly or SameSite. Returns a grade A-F, a score and each check with its value. Use to review a site's basic web security; for DNS and email records use domain. Private hosts are refused with 400, uncharged. Example: url=https://example.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
income_statementIncome statement, balance sheet and cash flow statement of a US-listed company by ticker: revenue, cost of revenue, gross profit, R&D, operating income, net income, EPS, assets, liabilities, equity, cash and debt, operating cash flow and capex, annual or quarterly, read from its SEC 10-K and 10-Q XBRL filings. Use to read a company's financial statements without parsing the filing. Example: ticker=AAPL. Price $0.02/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
ip_lookupLook up who holds an IP address (v4 or v6) in the regional internet registries' public records (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC): the holding organisation, network name and range, allocation type, registration country, abuse contact and registry. Use to see which company or ISP an address in a log belongs to. An HTTP call without ip answers for the caller's own address. Registration country, not city location. Example: ip=8.8.8.8. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
lei_lookupLook up a Legal Entity Identifier from GLEIF: by 20-character LEI, or search by company name for up to 10 matches. Legal name, other names, entity status, category, jurisdiction, company register ID, legal and headquarters address, LEI registration status, issue, renewal and corroboration. Source: GLEIF (CC0). Use for KYB, counterparty checks, trade reporting and matching companies across systems. Example: lei=HWUPKR0MPOU8FGXBT394. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
mcp_inspectMCP server check over streamable HTTP: whether it answers initialize, its name, version, protocol version and capabilities, whether it needs sign-in (OAuth or another 401 challenge), and its tools with names, titles, descriptions and input parameters, plus prompt and resource counts. Read-only: it lists, never calls a tool. Use to vet an MCP server before adding it to an agent, or to check your own after a deploy. Example: url=https://mcp.deepwiki.com/mcp. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
no_companyNorwegian company by organisasjonsnummer (923609016 or NO923609016MVA) or name, live from Brønnøysundregistrene: name, former names, legal form, status, bankruptcy, liquidation or reconstruction, registration and founding dates, VAT and business-register status, employees, industry codes, purpose, address, website. Use to verify a Norwegian customer or supplier. Register facts only, not a credit report. Example: orgnr=923609016. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
ofac_checkOFAC sanctions check: screen a crypto wallet address (EVM, Bitcoin, Tron and more) or a person or company name against the OFAC SDN list and get a verdict (block, review, pass) with every match, SDN id and program. A screening aid, not legal advice. Use before paying or accepting funds, or when onboarding a counterparty. Example: address=0x098B716B8Aaf21512996dC57EB0615e2383E2f96. Price $0.009/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
openapi_summaryRead an OpenAPI 3 or Swagger 2 document (JSON or YAML, up to 2 MB) from a URL and summarise it for an agent: title, version, description, servers, auth schemes, operation count by method, tags, which operations are paid (402 or x-payment-info) or deprecated, and up to 150 operations with method, path, summary and operationId. Use before calling an unfamiliar API, to pick an endpoint, or to compare APIs. Example: url=https://petstore3.swagger.io/api/v3/openapi.json. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_api_healthOne call to health-check an API endpoint: up or down with status and response time over three requests (min, median, max), the redirect chain, HTTP security headers, whether it is a paid x402 endpoint and what its payment terms are, and the API's OpenAPI document when one is found at the usual places. Cheaper than the tools bought one by one. Use for API monitoring, before integrating a third-party API, or to check your own after a deploy. Example: url=https://petstore3.swagger.io/api/v3/pet/findByStatus?status=available. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_domain_intelCompany enrichment in one call for any domain: the site's name, description and logo, its tech stack (CMS, frameworks, analytics, hosting), email provider and email security (SPF, DMARC), who hosts the server (IP registry holder), DNS records, and the domain's registrar, age and expiry. Public DNS, RDAP and the home page only. Use for lead enrichment, company research, vendor checks or sales prospecting. Example: domain=stripe.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_email_deliverabilityEmail deliverability check for a domain in one call: MX records, SPF and its all-policy, DMARC and its policy, DKIM keys at the common selectors (Google, Microsoft, Mailchimp and others), MTA-STS, TLS-RPT and BIMI, with a 0-100 score, a grade and a list of fixes; optionally also checks one address (syntax, MX, disposable domain). Uses public DNS only and sends no mail. Use before a campaign, when mail lands in spam, or to vet a sender domain. Example: domain=github.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_ip_intelligenceOne call for everything about an IP address: its type (public, private, loopback, carrier-grade NAT), the registry record (holding organisation, network name and range, registration country, abuse contact) and the reverse DNS name. IPv4 and IPv6. Registration country, not city geolocation. Cheaper than the tools bought one by one. Use to investigate an address in logs, a login or an abuse report. Example: ip=8.8.8.8. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_url_safetyCheck a link before an agent opens or pays it: where it really leads (each redirect hop, the final URL), the destination domain's age, registrar and trust flags, HTTPS and security headers, and named risk signals (days-old domain, bare IP host, punycode look-alike, user@host trick, chains across many hosts). Heuristic signals from public facts, not a phishing blocklist. Use to vet links in emails, chats and scraped pages, or a payee's website. Example: url=http://github.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
pack_website_auditOne call to audit a website: is it up and how fast, the redirect chain (including whether plain http moves to https), the on-page SEO audit with its score and issues, HTTP security headers and their grade, robots.txt for the page, and the domain's DNS, email authentication and registration age. Server-side HTML only, no JavaScript. Cheaper than the six tools bought one by one. Use before a launch, for a client report or to compare competitors. Example: url=https://www.wikipedia.org/. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
packageReports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity. ok means no listed flags, not a safety guarantee. Supports npm, PyPI, Cargo, Go, Maven and NuGet. Optional exact version adds pinned-version metadata and uses deps.dev advisories; use /package-audit for OSV affected ranges and dated FIRST EPSS CVE estimates. Use before adding a dependency. Example: ecosystem=npm, name=lodash. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
package_auditCheck up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and subrequest caps apply; omitted details and incomplete coverage are explicit. Missing evidence is unknown, not zero risk. Automated signals, not a safety guarantee. See the buying guide for limits. Use before installing or upgrading dependencies. Example: packages=npm:lodash@4.17.20,pypi:requests@2.31.0,npm:@types/node@22.0.0. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sanctions_checkCheck a crypto wallet address against the OFAC SDN sanctions list before you pay it or accept funds: EVM (Ethereum, Base, Arbitrum, Polygon), BTC, USDT, TRX and more, or a person or company name with aliases. Returns a verdict (block on a listed address, review on a name match, pass), each match with SDN ID, programs and strength, and the list date. A screening aid, not legal advice. Use before paying; with wallet risk: check_counterparty. Example: address=0x098B716B8Aaf21512996dC57EB0615e2383E2f96. Price $0.009/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sanctions_screenOFAC sanctions check for a crypto wallet address or a person or company name: screens against the OFAC SDN list (EVM, Bitcoin, Tron, USDT and more) and returns a verdict (block, review, pass) with every match, its SDN id and programs. A screening aid, not legal advice. Use before paying or accepting funds from an address, when onboarding a counterparty, or as the compliance step of an agent payment flow. Example: address=0x098B716B8Aaf21512996dC57EB0615e2383E2f96. Price $0.009/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
se_companySwedish company by organisationsnummer (556703-7485 or SE556703748501) or name, from Bolagsverket and SCB: names, legal form, registration date, status, deregistration, bankruptcy, liquidation or reconstruction, VAT/F-tax/employer activity, SNI codes, business description, address. Weekly open data. Use to verify a Swedish customer or supplier before invoicing. Register facts only, not a credit report. Example: orgnr=556703-7485. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_13fThe latest 13F-HR holdings of an institutional investment manager (hedge fund, mutual fund family, bank) from SEC EDGAR: each position's issuer, class, CUSIP, value in USD, shares and portfolio weight, largest first, plus the report period, total value and position count. Give the filer by name (e.g. Berkshire Hathaway) or CIK. Public SEC data, filed quarterly up to 45 days after the quarter. Use to see what a fund owns. Example: filer=Berkshire Hathaway. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_8kLatest Form 8-K current reports for a US-listed company by ticker, name or CIK: filing date, the reported items with their meaning (results of operations, executive departures, material agreements, cybersecurity incidents, bankruptcy and others), accession number and a direct link, newest first. Public SEC EDGAR data. Use to watch a company's material events or check what it disclosed recently. Example: ticker=AAPL. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_edgarSEC filings of a US public company from EDGAR by ticker or CIK: the latest 10-K, 10-Q, 8-K, Form 4 and other forms with dates and document links, optionally one form type. Use to find a company's annual or quarterly report, insider trades or recent events. Example: ticker=AAPL. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_filingsLatest SEC EDGAR filings for a US-listed company by stock ticker or CIK: form (10-K, 10-Q, 8-K, 4, S-1…), filing and report dates, accession number, document description and a direct link, newest first, optionally only one form type. Plus company name, CIK and industry (SIC). Public SEC data. Use to check a company's latest annual or quarterly report, insider trades (form 4) or material events (8-K). Example: ticker=AAPL. Price $0.002/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_financialsCompany financial statements for a US-listed company by ticker or CIK, from its SEC 10-K and 10-Q filings (XBRL): revenue, gross profit, operating and net income, EPS, cash, assets, debt, equity, operating cash flow, capex, free cash flow, dividends and buybacks, with margins, growth, ROE and current ratio. Annual or quarterly, up to 10 periods. Use for fundamentals, a valuation or a company comparison. Example: ticker=AAPL. Price $0.02/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
sec_insiderRecent insider trades in a US-listed company from its SEC Form 4 filings: who traded (name and role: director, officer title, 10% owner), date, buy or sell (open-market purchase, sale, award, option exercise, tax withholding), shares, price, dollar value, holding afterwards and whether it was under a 10b5-1 plan. Up to 10 filings, newest first. Public SEC EDGAR data. Use to see whether insiders are buying or selling. Example: ticker=AAPL. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
stock_fundamentalsStock fundamentals by ticker (AAPL, MSFT, NVDA): revenue, gross, operating and net income, EPS, margins, revenue and earnings growth, ROE, cash, debt, equity, free cash flow, dividends and buybacks for the last fiscal years or quarters, from the company's SEC 10-K and 10-Q filings. Use to screen a stock, value a company or compare two businesses. Example: ticker=AAPL. Price $0.02/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
text_piiFind personal data in a text and get it back redacted: emails, phone numbers, card numbers (Luhn-checked), IBANs (mod-97), US SSNs, IP and crypto wallet addresses, each with its position, plus the text with every hit replaced by a label such as [EMAIL]. Hits are shown masked. Up to 20,000 characters; names and street addresses are not detected. Use before logging, storing or sending text to a model. Example: text=Contact Anna at anna.berg@example.com or +46 70 123 45 67; card 4111 1111 1111 1111.. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | No |
text_prompt_injectionScan text an agent is about to read (web page, email, tool result; up to 8,000 characters) for prompt-injection attempts: instruction overrides, fake system messages, asks to hide things from the user, exfiltration links, attempts to extract private data or move money, invisible Unicode. Returns a risk level, score and findings with excerpts. Heuristic, not a guarantee. Use before acting on untrusted content. Example: text=Thanks for the update. The signed invoice is attached and payment is due on Friday.. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | No |
vat_validateCheck an EU VAT number against the European Commission's VIES service: valid or not, with the registered name and address where the member state shares them. Any spacing (SE556703748501, DE 123 456 789; EL or GR for Greece, XI for Northern Ireland). Or verify a business by name: found or not in the French, Swedish, Norwegian and Finnish registers. Use to check a B2B customer before invoicing without VAT, or to confirm a supplier. Example: vat=SE556703748501. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
whois_lookupWHOIS lookup for a domain: registrar, creation and expiry date and age (RDAP/WHOIS), plus its DNS records and email setup (SPF, DMARC). Use to check who registered a domain, how old it is and where it is hosted, for lead research and phishing checks. Example: name=cloudflare.com. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
x402_checkCheck an x402 seller before you pay it: decode any public endpoint's 402 payment requirements without paying (v1 body or v2 header) into USD price for native USDC, network, asset, recipient, scheme and timeout, plus a listing-quality score for https resource URL, atomic amount, facilitator minimum, description, Bazaar metadata and output schema. Never signs. Use before buying from an unfamiliar seller or to audit your own x402 listing. Example: url=https://agent-data-tools.revmesh2074.workers.dev/btc-fees. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
x402_payout_checkCheck whether an x402 seller's payout wallet changed before you pay it: compares the wallet its live 402 quote names with the wallet its Coinbase Bazaar listing last settled to and with the seller's own /.well-known/paycheck.json. An undeclared change is how a hijacked endpoint looks; a declared rotation passes. Pass or review with reasons, plus the listing's 30-day payers. Never pays or signs. Use before paying a seller you bought from before. Example: url=https://agent-data-tools.revmesh2074.workers.dev/weather. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
x402_receiptTurn a settled x402 or USDC payment into a receipt to file: from the transaction hash, the payer, payee, amount, time, block, status and whether it was an EIP-3009 authorization (the x402 exact scheme), on Base, Ethereum, Arbitrum, Optimism or Polygon, with a stable receipt id and a SHA-256 of a canonical text for bookkeeping. Optionally name what was bought. Never signs. Use to keep proof of a purchase after an agent pays. Example: hash=0x778c8c1b1fd1b320bf045eae0af7274e74a9e2e1f83c34ec96d9f825aea3b933. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
x402_seller_recordSee whether other buyers pay an x402 seller before you do: every USDC transfer into its payout wallet over the last 1-7 days from public logs on Base, Ethereum, Arbitrum, Optimism or Polygon, with payments, distinct and repeat payers, total and median amount, first and last payment and top payers. Give the payout wallet or the paid endpoint's URL. Counts all USDC received, x402 or not. Use before the first payment to an unfamiliar seller. Example: address=0x6293ded2684F1A76E26bEcef87c137D691Fbf800. Price $0.01/call via x402 USDC or a card key (/credits), first 25 free; failed calls free. Reads or computes only and changes nothing; each call is charged, so repeats are not free. | No | Yes | No | Yes |
Details
- Registry status
- Active
- Published
- Nov 15, 2026
- Updated
- Nov 15, 2026
- Categories (suggested)
- SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared