x402watch

52,778 paid endpoints are listed. 41,522 answered a real 402 at the last check.

Every x402 endpoint on the Coinbase Bazaar and x402scan, probed unpaid every six hours. A listing tells you the price a seller wrote down. This tells you whether the endpoint is reachable, whether it charges what it declared, and how fast it answers. Ranked by an assay score out of 100.

Last check 2026-11-14 06:38 UTC · 52,778 probed

41,522 answering 4025,071 down5,452 rejecting733 no paywall944 price drift
  1. 100api.companyrecords-api.workers.dev/api/gov/canadabuys-tendersOpen Government of Canada tender notices from the CanadaBuys open data CSV: reference number, English title, publication date, closing date, status, notice type, procurement method and category. Optional word filter on the English title. Open notices only (the file is refreshed by CanadaBuys).$0.002 Base41 ms2 payers100% up
  2. 100api.companyrecords-api.workers.dev/api/gov/california-dre-real-estateCalifornia DRE real estate licence lookup (official public licence records): by licence ID get licence type, name, mailing address, status, expiration and issue dates, former names, responsible broker, disciplinary/public comments; or search by licensee/company name (optional city) for matching licence IDs, names, licence types and cities.$0.002 Base23 ms2 payers100% up
  3. 100api.companyrecords-api.workers.dev/api/gov/business-bankruptcy-filingsUS federal bankruptcy dockets matching your text from CourtListener (Free Law Project): case name, docket number, court, chapter, filing and termination dates, judge and a CourtListener docket link. Search results only; not every PACER filing and not a complete bankruptcy registry.$0.002 Base33 ms2 payers100% up
  4. 100api.companyrecords-api.workers.dev/api/gov/australia-data-gov-auAustralian government open datasets from data.gov.au (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term. Catalogue metadata only, not the data files.$0.002 Base39 ms2 payers100% up
  5. 100api.companyrecords-api.workers.dev/api/gov/ares-czechCzech business register (ARES) record by IČO (8-digit company number): business name, VAT ID (DIČ), legal form code, registered address, incorporation and last-update dates, tax office code. Public ARES data; codes are raw ARES codes.$0.002 Base36 ms2 payers100% up
  6. 100api.companyrecords-api.workers.dev/api/gov/anac-italy-procurementItalian public procurement datasets from ANAC open data (dati.anticorruzione.it, CKAN): dataset title, publisher, licence, last modified date, number of resources and dataset link, for a search term. Catalogue metadata only, not the tender records.$0.002 Base37 ms2 payers100% up
  7. 100api.companyrecords-api.workers.dev/api/b2b/y-combinatorY Combinator startup directory: searches companies by name and returns batch, status, industry, team size, one-liner, website and YC profile URL. Community-maintained open mirror of YC's public company list; not an official YC API.$0.002 Base59 ms2 payers100% up
  8. 100api.companyrecords-api.workers.dev/api/b2b/welcometothejungle-companiesEmployer profiles from Welcome to the Jungle (about 17,000 companies, mostly France and Europe): name, sectors, size band and employee count, offices (city, region, country, headquarters flag), open jobs count, tech stack, labels/certifications, short description, accepts spontaneous applications, logo and profile URL; plus the number of matches. Search by keyword, filter by office country and hiring-now.$0.002 Base25 ms2 payers100% up
  9. 100api.companyrecords-api.workers.dev/api/b2b/techstars-portfolioTechstars portfolio companies (5,600+): search by keyword and filter by region, country, first program year, exited or unicorn status. Each company: name, one-line description, website, city, state, country, region, industry verticals, Techstars programs attended, first session year, accelerator/network flags, exit and $1B+ flags, Crunchbase link and logo; plus the number of matches.$0.002 Base35 ms2 payers100% up
  10. 100api.companyrecords-api.workers.dev/api/b2b/spain-empresiaSpanish company dossier from Empresia (data from the Mercantile Registry gazette BORME): status, CIF tax id, business purpose and CNAE code, share capital, sales band, registry, last filed accounts year, employees, board type, auditor, phones, websites and the current directors/officers with appointment dates. Search by company name or open a company by its Empresia slug; other matches are listed.$0.002 Base32 ms2 payers100% up
  11. 100api.companyrecords-api.workers.dev/api/b2b/skip-traceOwner of record for a New York City property: owner name, tax lot (BBL), building class, land use, year built, floors, units, lot and building area, assessed value and zoning, from NYC's public PLUTO tax-lot file. NYC only. Public property records only: no phone, e-mail or people-search data.$0.002 Base33 ms2 payers100% up
  12. 100api.companyrecords-api.workers.dev/api/b2b/pgatour-leaderboardPGA Tour current and upcoming events from ESPN's public scoreboard: tournament name, dates, status, and the player leaderboard when a tournament is running (empty list before the first round). Public ESPN data, not an official PGA Tour feed.$0.002 Base23 ms2 payers100% up
  13. 100api.companyrecords-api.workers.dev/api/b2b/payscale-company-benefitsUS employer pay and benefits from PayScale: most reported benefits with counts, retirement and health benefit types, salary, bonus, profit-sharing, commission and hourly percentiles (10-90) with sample sizes, job satisfaction, stress and gender split vs comparable employers, top locations and company facts. Employer by PayScale key (e.g. Microsoft_Corp) or name.$0.002 Base37 ms2 payers100% up
  14. 100api.companyrecords-api.workers.dev/api/b2b/openllm-leaderboardOpen LLM Leaderboard v2 (Hugging Face, archived March 2025): finds open-source language models by name across all 4,576 leaderboard rows and returns average score, IFEval, BBH, MATH Lvl 5, GPQA, MUSR and MMLU-PRO scores, parameter count, likes, license and hub URL, best average first.$0.002 Base45 ms2 payers100% up
  15. 100api.companyrecords-api.workers.dev/api/b2b/openfda-drug-ndcopenFDA National Drug Code directory: searches US drug listings by brand or generic name and returns labeler (company), NDC code, dosage form, route, marketing start date and active ingredients. Public FDA data; not medical advice.$0.002 Base26 ms2 payers100% up
  16. 100api.companyrecords-api.workers.dev/api/b2b/nyse-listings-directoryNYSE-listed symbols from the public Nasdaq Trader symbol directory (otherlisted file): searches by ticker or security name and returns symbol, security name, exchange code, ETF flag and round lot size. Symbol directory only, no prices or company profiles.$0.002 Base41 ms2 payers100% up
  17. 100api.companyrecords-api.workers.dev/api/b2b/nyc-certified-businessNYC Small Business Services certified business list (NYC Open Data): searches vendors by formal or trade name and returns certification, NAICS industry, city, website and renewal date. Public open data; owner contact and personal fields are excluded on purpose.$0.002 Base31 ms2 payers100% up
  18. 100api.companyrecords-api.workers.dev/api/b2b/nyc-business-licensesNYC Department of Consumer and Worker Protection license list: searches by business name and returns license number, category, status, expiry date and address (borough, zip). Public open data (Socrata); license rows only.$0.002 Base37 ms2 payers100% up
  19. 100api.companyrecords-api.workers.dev/api/b2b/ncarb-architects-directoryNCARB-certified architects (US national certificate holders, all licensed in at least one US jurisdiction) from NCARB's official Certificate Lookup: name, city, state/province and country, filtered by last name, first name, city, US state/Canadian province or country, with the total match count. To confirm a specific license number use the state board roster.$0.002 Base45 ms2 payers100% up
  20. 100api.companyrecords-api.workers.dev/api/b2b/macvendors-lookupMAC address vendor lookup (IEEE OUI registry via macvendors.com): returns the registered hardware vendor for a MAC address or OUI prefix. Public free API; vendor name only, no device data.$0.002 Base27 ms2 payers100% up
  21. 100api.companyrecords-api.workers.dev/api/b2b/jobvite-jobsOpen jobs of a company whose careers site runs on Jobvite (jobs.jobvite.com/<company>): every open position with department, title, location (or number of locations) and link, plus counts per department as a hiring signal; with a job id, that posting's details (date posted, employment type, department, locations, salary range when published, description text).$0.002 Base26 ms2 payers100% up
  22. 100api.companyrecords-api.workers.dev/api/b2b/ireland-cro-companiesIrish companies from the Companies Registration Office (CRO) official open data (CC BY 4.0, updated daily): search by name or look up a company number; returns company number and name, status, legal type, registration and dissolution dates, last annual return and accounts dates, next annual return date, registered address, Eircode and principal object code.$0.002 Base37 ms2 payers100% up
  23. 100api.healthtravel-api.workers.dev/api/health/eu-cosing-cosmeticsEU cosmetics regulatory status for a substance name: matching Annex II (prohibited), III (restricted), IV (colorants), V (preservatives) and VI (UV filters) entries of Regulation (EC) No 1223/2009 from the European Commission's CosIng database, with reference number, maximum concentration, conditions and warnings, CAS/EC numbers, amending regulation and SCCS opinions.$0.002 Base36 ms2 payers100% up
  24. 100api.companyrecords-api.workers.dev/api/b2b/indiamartIndian wholesale suppliers and manufacturers on IndiaMART for a product keyword: supplier name, state, years exporting, nature of business, year established, verification badges (verified exporter, TrustSEAL, GST, IEC), rating and review count, export markets, product name, category, listed price and unit, minimum order and key specifications, with catalogue and product links. First result page (about 10 listings).$0.002 Base29 ms2 payers100% up
  25. 100api.companyrecords-api.workers.dev/api/b2b/iceland-skatturinn-companiesIcelandic company register (Fyrirtækjaskrá, Skatturinn): search companies by name (kennitala/ID number, name, address), or look up one company by its 10-digit kennitala for the full public record: name, registration date, other names, postal and legal address, municipality, legal form (ehf., hf., sf....), officers listed by the register, ÍSAT industry classification, and VAT numbers with registration dates.$0.002 Base28 ms2 payers100% up
  26. 100api.healthtravel-api.workers.dev/api/health/drugbank-interactionDrug-drug interaction text from the FDA label (openFDA) of drug A that mentions drug B: matching sentences from the label's drug interactions section, with label set ID and effective date. Label text only; no severity score. If no sentence matches, that does NOT mean there is no interaction.$0.002 Base37 ms2 payers100% up
  27. 100api.companyrecords-api.workers.dev/api/b2b/g2-software-categoriesG2 software categories: name, slug and G2 URL for about 2,000 categories from G2's public category directory, optionally filtered by a word (e.g. crm, security). Product lists, ratings and reviews inside each category are not included.$0.002 Base30 ms2 payers100% up
  28. 100api.companyrecords-api.workers.dev/api/b2b/hyperliquid-leaderboardHyperliquid public trader leaderboard: top accounts ranked by PnL for a chosen window (day, week, month, allTime), with account value, ROI and traded volume. Public on-chain stats; addresses only, no names. The source file is large, so the first call after a cache miss is slow.$0.002 Base30 ms2 payers100% up
  29. 100api.companyrecords-api.workers.dev/api/b2b/gsa-elibraryUS federal GSA schedule contractor dossier from GSA's official CALC+ API: the contractor's GSA contracts (contract number, schedule, SINs, start and end dates, small-business status), its awarded labor categories with hourly ceiling prices, and price statistics (min, median, average, max, percentiles) plus education, experience and worksite mix. Search by contractor name or a service keyword. Rates are ceiling prices, not invoiced prices.$0.002 Base27 ms2 payers100% up
  30. 100api.healthtravel-api.workers.dev/api/health/covid19-cdc-wastewaterCDC National Wastewater Surveillance System (NWSS) sampling sites in one US state (data.cdc.gov): wastewater plant, county, population served, 15-day detection proportion, percentile and sample dates. The pathogen is not named in the dataset; this is not confirmed COVID-19 activity. Up to 50 sites per call.$0.002 Base34 ms2 payers100% up
  31. 100api.companyrecords-api.workers.dev/api/b2b/france-bodacc-gazetteFrance BODACC commercial announcements (official gazette open data): latest notices, optionally filtered by text, with publication date, court, company register number and the notice URL. Public open data; announcements only, no credit score.$0.002 Base25 ms2 payers100% up
  32. 100api.companyrecords-api.workers.dev/api/b2b/finland-ytj-companiesFinland YTJ business register (PRH open data): searches companies by name and returns business ID, registration date, company form, current name and address. Public open data; no financial or credit information.$0.002 Base29 ms2 payers100% up
  33. 100api.companyrecords-api.workers.dev/api/b2b/euronext-equitiesEuronext listed equities (daily list from live.euronext.com): lists or searches shares on one Euronext market by MIC code (e.g. XAMS Amsterdam, XPAR Paris) and returns name, ISIN, ticker, currency, last close, volume and turnover. End-of-day data from the last trading day; not real-time.$0.002 Base39 ms2 payers100% up
  34. 100api.companyrecords-api.workers.dev/api/b2b/doximityUS clinician data from Doximity's public directory. By profile (slug or doximity.com/pub URL): name, credentials, specialty, practice address with coordinates, phone, fax, education and training, board certifications, awards and hospital affiliations when listed. By location (state or state/city, e.g. north-carolina/raleigh): an alphabetical page of 50 clinicians with name, credentials and slug, plus a next-page cursor.$0.002 Base24 ms2 payers100% up
  35. 100api.companyrecords-api.workers.dev/api/b2b/doabooks-directory-open-accessPeer-reviewed open access books from DOAB, the Directory of Open Access Books: keyword search returning title, authors/editors, publication date, abstract and the DOAB record link (with handle), plus the total number of matches. Paged, newest index first by relevance.$0.002 Base44 ms2 payers100% up
  36. 100api.companyrecords-api.workers.dev/api/b2b/cslb-californiaCalifornia licensed contractors from the CSLB (Contractors State License Board) public Data Portal for one license classification (e.g. B, C-10 Electrical, C-36 Plumbing), optionally one county: license number, business name and type, address, phone, county, issue/expiration dates, classifications and status; county lists add bond and workers' comp insurer. Filter by city; paged.$0.002 Base36 ms2 payers100% up
  37. 100api.healthtravel-api.workers.dev/api/health/clia-laboratory-finderCMS CLIA-certified clinical laboratories in one US state (Provider of Services File, latest quarterly release): CLIA provider number, lab name, city, street address, phone, certification date and program termination code. Does not list tests performed. Up to 50 labs per call.$0.002 Base30 ms2 payers100% up
  38. 100api.companyrecords-api.workers.dev/api/b2b/chicago-business-licensesCity of Chicago current active business licenses: searches by legal or trade name and returns license type, business activity, address, ward, and license dates. Public open data (Socrata); licence rows only, no ownership or credit data.$0.002 Base31 ms2 payers100% up
  39. 100api.companyrecords-api.workers.dev/api/b2b/census-business-builderUS Census County Business Patterns by state (latest year published, all legal forms): number of establishments, paid employees, first-quarter and annual payroll for a state FIPS code, for all industries or one NAICS code (2 to 6 digits). Official US Census Bureau data from its bulk state file. Aggregate counts only, no company names.$0.002 Base28 ms2 payers100% up
  40. 100api.companyrecords-api.workers.dev/api/b2b/brreg-norway-companiesNorway Business Register (Brønnøysund open API): searches companies by name and returns organisation number, legal form, industry code, employee count, registered address and registration status. Public open data, no key.$0.002 Base40 ms2 payers100% up
  41. 100api.companyrecords-api.workers.dev/api/b2b/booksyBeauty, barber and wellness businesses listed on Booksy (US) for a category and region: name, address, coordinates, rating and review count, website/Instagram/Facebook, Booksy Pay, promoted flag and the first listed services with price and duration. Returns the first 20 results of Booksy's own search page plus the total count. regionId is the number in a Booksy search URL (e.g. 18229 = Chicago); without it the search is US-wide.$0.002 Base39 ms2 payers100% up
  42. 100api.companyrecords-api.workers.dev/api/b2b/benchmark-internationalRecent M&A deals closed by Benchmark International, the mid-market sell-side adviser: target company, acquirer, deal summary (stake, location, sector as written) and announcement link, newest first, optionally filtered by a keyword (company, country, sector). Only announced completed transactions; confidential live mandates are not public.$0.002 Base59 ms2 payers100% up
  43. 100api.healthtravel-api.workers.dev/api/health/cell-line-depmap-cancerCancer cell line lookup with DepMap IDs, from Cellosaurus (SIB, the reference cell line knowledge base): find a line by name (e.g. MCF-7), Cellosaurus accession (CVCL_…) or DepMap ID (ACH-…), or list DepMap lines for a disease. Returns names and synonyms, DepMap ID, ATCC catalog number, disease (NCIt), species, sex, donor age, sampling site, genetic ancestry and the Cellosaurus link.$0.002 Base27 ms2 payers100% up
  44. 100api.companyrecords-api.workers.dev/api/b2b/apis-guru-openapi-directoryAPIs.guru open directory of public API descriptions (OpenAPI specs): finds API providers by domain name (e.g. stripe, 1forge, googleapis) and returns each of their APIs with title, preferred version, description, categories, the OpenAPI spec URL and dates. Open-source catalogue of published specs, not a list of companies.$0.002 Base23 ms2 payers100% up
  45. 100api.companyrecords-api.workers.dev/api/b2b/bbbBetter Business Bureau search (bbb.org public search JSON): finds businesses by name and returns city, state, category, BBB rating, membership flag and profile URL. Public listings only; no complaint details. Respect BBB terms before reselling.$0.002 Base37 ms2 payers100% up
  46. 100api.companyrecords-api.workers.dev/api/gov/sbir-government-grantsUS SBIR/STTR small-business R&D awards from SBIR.gov (official SBA database): keyword search (SBIR.gov result order), with award title, company, program and phase, agency, year, and for the top results the award amount, contract number, UEI, solicitation number, start/end dates, company address and woman-owned/HUBZone flags (from each award page). 10 results per page.$0.003 Base32 ms2 payers100% up
  47. 100api.companyrecords-api.workers.dev/api/gov/court-records-ecourt-indiaIndian High Court judgments and final orders from the eCourts judgment portal (via the public 'Indian High Court Judgments' AWS Open Data mirror, 25 High Courts, 1950-2026): case title, judges, CNR, registration and decision dates, disposal nature, opening text and PDF link. List a court's judgments for a decision year (CNR order, paged) or look up a CNR. Mirror is updated about quarterly (CC-BY-4.0, Dattam Labs); not live case status.$0.003 Base32 ms2 payers100% up
  48. 1001gateway.dev/v1/onchain/pricesUse when an agent needs a token's USD price without a third-party price feed. Input: tokens (up to 10, base:0x… or sol:<mint>). Output: per token priceUsd, confidence, the pool used (Uniswap v3 / Aerodrome on Base, Orca Whirlpool on Solana; fee tier, depth in USD), path (direct USDC or via WETH/SOL), warnings; no price below $1,000 depth. Spot, not TWAP. Example: ?tokens=base:0x940181a94A35A4569E4529A3CDfB74e38FD98631$0.003 Base59 ms2 payers100% up
  49. 1001gateway.dev/v1/web/readUse when an agent already has a URL and needs the page as clean Markdown (boilerplate removed, tables kept). Input: url, optional max_chars (500-60000), flags=1 for rule-based prompt-injection signals. Output: JSON markdown, title, language, finalUrl, chars, truncated. SSRF-safe; pages opting out with noai are refused. English brief: /v1/web/read/brief. Search+read: /v1/web/search-read. Example: ?url=https://example.com/$0.002 Base66 ms2 payers100% up
  50. 1001gateway.dev/v1/web/searchUse when an agent needs current web results for a query. Input: q, optional max (1-10, default 5), time_range (day, week, month, year). Output: JSON results with title, URL and date when known, provider and retrieval time. For page text use /v1/web/search-read. Provider failure is not charged. Example: ?q=x402+payment+protocol&max=5$0.006 Base198 ms2 payers100% up
  51. 1001gateway.dev/v1/kr/addressUse when an agent must normalize or translate a South Korean address (shipping, checkout, KYC forms). Input: q (Korean address or part of one, e.g. road name + number or neighborhood + lot number), optional limit (1-5). Output: JSON matches with official road-name and lot-number addresses in Korean and English, postal code, building name, admin and road codes. Data: Ministry of the Interior road-name address API. Example: ?q=테헤란로 152$0.002 Base68 ms2 payers100% up
  52. 1001gateway.dev/v1/kr/business/statusUse when an agent must check that a South Korean business is still operating before paying, contracting or onboarding it (KYB, invoice checks). Input: b_no (1-20 business registration numbers, comma-separated, hyphens ok). Output: JSON per number: status (active, suspended, closed, unregistered), VAT taxpayer type, closure date, tax-type change and e-invoice dates, companyId. Data: National Tax Service, synced every 30 min. Example: ?b_no=1248100998$0.002 Base84 ms2 payers100% up
  53. 1001gateway.dev/v1/kr/companyUse when an agent needs a normalized profile of a South Korean company for KYB, research or sales. Input: id (companyId from /v1/kr/company/resolve). Output: JSON profile: names, business/corporate/DART/stock ids, market, KSIC code, founding date, fiscal year end, address, homepage, KONEPS supplier registration. No CEO names. DART data is a weekly snapshot of KRX-listed companies (asOf in response). Data: OpenDART, KONEPS. Example: ?id=kr-dart-00126380$0.0045 Base59 ms2 payers100% up
  54. 100derivatives-pricer-production.up.railway.app/v1/option/price-from-surfacePrice options on a submitted IV surface (total-variance bilinear in log-moneyness). Returns price, interpolated σ, and Greeks. Not for scalar σ.$0.08 Solana269 ms2 payers100% up
  55. 100derivatives-pricer-production.up.railway.app/v1/option/implied-volOne market premium → implied vol σ̂ plus Greeks at the solved σ. Cheaper/faster than a full surface. Not for multi-quote books.$0.03 Solana300 ms2 payers100% up
  56. 100netintel.dev/cert-transparency/lookupQuery the crt.sh certificate transparency log database to enumerate all SSL certificates ever issued for a domain — returns subdomains discovered, certificate issuers, validity periods, and a risk score flagging wildcard certs, expiring certs, and suspicious issuance patterns.$0.01 Base197 ms2 payers100% up
  57. 100netintel.dev/breach-check/passwordCheck if a password has appeared in known data breaches using the HaveIBeenPwned Pwned Passwords API with k-anonymity — the full password is never transmitted, only a 5-character SHA-1 hash prefix — returns breach count and a risk classification so agents can enforce password policies without storing or exposing credentials.$0.01 Base136 ms2 payers100% up
  58. 100netintel.dev/redirect/traceFollows a URL through its full redirect chain (up to 20 hops), recording status codes, timing, headers, TLS status, and protocol downgrades per hop, then returns an overall redirect health grade (A–F).$0.01 Base130 ms2 payers100% up
  59. 100netintel.dev/ssl/analyzePerforms a TLS handshake to inspect the certificate chain, probes supported TLS versions (1.0–1.3), detects weak keys and expiry issues, and returns an overall security grade (A/B/C/F). For just the cert facts fast, see the cheaper /ssl/cert (quick tier).$0.007 Base254 ms2 payers100% up
  60. 100netintel.dev/web/searchWeb search for AI agents — one query in, ranked live results out (title, url, published_date, author, score, optional snippets). Neural + keyword modes, category/domain/date filters. For a direct answer use /exa/answer. Keyless x402, pay per call on Base or Solana.$0.01 Base275 ms2 payers100% up
  61. 100netintel.dev/github-intel/analyzeFetch public metadata for any GitHub repository — stars, forks, open issues, language breakdown, license, contributors, last commit date, topics, and an activity/health score — so agents can evaluate dependencies, research projects, and assess open source health without the GitHub API complexity. Pass repo as ?repo=owner/repo (GET) or {"repo":"owner/repo"} (POST).$0.03 Base110 ms2 payers100% up
  62. 100netintel.dev/sitemap-parser/fetchFetch and parse any XML sitemap or sitemap index file — returns URLs with their priority, change frequency, and last modified date, follows sitemap indexes one level deep (first 3 child sitemaps), and auto-discovers the sitemap from robots.txt or common paths when given a bare domain — so agents can enumerate site content for crawling, indexing, and SEO analysis.$0.01 Base82 ms2 payers100% up
  63. 100netintel.dev/subnet/calcCalculates IPv4/IPv6 subnet details from CIDR notation — network/broadcast, netmask, wildcard (Cisco ACL) mask, binary/hex masks, usable host range, RFC classification (private/loopback/multicast), supernet, and subnet-split counts. Pass comma-separated CIDRs to detect overlaps and classify each pair (subnet/supernet/partial overlap/disjoint); multi-CIDR responses return {subnets, overlaps}.$0.005 Base159 ms2 payers100% up
  64. 100netintel.dev/wallet/balanceToken balance for any wallet — native coin, USDC and any ERC-20 on Base, Ethereum, or Solana, with USD estimates — straight from public RPCs, no API key. Raw units as decimal strings plus formatted numbers; add up to 10 ERC-20 contracts via tokens=. 60s cache; an empty, never-used address is a real answer (zeros + no_activity_detected finding).$0.005 Base102 ms2 payers100% up
  65. 100api.webintel-api.workers.dev/api/search/benzingaLatest Benzinga financial news (the public JSON feed behind benzinga.com): headline, teaser, author, time, URL, tickers, channels and tags. Filter by stock tickers (e.g. AAPL,TSLA) and/or words in the headline/teaser. Newest first, up to 100 stories; no paging into older news, no full article text. Public, no key.$0.002 Base153 ms2 payers100% up
  66. 100api.webintel-api.workers.dev/api/search/dappradar-rankingsTop 50 dapps from DappRadar's public rankings page: rank, name, token symbol, chains, market cap, token price, price change, trading volume, unique active wallets (UAW) and TVL, for 24h/7d/30d, optionally for one chain (eth, solana, bnb, base, polygon, arbitrum, tron...). Values in USD as shown by DappRadar; missing values are null. Public page, no key.$0.002 Base80 ms2 payers100% up
  67. 100api.webintel-api.workers.dev/api/security/sslbl-abuse-certsChecks a certificate SHA-1 fingerprint (40 hex characters) against the abuse.ch SSL Blacklist of certificates seen on malware botnet C2 servers. A hit returns the date added and the malware reason from the list. Only certificates this list tracks are covered.$0.002 Base33 ms2 payers100% up
  68. 100api.webintel-api.workers.dev/api/search/doj-press-releasesUS Department of Justice press releases from the justice.gov public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key.$0.002 Base34 ms2 payers100% up
  69. 100api.webintel-api.workers.dev/api/search/datacite-metadataDataCite DOI search (public REST API, no key): DOI, title, publication year, resource type, publisher, creators and landing page for datasets, software and other research outputs. Metadata only.$0.002 Base43 ms2 payers100% up
  70. 100api.webintel-api.workers.dev/api/security/whois-rdapDomain registration facts via RDAP (IANA bootstrap, then the registry's own server): registration, last change and expiry dates, days left, registrar name, status flags, nameservers and DNSSEC delegation flag. Registrant contact data is usually redacted by registries and is not returned.$0.002 Base36 ms2 payers100% up
  71. 100api.webintel-api.workers.dev/api/security/vpn-proxy-detectorChecks an IPv4 address against the public X4BNet list of commercial VPN provider address ranges (about 11,000 CIDR blocks, refreshed by the list's maintainer). Returns whether the address falls in a listed VPN range and which range. A miss does not prove a direct connection, and IPv6 is not covered.$0.002 Base50 ms2 payers100% up
  72. 100api.webintel-api.workers.dev/api/security/urlhaus-malwareChecks whether a host (domain or IP) is known to abuse.ch URLhaus as a malware distribution host: first seen, number of malware URLs, Spamhaus DBL / SURBL status and the latest URLs with status (online/offline), threat type, tags, reporter and URLhaus reference.$0.002 Base54 ms2 payers100% up
  73. 100api.webintel-api.workers.dev/api/security/tor-exit-nodesChecks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs). If it is an exit, adds the relays for that address from Onionoo: nickname, flags, country, first and last seen. Only exit IPs are on the list; a relay's other IPs are not checked.$0.002 Base75 ms2 payers100% up
  74. 100api.webintel-api.workers.dev/api/security/tls-cipher-enumTLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Reads existing reports only; a host that was never scanned returns a retry error.$0.002 Base57 ms2 payers100% up
  75. 100api.webintel-api.workers.dev/api/security/tls-alpn-detectorReports which newer HTTP protocols a site advertises: HTTP/3 (h3) and older draft or HTTP/2 alternatives in its Alt-Svc response header, and the Alt-Svc max-age. This is what the server announces, not a TLS ALPN negotiation: the fetch this tool makes cannot choose the protocol, so a site that negotiates but does not send Alt-Svc will show as not advertised.$0.002 Base103 ms2 payers100% up
  76. 100api.webintel-api.workers.dev/api/security/threatfox-iocsSearches abuse.ch ThreatFox for indicators of compromise matching a term (IP, IP:port, domain, URL or file hash): IOC, type, malware family, threat type, confidence, first/last seen, reporter, tags and Malpedia link. Optional exact match and a first-seen window in days.$0.002 Base98 ms2 payers100% up
  77. 100api.webintel-api.workers.dev/api/security/talos-ip-blacklistCisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (daily, monthly and last 30 days), the /24 network's average magnitude and how many neighbouring addresses in that /24 Talos rates untrusted, poor, neutral or favorable.$0.002 Base77 ms2 payers100% up
  78. 100api.webintel-api.workers.dev/api/security/surbl-uri-lookupChecks a domain against SURBL's multi-list (multi.surbl.org): whether it appears in spam or phishing URI lists. Listed domains return a 127.0.0.x code. Not listed means not in SURBL's current lists, not that the domain is safe.$0.002 Base84 ms2 payers100% up
  79. 100api.webintel-api.workers.dev/api/security/ssl-cert-chainHTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartbleed/POODLE/BEAST flags and HSTS. Only reads reports SSL Labs already has, so a host that was never scanned returns a retry error instead of a new scan.$0.002 Base54 ms2 payers100% up
  80. 100api.webintel-api.workers.dev/api/security/spamhaus-zenSpamhaus blocklist check through Spamhaus's official Data Query Service: an IPv4 address against ZEN (SBL spam sources, CSS snowshoe, XBL exploited/botnet hosts, DROP hijacked ranges, PBL end-user ranges) or a domain against the Domain Block List (spam, phishing, malware, botnet C&C, abused legitimate domains). Returns listed yes/no, every return code with the list it means, and Spamhaus's lookup link. Point-in-time answer.$0.002 Base109 ms2 payers100% up
  81. 100api.webintel-api.workers.dev/api/security/spameatingmonkeyChecks an IPv4 mail-sending address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) through public DNS. A listed address returns its 127.0.0.x return code; an unlisted one returns no record. Listings change often; this is a point-in-time answer.$0.002 Base105 ms2 payers100% up
  82. 100api.webintel-api.workers.dev/api/security/snmp-exposureReports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address. Passive and possibly old; no community string is tried, so default or public community access is not tested.$0.002 Base153 ms2 payers100% up
  83. 100api.webintel-api.workers.dev/api/security/smb-exposure-testChecks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address. Says whether SMB was seen open and when the record was last refreshed by the host data (not a live test). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed.$0.002 Base92 ms2 payers100% up
  84. 100api.webintel-api.workers.dev/api/security/security-headersChecks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy. Returns present/missing headers with their values and a score out of 7. It does not judge the quality of the values.$0.002 Base86 ms2 payers100% up
  85. 100api.webintel-api.workers.dev/api/security/reverse-dns-ptrReverse DNS (PTR) names for an IPv4 address, and forward-confirmed reverse DNS: whether each PTR name resolves back (A record) to the same address. Up to 3 PTR names are checked. Many addresses have no PTR record; that is a normal answer.$0.002 Base78 ms2 payers100% up
  86. 100api.webintel-api.workers.dev/api/security/referrer-policy-auditReads a site's Referrer-Policy header and its <meta name=referrer> tag from the home page, works out the policy a browser would apply, and rates how much of the URL it sends to other sites (strict, moderate or leaky). One GET; links on other pages can set their own policy.$0.002 Base98 ms2 payers100% up
  87. 100api.webintel-api.workers.dev/api/security/rdp-exposure-checkChecks Shodan's passive scan records for TCP port 3389 (RDP) on an IPv4 address. Says whether RDP was seen open (not a live test, and the record can be days old). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed.$0.002 Base76 ms2 payers100% up
  88. 100api.webintel-api.workers.dev/api/security/phishtank-checkLooks one http or https URL up in the PhishTank phishing database (live checkurl lookup, no key). Returns whether PhishTank has the URL and, if so, its phish id, verification flag and validity. Absence means PhishTank has no record of this exact URL, not that it is safe.$0.002 Base70 ms2 payers100% up
  89. 100api.webintel-api.workers.dev/api/security/openphish-feedChecks a URL or host against the OpenPhish public phishing feed (about 300 currently active phishing URLs, updated continuously). Returns whether the exact URL or any URL on the same host is listed, the feed size and up to 5 example URLs. Not listed does not mean safe; the feed is short and changes fast.$0.002 Base74 ms2 payers100% up
  90. 100api.webintel-api.workers.dev/api/security/open-resolver-checkReports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address. It is a passive port fact only: it does not send a query, so it cannot say whether the server answers recursively for outside names. Absence means not seen, not closed.$0.002 Base42 ms2 payers100% up
  91. 100api.webintel-api.workers.dev/api/security/ntp-monlist-auditReports whether Shodan's pre-collected passive scan data shows NTP (port 123) seen open on an IPv4 address. Passive and possibly old; the monlist amplification check itself is not run, so this cannot say whether monlist is enabled.$0.002 Base93 ms2 payers100% up
  92. 100api.webintel-api.workers.dev/api/security/mx-server-testFor a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address. Passive and possibly old; no SMTP conversation, banner, STARTTLS or certificate test is made.$0.002 Base38 ms2 payers100% up
  93. 100api.webintel-api.workers.dev/api/security/mta-sts-validatorChecks MTA-STS for a mail domain: the _mta-sts TXT record (v=STSv1 and id) and the HTTPS policy file (mode enforce, testing or none, the MX patterns and max_age). Reports whether the record and the policy are both present and whether the policy's version is valid. Does not test the mail servers themselves.$0.002 Base58 ms2 payers100% up
  94. 100api.webintel-api.workers.dev/api/security/mitre-attck-matrixLooks up one MITRE ATT&CK technique (e.g. T1059 or T1059.001) on its official public page: its name, the tactic-level summary text and the page title. Reads one page per call; it does not return the whole matrix or a technique's sub-techniques list.$0.002 Base47 ms2 payers100% up
  95. 100api.webintel-api.workers.dev/api/security/malbazaar-samplesLooks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample itself is never downloaded.$0.002 Base46 ms2 payers100% up
  96. 100api.webintel-api.workers.dev/api/security/jwt-token-inspectorDecodes a JWT you supply (header and payload, base64url JSON) and reports its algorithm, key id, claims, and time checks (exp, nbf, iat). Flags alg none, symmetric HS algorithms, missing exp and a jku/x5u key reference. It does not verify the signature, because no key is given, and it does not fetch the key URL.$0.002 Base46 ms2 payers100% up
  97. 100api.webintel-api.workers.dev/api/security/ipsum-threat-levelChecks an IPv4 address against IPsum, an aggregate of public blocklists: returns the number of source feeds that list it (its level, 1 to 8) and whether it is listed at all. A higher level means more feeds agree. Not listed means none of the aggregated feeds list it.$0.002 Base54 ms2 payers100% up
  98. 100api.webintel-api.workers.dev/api/security/ip-geolocation-asnIPv4 or IPv6 address → covering BGP prefix, origin AS number and holder name, whether the prefix is announced, and a coarse country and map point, all from RIPEstat. Location is an estimate (a block-level database), not a street address; the city is often empty.$0.002 Base103 ms2 payers100% up
  99. 100api.webintel-api.workers.dev/api/security/dns-caa-recordsLists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-report address (iodef). Shows the records on the exact name only; CAA is inherited from parent domains when a name has none, which this tool does not walk.$0.002 Base48 ms2 payers100% up
  100. 100api.webintel-api.workers.dev/api/security/dkim-key-checkerReads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs 2048-bit RSA), and basic syntax (v=DKIM1). Follows one CNAME, which large providers use. Does not check a signed message.$0.002 Base63 ms2 payers100% up