{"provider":{"name":"UAI Systems","description":"UAI Systems x402-paid agent API catalog on Base mainnet: secret scan ($0.01), sanctions screen, CVE lookup, repo security bundle, IAM and Terraform scans, Cloudflare Worker and Wrangler audits, DNS/SPF/DMARC email security ($0.0045), dependency CVE scan, SSL/TLS and GDPR privacy audits, JWT decode, compliance evidence mapping, and agentic commerce readiness. Listed on CDP Bazaar and Agentic Market. MCP at /mcp with free secret-scan preview. No account or API key — USDC per call.","website":"https://uaisystems.com","contactEmail":"hello@uaisystems.com"},"x402":{"network":"eip155:8453","facilitatorUrl":"https://api.cdp.coinbase.com/platform/v2/x402","testnet":false,"paymentHeader":"X-PAYMENT","paymentResponseHeader":"X-PAYMENT-RESPONSE","authentication":"none","paymentModel":"per-call"},"discovery":{"catalogUrl":"https://x402-hono-api.inraby.workers.dev/api/v1/catalog","wellKnownCatalogUrl":"https://x402-hono-api.inraby.workers.dev/.well-known/x402-catalog","docsUrl":"https://x402-hono-api.inraby.workers.dev/docs","legalNoticeUrl":"https://x402-hono-api.inraby.workers.dev/api/v1/legal-notice","healthUrl":"https://x402-hono-api.inraby.workers.dev/health","mcpUrl":"https://x402-hono-api.inraby.workers.dev/mcp","mcpSetupUrl":"https://x402-hono-api.inraby.workers.dev/docs/mcp-setup","agenticMarketUrl":"https://agentic.market/services/x402-hono-api-inraby-workers-dev","bazaarMerchantUrl":"https://api.cdp.coinbase.com/platform/v2/x402/discovery/merchant?payTo=0xe2433f056f953b7d4c946cffb1201d2e9601eabf"},"mcp":{"transport":"streamable-http","freeTools":["catalog","secret-scan-preview"],"paidTools":["policy-genie","cloudflare-zero-trust-audit","iam-risk-score","secret-scan","agentic-commerce-readiness","dns-email-security-audit","wrangler-config-audit","github-actions-secret-exposure-scan","cloudflare-worker-security-review","terraform-iam-risk-scan","security-alert-triage","email-vendor-risk-summary","compliance-evidence-mapper","dependency-cve-scan","ssl-certificate-audit","gdpr-privacy-scan","jwt-decode","jwt-inspect","cve-lookup","sanctions-screen","repo-security-bundle"],"note":"Connect MCP clients to /mcp. Free catalog and secret-scan-preview (2048 chars). Paid tools require x402 USDC per call."},"products":[{"id":"policy-genie","name":"Policy Genie","description":"Validate AWS IAM and Cloudflare Zero Trust policy JSON for risky wildcards, bypass rules, weak scoping, and embedded secrets.","endpoint":"/api/v1/validate-policy","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/validate-policy","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["rawPolicyText"],"properties":{"rawPolicyText":{"type":"string","description":"IAM or Cloudflare Access policy JSON"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["authorized","remediated"]},"message":{"type":"string"},"findings":{"type":"array"},"hardenedPolicyText":{"type":"string"},"policyType":{"enum":["aws-iam","cloudflare-access","unknown"]}}},"useCases":["Audit IAM policies before deployment","Validate Cloudflare Access rules for risky bypass patterns","Generate hardened policy examples for remediation"],"tags":["iam","cloudflare","policy"]},{"id":"cloudflare-zero-trust-audit","name":"Cloudflare Zero Trust Audit","description":"Analyze Cloudflare Zero Trust Access policy JSON for bypass rules, allow-everyone patterns, and weak identity constraints.","endpoint":"/api/v1/cloudflare-zero-trust-audit","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/cloudflare-zero-trust-audit","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["policyText"],"properties":{"policyText":{"type":"string","description":"Cloudflare Zero Trust Access policy JSON"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["pass","needs_remediation"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array"},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["Review Access policies for bypass and everyone-allow rules","Score Zero Trust policy risk before production rollout","Produce remediation recommendations for access hardening"],"tags":["cloudflare","zero-trust","audit"]},{"id":"iam-risk-score","name":"IAM Risk Score","description":"Return a focused AWS IAM risk score and severity summary for a submitted IAM policy document.","endpoint":"/api/v1/iam-risk-score","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/iam-risk-score","price":"$0.03","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["policyText"],"properties":{"policyText":{"type":"string","description":"AWS IAM policy JSON"}}},"outputSchema":{"type":"object","properties":{"riskScore":{"type":"number","minimum":0,"maximum":100},"severity":{"enum":["low","medium","high","critical"]},"findings":{"type":"array"},"summary":{"type":"string"}}},"useCases":["Score IAM policy risk for CI/CD gates","Prioritize remediation based on aggregate severity","Give agents a compact IAM risk summary"],"tags":["iam","aws","risk"]},{"id":"secret-scan","name":"Secret Scan / Credential Redaction","description":"Secret scan for exposed API keys, tokens, passwords, and credentials in text — returns redacted output without exposing matched secret values. Ideal for agent pre-flight checks before sharing config or logs.","endpoint":"/api/v1/secret-scan","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/secret-scan","price":"$0.01","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","description":"Text to scan for exposed secrets and credentials"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","secrets_detected"]},"findings":{"type":"array"},"redactedText":{"type":"string"}}},"useCases":["Detect credentials accidentally embedded in policy exports","Redact secrets before sharing configuration text with agents","Pre-flight secret checks in automated workflows"],"tags":["secret-scan","secret scan","secrets","credentials","api-key","redaction","security"]},{"id":"agentic-commerce-readiness","name":"Agentic Commerce Readiness","description":"Assess whether a company, API, or product description is a strong fit for x402/AP2-style agentic commerce.","endpoint":"/api/v1/agentic-commerce-readiness","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/agentic-commerce-readiness","price":"$0.10","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["productDescription"],"properties":{"companyUrl":{"type":"string"},"productDescription":{"type":"string"},"targetBuyer":{"type":"string"},"suggestedPrice":{"type":"string"}}},"outputSchema":{"type":"object","properties":{"fit":{"enum":["strong","moderate","weak"]},"recommendedEndpoints":{"type":"array","items":{"type":"string"}},"pricingRecommendation":{"type":"string"},"x402Readiness":{"type":"array","items":{"type":"string"}},"ap2Considerations":{"type":"array","items":{"type":"string"}},"cloudflareArchitecture":{"type":"array","items":{"type":"string"}}}},"useCases":["Evaluate whether an API should be exposed as an x402-paid agent tool","Recommend endpoint and pricing structure for agentic products","Plan Cloudflare Worker architecture for paid agent APIs"],"tags":["x402","ap2","commerce"]},{"id":"dns-email-security-audit","name":"DNS / Email Security Audit","description":"DNS email security audit — SPF, DMARC, DKIM, BIMI, and MTA-STS check for domain spoofing and deliverability risk. Agent-friendly dns email security screen at micropayment pricing.","endpoint":"/api/v1/dns-email-security-audit","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/dns-email-security-audit","price":"$0.0045","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain to audit (example.com)"}}},"outputSchema":{"type":"object","properties":{"domain":{"type":"string"},"status":{"enum":["pass","needs_remediation"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array","items":{"type":"object","properties":{"severity":{"enum":["low","medium","high","critical"]},"rule":{"type":"string"},"message":{"type":"string"},"evidence":{"type":"string"}}}},"records":{"type":"object","properties":{"mx":{"type":"array","items":{"type":"string"}},"spf":{"type":"array","items":{"type":"string"}},"dmarc":{"type":"array","items":{"type":"string"}},"dkim":{"type":"array","items":{"type":"string"}},"bimi":{"type":"array","items":{"type":"string"}},"mtaSts":{"type":"array","items":{"type":"string"}}}},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["Audit domain email authentication before onboarding senders","Check SPF, DMARC, and DKIM posture for security automation agents","Produce remediation recommendations for DNS email security gaps"],"tags":["dns","dns email","dns email security","email","email security","spf","dkim","dmarc","bimi","mta-sts","email-security","domain","security","compliance","audit"]},{"id":"wrangler-config-audit","name":"Wrangler Config Risk Audit","description":"DevOps security audit for Cloudflare wrangler.toml — flags production-unsafe settings, plaintext secrets in vars, risky routes, and missing observability for Worker deployments.","endpoint":"/api/v1/wrangler-config-audit","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/wrangler-config-audit","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["wranglerToml"],"properties":{"wranglerToml":{"type":"string","description":"Full wrangler.toml contents"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["pass","needs_remediation"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array","items":{"type":"object","properties":{"severity":{"enum":["low","medium","high","critical"]},"rule":{"type":"string"},"message":{"type":"string"},"evidence":{"type":"string"}}}},"detected":{"type":"object","properties":{"workerName":{"type":"string"},"compatibilityDate":{"type":"string"},"compatibilityFlags":{"type":"array","items":{"type":"string"}},"routes":{"type":"array","items":{"type":"string"}},"vars":{"type":"array","items":{"type":"string"}},"bindings":{"type":"array","items":{"type":"string"}}}},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["Review wrangler.toml before production Cloudflare Worker deploys","Detect secrets accidentally placed in [vars]","Flag risky routes, cron schedules, and missing observability for agents"],"tags":["cloudflare","wrangler","wrangler-config","wrangler.toml","workers","worker","cloudflare-workers","devops","config-audit","audit","security"]},{"id":"github-actions-secret-exposure-scan","name":"GitHub Actions Secret Exposure Scan","description":"Scan GitHub Actions workflow YAML for pull_request_target misuse, over-permissive tokens, secret leakage, unpinned actions, and unsafe fork checkout patterns.","endpoint":"/api/v1/github-actions-secret-exposure-scan","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/github-actions-secret-exposure-scan","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["workflowYaml"],"properties":{"workflowYaml":{"type":"string","description":"GitHub Actions workflow YAML contents"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"severity":{"enum":["low","medium","high","critical"]},"title":{"type":"string"},"description":{"type":"string"},"evidence":{"type":"string"},"recommendation":{"type":"string"}}}},"recommendations":{"type":"array","items":{"type":"string"}},"redactedInput":{"type":"string"}}},"useCases":["Detect secret exposure risks in GitHub Actions workflows before merge","Flag pull_request_target and write-all permission misuse for security agents","Provide redacted evidence for CI/CD hardening automation"],"tags":["github-actions","ci-cd","secrets","security"]},{"id":"cloudflare-worker-security-review","name":"Cloudflare Worker Security Review","description":"Review Cloudflare Worker source and optional wrangler.toml for hardcoded secrets, unsafe CORS, missing admin auth, sensitive logging, and dynamic code execution.","endpoint":"/api/v1/cloudflare-worker-security-review","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/cloudflare-worker-security-review","price":"$0.10","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["workerCode"],"properties":{"workerCode":{"type":"string","description":"Worker JavaScript/TypeScript source"},"wranglerToml":{"type":"string","description":"Optional wrangler.toml contents"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"severity":{"enum":["low","medium","high","critical"]},"title":{"type":"string"},"description":{"type":"string"},"evidence":{"type":"string"},"recommendation":{"type":"string"}}}},"recommendations":{"type":"array","items":{"type":"string"}},"redactedInput":{"type":"string"}}},"useCases":["Pre-deploy security review for Cloudflare Workers","Detect hardcoded credentials and unsafe CORS in Worker code","Combine Worker source and wrangler.toml checks for agent automation"],"tags":["cloudflare","workers","security","review"]},{"id":"terraform-iam-risk-scan","name":"Terraform IAM Risk Scan","description":"Scan Terraform for IAM wildcard policies, public S3/RDS exposure, open security groups, broad assume-role trust, and missing encryption hints.","endpoint":"/api/v1/terraform-iam-risk-scan","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/terraform-iam-risk-scan","price":"$0.10","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["terraform"],"properties":{"terraform":{"type":"string","description":"Terraform HCL contents"},"cloud":{"type":"string","description":"Cloud provider hint (aws recommended)"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"severity":{"enum":["low","medium","high","critical"]},"title":{"type":"string"},"description":{"type":"string"},"evidence":{"type":"string"},"recommendation":{"type":"string"}}}},"recommendations":{"type":"array","items":{"type":"string"}},"redactedInput":{"type":"string"}}},"useCases":["Scan Terraform plans for IAM and infrastructure risk before apply","Detect public S3, RDS, and security group exposure patterns","Provide redacted evidence for infrastructure security automation"],"tags":["terraform","iam","aws","security"]},{"id":"security-alert-triage","name":"Security Alert Triage","description":"Triage security alert emails for urgency, severity, likely cause, and evidence collection steps without storing message bodies.","endpoint":"/api/v1/security-alert-triage","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/security-alert-triage","price":"$0.10","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["subject","from","body","source"],"properties":{"subject":{"type":"string","description":"Email subject line"},"from":{"type":"string","description":"Sender address or display name"},"body":{"type":"string","description":"Email body text (not stored server-side)"},"source":{"type":"string","enum":["cloudflare","aws","github","google","microsoft","other"]}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["informational","needs_review","urgent"]},"severity":{"enum":["low","medium","high","critical"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"summary":{"type":"string"},"likelyCause":{"type":"string"},"recommendedActions":{"type":"array","items":{"type":"string"}},"evidenceToCollect":{"type":"array","items":{"type":"string"}},"redactedText":{"type":"string"}}},"useCases":["Triage inbound security alert emails for SOC workflows","Score Cloudflare, AWS, GitHub, and identity provider alerts","Recommend evidence collection without persisting email content"],"tags":["email","security","triage","alerts"]},{"id":"email-vendor-risk-summary","name":"Email Vendor Risk Summary","description":"Summarize vendor email risk for compliance claims, subprocessors, retention, DPA language, and breach notifications.","endpoint":"/api/v1/email-vendor-risk-summary","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/email-vendor-risk-summary","price":"$0.10","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["subject","from","body"],"properties":{"subject":{"type":"string"},"from":{"type":"string"},"body":{"type":"string"},"vendorName":{"type":"string","description":"Optional vendor display name"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["low_risk","needs_review","high_risk"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"vendor":{"type":"string"},"summary":{"type":"string"},"riskFactors":{"type":"array","items":{"type":"string"}},"questionsToAsk":{"type":"array","items":{"type":"string"}},"recommendedActions":{"type":"array","items":{"type":"string"}},"redactedText":{"type":"string"}}},"useCases":["Review vendor security and compliance emails for third-party risk","Generate due diligence questions from vendor communications","Flag breach or vague compliance language in vendor threads"],"tags":["email","vendor","compliance","risk"]},{"id":"compliance-evidence-mapper","name":"Compliance Evidence Mapper","description":"Map SOC 2, ISO 27001, HIPAA, PCI, and GDPR compliance audit requests to evidence items, owners, systems, and follow-up questions. For agent-driven compliance and audit workflows.","endpoint":"/api/v1/compliance-evidence-mapper","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/compliance-evidence-mapper","price":"$0.15","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["subject","body","framework"],"properties":{"subject":{"type":"string"},"body":{"type":"string"},"framework":{"type":"string","enum":["soc2","iso27001","hipaa","pci","general"]}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["mapped","needs_review"]},"framework":{"type":"string"},"summary":{"type":"string"},"evidenceItems":{"type":"array","items":{"type":"object","properties":{"item":{"type":"string"},"category":{"type":"string"},"likelyOwner":{"type":"string"},"system":{"type":"string"},"priority":{"enum":["low","medium","high"]}}}},"questions":{"type":"array","items":{"type":"string"}},"redactedText":{"type":"string"}}},"useCases":["Map audit evidence requests from email into actionable control tasks","Identify likely owners and systems for SOC 2 and ISO evidence asks","Generate follow-up questions for compliance coordinators"],"tags":["email","compliance","soc2","evidence","gdpr","audit","iso27001","pci"]},{"id":"dependency-cve-scan","name":"Dependency / CVE Scan","description":"Scan package.json or lockfile text for dependency CVE risk signals — outdated lodash/axios, deprecated packages, wildcard pins, risky postinstall scripts, and embedded secrets.","endpoint":"/api/v1/dependency-cve-scan","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/dependency-cve-scan","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["manifestText"],"properties":{"manifestText":{"type":"string","description":"package.json, package-lock.json, or yarn.lock contents"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array"},"recommendations":{"type":"array","items":{"type":"string"}},"redactedInput":{"type":"string"}}},"useCases":["Scan dependency manifests before CI merge for known CVE patterns","Flag wildcard pins and risky postinstall scripts for supply-chain review","Complement secret-scan with dependency hygiene checks for agents"],"tags":["dependency","cve","supply-chain","security","npm","audit"]},{"id":"ssl-certificate-audit","name":"SSL / TLS Certificate Audit","description":"Audit domain SSL/TLS certificate expiry, HTTPS reachability, HSTS, and HTTP-to-HTTPS redirect posture using certificate transparency and live transport checks.","endpoint":"/api/v1/ssl-certificate-audit","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/ssl-certificate-audit","price":"$0.05","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain to audit (example.com)"}}},"outputSchema":{"type":"object","properties":{"domain":{"type":"string"},"status":{"enum":["pass","needs_remediation"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array"},"certificate":{"type":"object"},"transport":{"type":"object"},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["Check certificate expiry before agent-driven domain onboarding","Validate HTTPS and HSTS posture for security automation","Complement DNS/email audits with TLS transport checks"],"tags":["ssl","tls","certificate","security","audit","devops"]},{"id":"gdpr-privacy-scan","name":"GDPR / Privacy Posture Scan","description":"Scan a website landing page for GDPR and CCPA privacy signals — privacy policy links, cookie consent language, and compliance keyword coverage for agent audits.","endpoint":"/api/v1/gdpr-privacy-scan","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/gdpr-privacy-scan","price":"$0.08","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"Website URL or domain to scan"}}},"outputSchema":{"type":"object","properties":{"url":{"type":"string"},"status":{"enum":["pass","needs_remediation"]},"riskScore":{"type":"number","minimum":0,"maximum":100},"findings":{"type":"array"},"signals":{"type":"object"},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["Pre-audit websites for GDPR/CCPA privacy policy coverage","Flag missing cookie consent language before compliance reviews","Pair with compliance-evidence-mapper for audit automation agents"],"tags":["gdpr","privacy","compliance","cookie","audit","security"]},{"id":"jwt-decode","name":"JWT Decode / Inspect","description":"JWT decode and inspect — decode header and payload without signature verification, flag expired tokens, insecure algorithms, and not-before issues for agent auth debugging.","endpoint":"/api/v1/jwt-decode","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/jwt-decode","price":"$0.02","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["jwt"],"properties":{"jwt":{"type":"string","description":"JWT string (header.payload.signature)"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["decoded","invalid"]},"algorithm":{"type":"string","nullable":true},"header":{"type":"object","nullable":true},"payload":{"type":"object","nullable":true},"expired":{"type":"boolean","nullable":true},"expiresAt":{"type":"string","nullable":true},"issuedAt":{"type":"string","nullable":true},"issues":{"type":"array","items":{"type":"string"}}}},"useCases":["Decode JWT claims for agent auth debugging without local tooling","Flag expired or alg=none tokens during security triage","Inspect token metadata before IAM or policy validation steps"],"tags":["jwt","jwt-decode","auth","security","decode","token","inspect"]},{"id":"jwt-inspect","name":"JWT Inspect / Decode","description":"JWT decode and inspect for agent auth debugging — decode header and payload, flag expired tokens, insecure algorithms, and not-before issues. Search-friendly alias for jwt-decode.","endpoint":"/api/v1/jwt-inspect","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/jwt-inspect","price":"$0.02","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["jwt"],"properties":{"jwt":{"type":"string","description":"JWT string (header.payload.signature)"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["decoded","invalid"]},"algorithm":{"type":"string","nullable":true},"header":{"type":"object","nullable":true},"payload":{"type":"object","nullable":true},"expired":{"type":"boolean","nullable":true},"expiresAt":{"type":"string","nullable":true},"issuedAt":{"type":"string","nullable":true},"issues":{"type":"array","items":{"type":"string"}}}},"useCases":["Agent search alias for JWT decode and token inspection","Debug auth tokens in autonomous agent pipelines","Inspect JWT metadata before policy validation"],"tags":["jwt","jwt-decode","jwt-inspect","decode","token","auth","security"]},{"id":"cve-lookup","name":"CVE Lookup / Vulnerability Search","description":"CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages, and references for agent triage.","endpoint":"/api/v1/cve-lookup","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/cve-lookup","price":"$0.01","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["cveId"],"properties":{"cveId":{"type":"string","description":"CVE identifier (CVE-2021-44228)"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["found","not_found","invalid"]},"cveId":{"type":"string"},"summary":{"type":"string","nullable":true},"severity":{"type":"string","nullable":true},"affectedPackages":{"type":"array"},"references":{"type":"array","items":{"type":"string"}},"issues":{"type":"array","items":{"type":"string"}}}},"useCases":["Resolve CVE IDs during dependency triage agent workflows","Enrich vulnerability scan results with OSV advisory metadata","Pair with dependency-cve-scan for supply-chain automation"],"tags":["cve","cve lookup","vulnerability lookup","vulnerability","security","osv","advisory","npm","supply-chain"]},{"id":"sanctions-screen","name":"Sanctions List Lookup (Informational)","description":"Informational sanctions list lookup for agent pre-flight checks — matches names or Ethereum wallet addresses against a small curated subset of publicly designated OFAC SDN entries (~15). Not AML/KYC certified. Not a substitute for official OFAC search or licensed screening.","endpoint":"/api/v1/sanctions-screen","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/sanctions-screen","price":"$0.02","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","required":["query"],"properties":{"query":{"type":"string","description":"Person name, entity name, or Ethereum wallet address (0x...)"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clear","match","potential_match"]},"query":{"type":"string"},"queryType":{"enum":["wallet","name"]},"matchCount":{"type":"number"},"riskLevel":{"enum":["none","low","high"]},"matches":{"type":"array"},"screeningSource":{"type":"string"},"disclaimer":{"type":"string"}}},"useCases":["Agent pre-flight informational check before deeper due diligence","Flag obviously designated names or wallet addresses in automation","Pair with licensed screening for production compliance programs"],"tags":["sanctions","sanctions check","ofac","wallet","screening","informational"]},{"id":"repo-security-bundle","name":"Repo Security Bundle Scan","description":"Combined repo security scan — secret scan, GitHub Actions workflow exposure check, and dependency manifest CVE review in one agent call for CI pre-commit and supply-chain triage.","endpoint":"/api/v1/repo-security-bundle","method":"POST","url":"https://x402-hono-api.inraby.workers.dev/api/v1/repo-security-bundle","price":"$0.04","scheme":"exact","mimeType":"application/json","inputSchema":{"type":"object","properties":{"text":{"type":"string","description":"Optional text/config to scan for secrets"},"workflowYaml":{"type":"string","description":"Optional GitHub Actions workflow YAML"},"manifestText":{"type":"string","description":"Optional package.json, lockfile, or yarn.lock contents"}}},"outputSchema":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"riskScore":{"type":"number"},"scansRun":{"type":"array","items":{"type":"string"}},"findings":{"type":"array"},"recommendations":{"type":"array","items":{"type":"string"}}}},"useCases":["One-call pre-commit security bundle for coding agents","Scan repo artifacts before merge or deploy","Combine secret, CI, and dependency checks for supply-chain agents"],"tags":["repo","repository","secret scan","github actions","dependency","supply-chain","bundle","security","ci"]}]}