BRAINIAC.software
payment-ready until 2026-11-12
Pay-per-call x402 v2 APIs for AI agents, priced in USDC on Base: token honeypot/risk checks, wallet security, package and lockfile vulnerability audits, company, procurement and compliance data.
Call it x402 v2
x402 v2
- Base URL
- https://www.brainiac.software
- Payment
- x402 v2, header channel
$ curl -i 'https://www.brainiac.software/api/v1/cybersecurity-intelligence/lockfile/audit' An unpaid request returns HTTP 402 with the payment terms. Sign a payment authorization, then retry with the PAYMENT-SIGNATURE header.
Endpoints 6 paid routes on www.brainiac.software
GET/api/v1/cybersecurity-intelligence/lockfile/audit Base$0.10since 11-05
GET/api/v1/cybersecurity-intelligence/package/check Base$0.03since 11-05
GET/api/v1/token-security/due-diligence-report Base$0.12since 11-05
GET/api/v1/token-security/honeypot-risk-check Base$0.04since 11-05
GET/api/v1/token-security/risk-verdict Base$0.05since 11-05
GET/api/v1/wallet-intelligence/security/address Base$0.05since 11-05
Prices as captured in the 402 response: median $0.05 across the 6 endpoints, unchanged since first capture.
Example 402 response
Endpoints and prices
| Method | Path | Description | Price | Network | Asset | 402 channel | Captured |
|---|---|---|---|---|---|---|---|
| GET | / | Parse supported package lockfiles, identify dependencies and versions, then combine deps.dev and existing OSV/CISA/EPSS/NVD findings. | $0.10 | Base | USDC | header | since 11-05 |
| GET | / | Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data. | $0.03 | Base | USDC | header | since 11-05 |
| GET | / | Combine the Base contract checks and DEX Screener observations into one report for an agent. The report never approves interaction and does not turn missing evidence into a safety claim. | $0.12 | Base | USDC | header | since 11-05 |
| GET | / | Look for observable pause and blacklist indicators in Base bytecode and standard calls. This does not simulate a buy or sell. | $0.04 | Base | USDC | header | since 11-05 |
| GET | / | Read a Base token contract and return an evidence-based verdict. Facts, signals, and unavailable checks are separate. No risk score is produced, and absence of a signal is not a safety approval. | $0.05 | Base | USDC | header | since 11-05 |
| GET | / | Check wallet address for malicious activity indicators using GoPlus Labs threat intelligence on Base Mainnet. | $0.05 | Base | USDC | header | since 11-05 |
Payment evidence
402 payload captured at . Check evidence JSON · Measurement methodology.
First of 6 payloads captured by the monitor.
215 lines, scroll inside
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Look for observable pause and blacklist indicators in Base bytecode and standard calls. This does not simulate a buy or sell.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "40000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/token-security/honeypot-risk-check",
"tags": [
"brainiac",
"token-security",
"api-v1"
],
"mimeType": "application/json",
"description": "Look for observable pause and blacklist indicators in Base bytecode and standard calls. This does not simulate a buy or sell.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"chainId": 8453,
"sources": [
{
"url": "https://mainnet.base.org",
"source": "Base JSON-RPC",
"retrievedAt": "2026-11-02T18:00:00.000Z"
}
],
"findings": [
{
"code": "paused_returned_false",
"kind": "fact",
"detail": "paused() returned false. This does not prove that transfers are unrestricted.",
"evidence": "paused()=false"
},
{
"code": "selector_0ecb93c0",
"kind": "signal",
"detail": "Runtime bytecode contains the 4-byte selector for addBlackList(address). Presence in bytecode does not prove the function is reachable or privileged.",
"evidence": "0ecb93c0"
},
{
"code": "sell_not_simulated",
"kind": "unavailable",
"detail": "No buy or sell was submitted or simulated, so a successful sell was not observed.",
"evidence": "no simulation"
}
],
"assessment": "signals_present",
"limitations": [
"Buy and sell success was not simulated. A missing restriction selector does not prove that selling works."
],
"retrievedAt": "2026-11-02T18:00:00.000Z",
"tokenAddress": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"approvesInteraction": false
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"tokenAddress"
],
"properties": {
"tokenAddress": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{40}$"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"chainId": {
"type": "number"
},
"sources": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"source": {
"type": "string"
},
"retrievedAt": {
"type": "string"
}
},
"additionalProperties": true
}
},
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"tokenAddress": {
"type": "string"
},
"approvesInteraction": {
"type": "boolean"
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
} Other captured 402 responses (5)
Captured payload 2 of 6
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Read a Base token contract and return an evidence-based verdict. Facts, signals, and unavailable checks are separate. No risk score is produced, and absence of a signal is not a safety approval.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "50000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/token-security/risk-verdict",
"tags": [
"brainiac",
"token-security",
"api-v1"
],
"mimeType": "application/json",
"description": "Read a Base token contract and return an evidence-based verdict. Facts, signals, and unavailable checks are separate. No risk score is produced, and absence of a signal is not a safety approval.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"chainId": 8453,
"sources": [
{
"url": "https://mainnet.base.org",
"source": "Base JSON-RPC",
"retrievedAt": "2026-11-02T18:00:00.000Z"
}
],
"findings": [
{
"code": "contract_code_present",
"kind": "fact",
"detail": "The address has runtime code at the latest block.",
"evidence": "2456"
},
{
"code": "selector_fe575a87",
"kind": "signal",
"detail": "Runtime bytecode contains the 4-byte selector for isBlacklisted(address). Presence in bytecode does not prove the function is reachable or privileged.",
"evidence": "fe575a87"
},
{
"code": "sell_not_simulated",
"kind": "unavailable",
"detail": "No buy or sell was submitted or simulated, so a successful sell was not observed.",
"evidence": "no simulation"
}
],
"assessment": "signals_present",
"limitations": [
"Absence of a signal is not evidence that the token is safe, and this response does not approve interacting with it."
],
"retrievedAt": "2026-11-02T18:00:00.000Z",
"tokenAddress": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"approvesInteraction": false
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"tokenAddress"
],
"properties": {
"tokenAddress": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{40}$"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"chainId": {
"type": "number"
},
"sources": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"source": {
"type": "string"
},
"retrievedAt": {
"type": "string"
}
},
"additionalProperties": true
}
},
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"tokenAddress": {
"type": "string"
},
"approvesInteraction": {
"type": "boolean"
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 3 of 6
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Combine the Base contract checks and DEX Screener observations into one report for an agent. The report never approves interaction and does not turn missing evidence into a safety claim.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "120000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/token-security/due-diligence-report",
"tags": [
"brainiac",
"token-security",
"api-v1"
],
"mimeType": "application/json",
"description": "Combine the Base contract checks and DEX Screener observations into one report for an agent. The report never approves interaction and does not turn missing evidence into a safety claim.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"agent": {
"signals": [
"Runtime bytecode contains the 4-byte selector for isBlacklisted(address)."
],
"decision": "not_approved",
"guidance": "Use the facts as observations and the signals as reasons to investigate. Do not interact with this token because a signal is absent.",
"unavailable": [
"No buy or sell was simulated.",
"LP token lock was not verified.",
"Holder concentration was not measured."
],
"observedRestrictions": []
},
"token": {
"name": "USD Coin",
"symbol": "USDC",
"hasCode": true,
"decimals": 6,
"totalSupply": "1000000000000"
},
"checks": {
"honeypot": {
"findings": [
{
"code": "selector_fe575a87",
"kind": "signal",
"detail": "Runtime bytecode contains the 4-byte selector for isBlacklisted(address).",
"evidence": "fe575a87"
}
],
"assessment": "signals_present"
},
"liquidity": {
"findings": [
{
"code": "lp_lock_not_verified",
"kind": "unavailable",
"detail": "LP token lock was not verified.",
"evidence": "not read"
}
],
"assessment": "insufficient_evidence"
},
"ownership": {
"findings": [
{
"code": "owner_returned",
"kind": "fact",
"detail": "owner() returned an address.",
"evidence": "0x0000000000000000000000000000000000000001"
}
],
"assessment": "signals_present"
},
"manipulation": {
"findings": [
{
"code": "holders_not_measured",
"kind": "unavailable",
"detail": "Holder concentration was not measured.",
"evidence": "not scanned"
}
],
"assessment": "insufficient_evidence"
}
},
"chainId": 8453,
"sources": [
{
"url": "https://mainnet.base.org",
"source": "Base JSON-RPC",
"retrievedAt": "2026-11-02T18:00:00.000Z"
},
{
"url": "https://api.dexscreener.com/latest/dex/tokens/0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"source": "DEX Screener",
"retrievedAt": "2026-11-02T18:00:00.000Z"
}
],
"assessment": "signals_present",
"limitations": [
"The report does not approve interaction and does not treat missing evidence as safety."
],
"retrievedAt": "2026-11-02T18:00:00.000Z",
"tokenAddress": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"approvesInteraction": false
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"tokenAddress"
],
"properties": {
"tokenAddress": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{40}$"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"agent": {
"type": "object",
"properties": {
"signals": {
"type": "array",
"items": {
"type": "string"
}
},
"decision": {
"type": "string"
},
"guidance": {
"type": "string"
},
"unavailable": {
"type": "array",
"items": {
"type": "string"
}
},
"observedRestrictions": {
"type": "array",
"items": {}
}
},
"additionalProperties": true
},
"token": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"symbol": {
"type": "string"
},
"hasCode": {
"type": "boolean"
},
"decimals": {
"type": "number"
},
"totalSupply": {
"type": "string"
}
},
"additionalProperties": true
},
"checks": {
"type": "object",
"properties": {
"honeypot": {
"type": "object",
"properties": {
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
}
},
"additionalProperties": true
},
"liquidity": {
"type": "object",
"properties": {
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
}
},
"additionalProperties": true
},
"ownership": {
"type": "object",
"properties": {
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
}
},
"additionalProperties": true
},
"manipulation": {
"type": "object",
"properties": {
"findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"kind": {
"type": "string"
},
"detail": {
"type": "string"
},
"evidence": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
}
},
"additionalProperties": true
}
},
"additionalProperties": true
},
"chainId": {
"type": "number"
},
"sources": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"source": {
"type": "string"
},
"retrievedAt": {
"type": "string"
}
},
"additionalProperties": true
}
},
"assessment": {
"type": "string"
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"tokenAddress": {
"type": "string"
},
"approvesInteraction": {
"type": "boolean"
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 4 of 6
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Check wallet address for malicious activity indicators using GoPlus Labs threat intelligence on Base Mainnet.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "50000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/wallet-intelligence/security/address",
"tags": [
"brainiac",
"wallet-intelligence",
"api-v1"
],
"mimeType": "application/json",
"description": "Check wallet address for malicious activity indicators using GoPlus Labs threat intelligence on Base Mainnet.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"walletAddress": "0x1234567890123456789012345678901234567890"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"sources": [
{
"url": "https://api.gopluslabs.io/api/v1/address_security/8453",
"source": "GoPlus Labs API",
"retrievedAt": "2026-10-29T12:00:00.000Z"
}
],
"security": {
"code": 1,
"result": {
"address": "0x1234567890123456789012345678901234567890",
"phishing": false,
"malicious": false,
"risk_level": "low"
},
"message": "OK"
},
"limitations": [
"Security checks are based on GoPlus Labs threat intelligence.",
"Not all malicious or suspicious activity may be detected.",
"Coverage varies by threat intelligence sources."
],
"retrievedAt": "2026-10-29T12:00:00.000Z",
"walletAddress": "0x1234567890123456789012345678901234567890"
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"walletAddress"
],
"properties": {
"walletAddress": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{40}$"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"sources": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"source": {
"type": "string"
},
"retrievedAt": {
"type": "string"
}
},
"additionalProperties": true
}
},
"security": {
"type": "object",
"properties": {
"code": {
"type": "number"
},
"result": {
"type": "object",
"properties": {
"address": {
"type": "string"
},
"phishing": {
"type": "boolean"
},
"malicious": {
"type": "boolean"
},
"risk_level": {
"type": "string"
}
},
"additionalProperties": true
},
"message": {
"type": "string"
}
},
"additionalProperties": true
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"walletAddress": {
"type": "string"
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 5 of 6
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "30000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/cybersecurity-intelligence/package/check",
"tags": [
"brainiac",
"cybersecurity-intelligence",
"api-v1"
],
"mimeType": "application/json",
"description": "Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"package": "requests",
"version": "2.28.0",
"ecosystem": "PyPI"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"source": {
"url": "https://api.osv.dev/v1/query",
"status": "OK",
"retrievedAt": "2026-10-29T12:00:00.000Z"
},
"package": {
"name": "requests",
"version": "2.28.0",
"ecosystem": "PyPI"
},
"limitations": [
"Results are limited to the first 50 vulnerabilities from OSV.",
"EPSS and NVD data are fetched for each vulnerability and may be rate-limited.",
"Not all vulnerabilities may have EPSS or NVD data available."
],
"retrievedAt": "2026-10-29T12:00:00.000Z",
"vulnerabilities": [
{
"cveId": "CVE-2023-1234",
"cweId": "CWE-119",
"aliases": [
"GHSA-abc-123"
],
"summary": "A buffer overflow vulnerability allows remote code execution.",
"epssDate": "2026-10-28",
"cvssScore": 9.8,
"kevStatus": "KNOWN_EXPLOITED",
"kevVendor": "Python Software Foundation",
"kevDueDate": "2026-11-15",
"kevProduct": "requests",
"references": [
{
"url": "https://example.com/advisory",
"type": "ADVISORY"
}
],
"timestamps": {
"nvdModified": "2026-10-15T00:00:00.000Z",
"osvModified": "2026-10-15T00:00:00.000Z",
"nvdPublished": "2026-10-01T00:00:00.000Z",
"osvPublished": "2026-10-01T00:00:00.000Z"
},
"cvssSeverity": "CRITICAL",
"kevDateAdded": "2026-10-01",
"epssPercentile": 0.98,
"epssProbability": 0.95,
"affectedPackages": [
{
"name": "requests",
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "2.28.0"
},
{
"fixed": "2.28.1"
}
]
}
],
"versions": [
"2.28.0"
],
"ecosystem": "PyPI"
}
],
"kevRequiredAction": "Apply updates per vendor instructions.",
"ransomwareCampaignUse": true
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"ecosystem",
"package",
"version"
],
"properties": {
"package": {
"type": "string",
"maxLength": 200,
"minLength": 1
},
"version": {
"type": "string",
"maxLength": 100,
"minLength": 1
},
"ecosystem": {
"type": "string",
"maxLength": 50,
"minLength": 1
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"source": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"status": {
"type": "string"
},
"retrievedAt": {
"type": "string"
}
},
"additionalProperties": true
},
"package": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"version": {
"type": "string"
},
"ecosystem": {
"type": "string"
}
},
"additionalProperties": true
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"vulnerabilities": {
"type": "array",
"items": {
"type": "object",
"properties": {
"cveId": {
"type": "string"
},
"cweId": {
"type": "string"
},
"aliases": {
"type": "array",
"items": {
"type": "string"
}
},
"summary": {
"type": "string"
},
"epssDate": {
"type": "string"
},
"cvssScore": {
"type": "number"
},
"kevStatus": {
"type": "string"
},
"kevVendor": {
"type": "string"
},
"kevDueDate": {
"type": "string"
},
"kevProduct": {
"type": "string"
},
"references": {
"type": "array",
"items": {
"type": "object",
"properties": {
"url": {
"type": "string"
},
"type": {
"type": "string"
}
},
"additionalProperties": true
}
},
"timestamps": {
"type": "object",
"properties": {
"nvdModified": {
"type": "string"
},
"osvModified": {
"type": "string"
},
"nvdPublished": {
"type": "string"
},
"osvPublished": {
"type": "string"
}
},
"additionalProperties": true
},
"cvssSeverity": {
"type": "string"
},
"kevDateAdded": {
"type": "string"
},
"epssPercentile": {
"type": "number"
},
"epssProbability": {
"type": "number"
},
"affectedPackages": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"ranges": {
"type": "array",
"items": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"events": {
"type": "array",
"items": {
"type": "object",
"properties": {
"introduced": {
"type": "string"
}
},
"additionalProperties": true
}
}
},
"additionalProperties": true
}
},
"versions": {
"type": "array",
"items": {
"type": "string"
}
},
"ecosystem": {
"type": "string"
}
},
"additionalProperties": true
}
},
"kevRequiredAction": {
"type": "string"
},
"ransomwareCampaignUse": {
"type": "boolean"
}
},
"additionalProperties": true
}
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 6 of 6
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2",
"description": "Parse supported package lockfiles, identify dependencies and versions, then combine deps.dev and existing OSV/CISA/EPSS/NVD findings.",
"paymentFlow": "authorization"
},
"payTo": "0x6428665E83F503904571104311bB78CBb29b975c",
"amount": "100000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://www.brainiac.software/api/v1/cybersecurity-intelligence/lockfile/audit",
"tags": [
"brainiac",
"cybersecurity-intelligence",
"api-v1"
],
"mimeType": "application/json",
"description": "Parse supported package lockfiles, identify dependencies and versions, then combine deps.dev and existing OSV/CISA/EPSS/NVD findings.",
"serviceName": "BRAINIAC.software"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"ecosystem": "NPM",
"lockfileContent": "package-lock.json content here"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"input": {
"ecosystem": "NPM",
"lockfileContent": "package-lock.json content"
},
"sources": [],
"limitations": [
"Lockfile parsing is limited to common formats.",
"Only deps.dev-supported ecosystems can be audited.",
"Combine with existing OSV/CISA/EPSS/NVD findings for complete vulnerability data."
],
"retrievedAt": "2026-10-29T12:00:00.000Z",
"dependencies": [],
"vulnerabilities": []
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"lockfileContent"
],
"properties": {
"ecosystem": {
"enum": [
"NPM",
"PYPI",
"MAVEN",
"RUBYGEMS",
"CARGO",
"NUGET",
"GO"
],
"type": "string"
},
"lockfileContent": {
"type": "string"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"input": {
"type": "object",
"properties": {
"ecosystem": {
"type": "string"
},
"lockfileContent": {
"type": "string"
}
},
"additionalProperties": true
},
"sources": {
"type": "array",
"items": {}
},
"limitations": {
"type": "array",
"items": {
"type": "string"
}
},
"retrievedAt": {
"type": "string"
},
"dependencies": {
"type": "array",
"items": {}
},
"vulnerabilities": {
"type": "array",
"items": {}
}
},
"additionalProperties": true
}
}
}
}
}
}
},
"x402Version": 2
}Can I trust it score from our own monitoring
score from our own monitoring
93/100 Solid
#32 of 472 in Data. Bands: strong 93+, solid 75+, mixed 55+, weak below 55.
- Reliability
- 100% uptime since 11-05
- Compliance
- A 14/14 checks pass
- Price
- $0.03 to $0.12 p83 in Data
- Risk
- clean no risk flag
- Traction
- ---
14/14 compliance checks
- 402 payload captured
- accepts[] array present
- payTo address recoverable
- payTo at accepts[0].payTo (conformant shape)
- payTo is a valid on-chain address
- atomic price declared
- atomic price in a sane range
- asset (token) address declared
- network resolves to CAIP-2
- payment scheme declared
- served over HTTPS
- declares the current x402 version (2)
- EIP-712 domain parameters present on every EVM entry
- x402 v2 envelope delivered in the payment-required header
402 terms unchanged since 2026-11-05. Last up 2026-11-05.
── Site signals
- homepage reachable
- openapi doc
- pricing page
- llms.txt
- robots.txt
- terms page
How the score works
What the score read on this service: status online, 100% uptime, latest daily rollup (no 30d window yet), 210ms response p95, x402 compliance 14 of 14, $0.03 price against the category. Each of those is measured, and each is published in full below.
The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.
Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.
It is a score inside Data, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 472 listings, this one among them: the same 472 the position above is counted against. When the two differ, the field is the wider one, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.
All measured facts
What it does
Pay-per-call x402 v2 APIs for AI agents, priced in USDC on Base: token honeypot/risk checks, wallet security, package and lockfile vulnerability audits, company, procurement and compliance data.
BRAINIAC.software is a listed x402 Data API. Captured payment terms name Base. Monitoring and settlement figures below describe the observations available to this directory; an unpaid HTTP 402 check does not prove that a paid call will deliver.
Assessment computed at . Latest service check observed at . Service data JSON · Measurement methodology.
Page rendered at . This response time is separate from the observation and computation times attached to each measurement.
Latest endpoint observation: . Latest price capture: . Prices are recorded quotes, not a promise of availability. Token assets and payment terms are listed separately. Endpoint data JSON · Price history JSON · Measurement methodology.
Assessment computed at . Uptime uses the stated daily-rollup window; response times are in milliseconds, compliance is passed/evaluated checks, and traction is a measured settlement floor. The comparison score is out of 100 within this category. Assessment JSON · Measurement methodology.
Observed daily coverage: 2026-10-07 to 2026-11-05 UTC. Daily monitoring and settlement rollups do not expose their computation time; a bucket date is not an update timestamp. Uptime and response JSON · Volume JSON · Buyers JSON · Measurement methodology.
Ranked from the measured category pool, refreshed at most once a minute. The comparison has no persisted computation timestamp; the assessment time above belongs to this service only. Ranking API documentation · Ranking methodology.
x402 List home · Services · Data
- uptime · latest daily rollup
- -
- uptime 7d
- -
- uptime 30d
- -
- uptime 90d
- -
- response p95
- 210ms
- avg response
- 210ms
- total checks
- 1
Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.
- price (min)
- $0.03
- price (max)
- $0.12
- category percentile (min)
- p83 in Data
- category percentile (max)
- p75 in Data
- endpoints / prices
- 6 / 5
- model
- tiered
- stability
- 100%
No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.
- domain age
- -
- registrar
- -
- hosting
- custom
- domain created
- ---
Identity facts, not a risk score.
On-chain traction has not been assessed for this service yet.
- member since
- 2026-11-05
Recent checks
| Checked at (UTC) | Status | HTTP | Response | Endpoints |
|---|---|---|---|---|
| Online | 402 | 364ms | 6 | |
| Online | 402 | 432ms | 6 | |
| Online | 402 | 152ms | 6 | |
| Online | 402 | 149ms | 6 | |
| Online | 402 | 244ms | 6 | |
| Online | 402 | 279ms | 6 | |
| Online | 402 | 177ms | 6 | |
| Online | 402 | 304ms | 6 | |
| Online | 402 | 210ms | 6 |
Changes0 in 30d
No changes recorded in the last 30 days.
Over time
On-chain volume
On-chain traction has not been assessed for this service yet.
Uptime no completed-day data
- Uptime
- no completed-day data
On-chain traction has not been assessed for this service yet.
More charts
Response time daily average, ms min 257ms, avg 257ms, max 257ms
10-07 to 11-05* UTC
Each series spans only the dates it has data for. Every series is also served as JSON at /api, /scores, /volume and /buyers.
Values
* today so far, partial (UTC).
The uptime summary counts completed UTC days only. The strip, readouts and table retain today's partial reading.
Assessment history last recorded at . Each UTC day uses its last recorded run; missing readings stay unmeasured. Assessment history JSON · Measurement methodology.
| Day | Uptime | Response | Compliance | Price percentile | Site signals |
|---|---|---|---|---|---|
| 2026-11-05* | 100% | 256.78ms | 14/14 | p83 | 4/6 |
Alternatives in Data
Imagio Relay · 57 x402 tools for agents (web-intel, trade math, infra, docs) strong 98/100 100% up 30d --- 30d
5 of 471 other ranked services in Data, ordered by the same measured score.
Own this service?
Keep this listing accurate. Ownership is proven with a domain check and every change is reviewed by hand.
Update this listingEarn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.
Verify this service ($0.25)Embed a badge
HTML
<a href="https://x402-list.com/services/ brainiac-software? utm_source=badge& utm_medium=referral& utm_campaign=embed"> <img src="https://x402-list.com/ badge/ brainiac-software.svg" alt="BRAINIAC.software listed on x402-list" height="28"> </a>
Markdown
[](https://x402-list.com/ services/ brainiac-software? utm_source=badge& utm_medium=referral& utm_campaign=embed)
HTML, live uptime variant
<a href="https://x402-list.com/services/ brainiac-software? utm_source=badge& utm_medium=referral& utm_campaign=embed"> <img src="https://x402-list.com/ badge/ brainiac-software.svg? data=uptime" alt="BRAINIAC.software uptime on x402-list" height="28"> </a>
Delisting
To request delisting, email info@x402-list.com with the service name, slug, or URL. Removal is free and does not require proof of ownership. See all free email requests.