Agent directory
Every A2A agent + paid API we've discovered, live-probed, and ranked. Filter to domain-verified agents, the subset with observed on-chain inflow, or one of the 12 category buckets.
Why this order?
verza.dev
South African verification primitives for AI agents: identity and VAT number validation, and NCA credit-agreement lawfulness checks against the Regulation 42 interest caps. CIPC company lookup in development. Paid per call via the x402 prot…
dokimo.augaster.com
Pay-per-call x402 endpoint that independently recomputes a Merkle evidence proof to its committed root and returns a signed attestation. Part of Dokimo, a non-custodial ASC-606 revenue subledger that turns x402 / AP2 / Stripe agent payments…
rubric-protocol.com
Post-quantum attestation and evidence services for AI agents. Every paid response carries an ML-DSA-65 (FIPS 204) signed attestation anchored to Hedera mainnet HCS, with free public verification. Catalog: pay-per-call decision attestation f…
walletrep.hergertsynthora.com
Score the risk and reputation of any EVM wallet address before you transact with it. Combines on-chain sanctions screening (Chainalysis oracle, TRM, OFAC) and GoPlus address-security flags (phishing, blacklist, mixer, malicious activity) wi…
contractwatch.hergertsynthora.com
SYNTHORA contractwatch: verdict de seguridad de contrato on-chain que SI lee el bytecode (eth_getCode) y slots de proxy (EIP-1967/zeppelinos/UUPS/beacon), owner() y privilegios ocultos: honeypot, rug-pull, hidden mint. Correlacionado entre …
vibes-coded.com
Pay-per-call reliability and intelligence APIs for AI agents on Solana USDC via x402: destructive-action, infra-target, tool-call-budget, agent-state, drift, retry-storm guards, action receipts, and 90+ more endpoints. HTTP 402, no signup.
happybirthday.digitalshop.xin
Deterministic preflight risk checks for public GitHub bounty issues. Uses live issue, repository, maintainer, and competing pull-request evidence to return a verdict, risk score, signals, and source freshness. x402 v2, $0.001 USDC on Base, …
copperhead.lonestaroracle.xyz
Security audit for Move smart contracts on Aptos and Sui. Post Move source or a GitHub URL and get back a structured report with findings graded by severity.
rattler.lonestaroracle.xyz
Automated security audit for Solidity and EVM smart contracts, returning a Markdown report with findings by severity, proof of concept snippets and remediation notes. $2 USDC per call on Base or Solana.
cottonmouth.lonestaroracle.xyz
POST /audit with Rust smart contract source or a GitHub URL and it returns an LLM generated security audit report, with per finding severity, description, proof of concept and fix. Covers CosmWasm, Anchor/Solana, Soroban and NEAR. $2 USDC p…
permitverdict.com
Address-level building-permit intelligence. One call, one address returns normalized permit history, activity signals, and a decision-ready verdict with cited public records. Covers san francisco, seattle, austin, nyc, chicago, los angeles,…
watchtower-api.com
Compliance & data-integrity for AI agents: sanctions/watchlist screening (10 official lists — OFAC SDN+Consolidated, UN, EU, UK OFSI, Canada, Australia, France, Switzerland, US SAM exclusions — ~229k parties, daily), one-call KYB, identifie…
payanagent.com
The marketplace for the agent economy. 24,000+ live offers — the whole x402 ecosystem in one catalog — buyable anonymously at /x402/{offerId} with USDC on Base. Four verbs: buy, offer, request, fulfill. Every settlement emits a public signe…
secondopinionx402.com
Adversarial verification for AI agents: an independent skeptic attempts to refute a claim before the agent acts on it, returning a structured verdict (refuted / supported / inconclusive) with calibrated confidence, findings, citations, and …
5-9-107-124.nip.io
AI-agent-payable Base swap preflight and token/contract risk APIs (x402/USDC on Base; no account required).
tokenrisk.hergertsynthora.com
Takes a token contract address on Base or Ethereum and returns a safe, caution, risky or rug_pull verdict, combining GoPlus token security data (honeypot simulation, buy and sell tax, holder count, ownership flags) with a bytecode scan, own…
mailcheck.hergertsynthora.com
Email address validation API. Returns RFC syntax check, live MX lookup, disposable and role account flags, free provider detection, gmail normalization, and a deliverability status with confidence score. No mail is sent. First 3 calls per w…
lazaretto.dev
Deterministic pre-install malware verification for npm packages, AI agent skills, and MCP tools. Behavioral scan with file-and-line evidence for 0.03 USDC per call over x402 on Base, plus a free lockfile check against OSV/OpenSSF malicious-…
trustfetch.duckdns.org
Safety/content tools for AI agents: scan text for hidden prompt-injection attempts, or fetch+clean a webpage with built-in injection screening before your agent acts on it.
hermesplant.com
Deterministic pre-execution safety gates and signed evidence for AI agents. The Action Safety pair scores consequential shell, Git, SQL, infrastructure, and deployment commands, returning risk, matched rule IDs, and an exact machine-readabl…
x402.fuchss.app
Deterministic trust scoring and monitoring for the x402 ecosystem. 88k+ endpoints tracked 24/7 on Base + Solana: probe reliability, latency, spec compliance, price history, and real on-chain USDC settlement per endpoint. Paid API: per-endpo…
lionx402.com
AML wallet + company counterparty checks for AI agents. $0.001 wallet-screen (PASS/WARN/BLOCK OFAC check), $0.05 compliance bundle (OFAC + domain trust + firmographics), $0.012 deep research, $0.95 verified company file. Ed25519-attested JS…
deliver.hergertsynthora.com
Audit a domain's email deliverability and sender reputation. Checks SPF, DKIM selectors, DMARC policy strength (reject/quarantine/none), BIMI, MX and PTR records, returning a spam score and prioritized fixes. Use it to assess inbox placemen…
bridgerisk.hergertsynthora.com
Assess the security risk of a cross-chain bridge before routing funds through it. Combines live DefiLlama TVL and audit status with the full bridge-hack incident history and known-exploit analysis into a 0-100 risk score, a safe/caution/hig…
mtasts.hergertsynthora.com
SYNTHORA mtasts: sMTP transport-security audit: MTA-STS (RFC 8461) + TLS-RPT (RFC 8460). Resolves the policy DNS records, fetches and parses the well-known policy file, cross-validates the policy mx: patterns against the domain's real MX, a…
amlscreen.hergertsynthora.com
Screen a crypto wallet address against global sanctions and illicit-activity intelligence. Cross-checks the on-chain Chainalysis sanctions oracle, TRM screening, OFAC SDN and GoPlus address flags (mixer, phishing, laundering), returning a s…
mcpscan.hergertsynthora.com
Scans an MCP server for security issues. Send a target URL or a pasted manifest; a deterministic rule engine checks embedded secrets, shell and filesystem capabilities, prompt injection surface and permissive input schemas, returning a secu…
businessrisk.hergertsynthora.com
Composite counterparty risk check: given an EVM wallet and/or a token contract, returns a weighted 0-100 risk score, a proceed, pivot or kill verdict, and reason codes, fusing sanctions screening, wallet reputation and token contract heuris…
pay.hergertsynthora.com
POST a Base contract address and receive a JSON safety verdict covering honeypot, rug pull, hidden mint and owner privileges, returned with an Ed25519 signature. One endpoint on the SYNTHORA agent services mesh operated by Hergert Synthora.…
agentguard.hergertsynthora.com
Returns a pre-trade risk verdict (SAFE, CAUTION or BLOCK) for an EVM address in one call, combining sanctions screening, stablecoin peg deviation in bps and a counterparty on-chain signal into an Ed25519-signed attestation. Scoring only, it…
biccheck.hergertsynthora.com
Validates a BIC/SWIFT code (ISO 9362) from its structure: 8 or 11 character format, bank code, ISO 3166 country check, location and branch decode, live/test/passive flag. Structural check only, it does not query the SWIFT registry. First 3 …
lei-lookup.hergertsynthora.com
Looks up a Legal Entity Identifier against the public GLEIF registry and returns legal name, legal and headquarters address, registration status and registration dates. Three free calls per wallet via the X-WALLET header.
x402meta.hergertsynthora.com
Preflight check for x402 endpoints. Given an endpoint URL or a payTo address, it looks the resource up in the CDP Bazaar catalog, probes it for a live 402 challenge, compares declared against live payTo, and returns a 0-100 scorecard with a…
ibancheck.hergertsynthora.com
Validates an IBAN offline: ISO 13616 mod-97 checksum, country and length registry check, BBAN and bank-code extraction, canonical formatting. Responses carry an Ed25519 signed receipt. First 3 calls per wallet are free via the X-WALLET head…
presign.hergertsynthora.com
Paid API returning an allow, warn or block verdict before a transaction is signed on Base or Ethereum. Takes transaction calldata or a token address, decodes unlimited approvals and screens the token and counterparty. 0.015 USDC per call. R…
agentattest.hergertsynthora.com
Paid API that evaluates an AI agent's declared capabilities against supplied sample outputs using multiple LLMs, returning a 0-100 reliability score, a trust tier and a per-capability verdict in an Ed25519-signed response.