OT Intel API

payment-readyonlineimported

payment-ready until 2026-10-26

imported from the x402 Bazaar, not submitted by the operator · own this service? claim it · or ask to be removed

Pay-per-call OT/ICS threat intelligence API.

ot-intel-api.onrender.com ↗

Call it x402 v2

x402 v2

Base URL: https://ot-intel-api.onrender.com
Payment: x402 v2, header channel

$ curl -i 'https://ot-intel-api.onrender.com/ot/actor/sector'

An unpaid request returns HTTP 402 with the payment terms. Sign a payment authorization, then retry with the PAYMENT-SIGNATURE header.

Endpoints 10 paid routes on ot-intel-api.onrender.com

GET/ot/actor/sectorBase$0.03since 07-20

GET/ot/briefBase$0.10since 07-20

GET/ot/campaignBase$0.05since 07-20

GET/ot/complianceBase$0.04since 07-20

GET/ot/cveBase$0.02since 07-20

GET/ot/deltaBase$0.03since 07-20

GET/ot/detectionBase$0.05since 07-20

GET/ot/deviceBase$0.05since 07-20

2 more in Example 402 response

Prices as captured in the 402 response: median $0.045 across the 10 endpoints.

Example 402 response

Endpoints and prices

Current paid endpoints; minimum quoted prices in USD where available; first capture dates in UTC
Method	Path	Description	Price	Network	Asset	402 channel	Captured
GET	/ot/actor/sector	ICS threat actors by sector. Pass ?sector=energy. Returns all groups targeting that sector from live MITRE ATT&CK ICS STIX data. Covers energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear.	$0.03	Base	USDC	header	since 07-20
GET	/ot/brief	Sector threat brief for ICS/OT. Pass ?sector=energy&period=30. Returns active actors, new CVE counts, active campaigns, top advisories, and risk_trend (increasing/stable/decreasing). One call replaces 5+ chained calls. Ideal for weekly reporting and compliance dashboards.	$0.10	Base	USDC	header	since 07-20
GET	/ot/campaign	Active ICS campaign tracker. Pass ?sector=electric&status=active. Returns campaigns currently targeting a sector with actor attribution, start date, targeted geography, TTPs in use, and CVEs being exploited. No free equivalent for live campaign status.	$0.05	Base	USDC	header	since 07-20
GET	/ot/compliance	Compliance gap mapping for a CVE or threat actor across 11 frameworks: NERC CIP, IEC 62443, NIST 800-82, NIST CSF 2.0, CISA CPG, Saudi NCA OTCC, UAE NESA IA. Pass ?cve_id=CVE-2023-38802 or ?actor=SANDWORM, optionally &framework=<value> to filter. Returns triggered controls (e.g. CIP-007-6 R2, IEC 62443-3-3 SR 5.1), status (NON_COMPLIANT_IF_UNMITIGATED / REVIEW_REQUIRED), required action, and compensating controls. For automated compliance reporting agents on cron.	$0.04	Base	USDC	header	since 07-20
GET	/ot/cve	OT-contextualised CVE triage for ICS/SCADA. Pass ?id=CVE-XXXX-XXXX. Returns OT-adjusted severity, cyber-physical impact, patch feasibility, CISA KEV status, and prioritised action. DeepSeek-enriched with live NVD and CISA-KEV data.	$0.02	Base	USDC	header	since 07-20
GET	/ot/delta	ICS sector change feed · only what is NEW in the last N days. Pass ?sector=water&days=7. Returns new CVEs, new CISA advisories, and new actor activity since the last call. Designed for cron-based monitoring agents. Eliminates redundant reprocessing.	$0.03	Base	USDC	header	since 07-20
GET	/ot/detection	ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs · validated:true rules are safe to deploy; validated:false require lab testing first.	$0.05	Base	USDC	header	since 07-20
GET	/ot/device	ICS/OT device exposure lookup. Pass ?vendor=siemens&model=s7-1200. Returns default credential risk, exposed OT protocols (Modbus/502, S7comm/102, DNP3/20000), exploitation notes, and hardening steps. Covers Siemens, Schneider, Rockwell, Honeywell, GE, Unitronics, Beckhoff.	$0.05	Base	USDC	header	since 07-20
GET	/ot/exposure	OT asset risk verdict. Pass ?vendor=siemens&model=s7-1500&sector=energy&network=internet-facing. Returns risk_score (0-100), risk_level, escalate (boolean), recommended_action, active CVEs, and threat actors. Optional firmware param enables firmware-specific CVE matching. Cached 1 hour.	$0.05	Base	USDC	header	since 07-20
GET	/ot/ioc	IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns.	$0.01	Base	USDC	header	since 07-20

Payment evidence

402 payload captured at 2026-07-20 19:17:02 UTC. Check evidence JSON · Measurement methodology.

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "20000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/cve",
    "mimeType": "application/json",
    "description": "OT-contextualised CVE triage for ICS/SCADA. Pass ?id=CVE-XXXX-XXXX. Returns OT-adjusted severity, cyber-physical impact, patch feasibility, CISA KEV status, and prioritised action. DeepSeek-enriched with live NVD and CISA-KEV data."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "id": "CVE-2023-38802"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "cve_id": "CVE-2019-13945",
            "summary": "A vulnerability has been identified in SIMATIC S7-1200 CPU family (All versions). The web server of the affected devices transmits data without TLS encryption.",
            "freshness": "2025-05-22T10:00:00.000Z",
            "cvss_score": 6.8,
            "ot_context": {
              "affected_layer": "field_device",
              "patch_feasibility": "low — requires maintenance window",
              "safety_system_risk": true,
              "production_downtime": true,
              "ot_adjusted_severity": "high"
            },
            "data_sources": [
              "NVD",
              "CISA-KEV",
              "DeepSeek-CTI-Analysis"
            ],
            "kev_due_date": null,
            "actively_exploited": false,
            "recommended_action": "HIGH: Schedule patch for next maintenance window.",
            "compensating_controls": [
              "Isolate PLC from IT network via VLAN",
              "Disable web server interface if unused",
              "Deploy unidirectional gateway for historian traffic"
            ]
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "id"
                ],
                "properties": {
                  "id": {
                    "type": "string",
                    "description": "CVE identifier e.g. CVE-2023-38802"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Other captured 402 responses (9)

Captured payload 2 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/detection",
    "mimeType": "application/json",
    "description": "ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "target": "PIPEDREAM"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "target": "PIPEDREAM",
            "freshness": "2026-06-19T10:00:00Z",
            "signatures": [
              {
                "type": "YARA",
                "source": "manual",
                "raw_rule": "rule PIPEDREAM_INCONTROLLER_Loader { meta: ... strings: ... condition: ... }",
                "rule_name": "PIPEDREAM_INCONTROLLER_Loader",
                "validated": false,
                "ot_safe_note": "Synthesised from CISA advisory AA22-103A. Test against OT baseline before SIEM deployment.",
                "target_layer": "engineering_workstation"
              }
            ],
            "data_sources": [
              "OT-Intel-DB",
              "DeepSeek-CTI-Analysis"
            ],
            "artifact_type": "malware",
            "validated_count": 0,
            "synthesised_count": 1,
            "ot_safe_validation": "0 of 1 rules sourced from public corpus. Rules with validated:false require lab testing before production deployment."
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "target"
                ],
                "properties": {
                  "format": {
                    "type": "string",
                    "description": "Rule format: yara | sigma | snort | all (default: all)"
                  },
                  "target": {
                    "type": "string",
                    "description": "Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 3 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/campaign",
    "mimeType": "application/json",
    "description": "Active ICS campaign tracker. Pass ?sector=electric&status=active. Returns campaigns currently targeting a sector with actor attribution, start date, targeted geography, TTPs in use, and CVEs being exploited. No free equivalent for live campaign status."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "sector": "electric",
            "status": "active"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "sector": "electric",
            "status": "active",
            "campaigns": [
              {
                "name": "VOLTZITE Pre-Positioning Campaign",
                "actor": "VOLTZITE",
                "status": "active",
                "confidence": "high",
                "start_date": "2023-Q1",
                "ttps_in_use": [
                  "T0859",
                  "T0812",
                  "T0885"
                ],
                "exploited_cves": [
                  "CVE-2023-38380"
                ],
                "targeted_geography": [
                  "United States",
                  "Pacific Islands"
                ]
              }
            ],
            "freshness": "2026-06-13T10:00:00Z",
            "data_sources": [
              "MITRE-ATT&CK-ICS",
              "CISA-ICS-CERT",
              "OT-Intel-DB",
              "DeepSeek-CTI-Analysis"
            ],
            "campaign_count": 2
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "sector"
                ],
                "properties": {
                  "sector": {
                    "type": "string",
                    "description": "Industrial sector e.g. energy, water, electric, manufacturing, oil-and-gas, nuclear, chemical"
                  },
                  "status": {
                    "type": "string",
                    "description": "active (default) | all"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 4 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/device",
    "mimeType": "application/json",
    "description": "ICS/OT device exposure lookup. Pass ?vendor=siemens&model=s7-1200. Returns default credential risk, exposed OT protocols (Modbus/502, S7comm/102, DNP3/20000), exploitation notes, and hardening steps. Covers Siemens, Schneider, Rockwell, Honeywell, GE, Unitronics, Beckhoff."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "model": "vision",
            "vendor": "unitronics"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "query": {
              "model": "vision",
              "vendor": "unitronics"
            },
            "freshness": "2025-05-22T10:00:00.000Z",
            "data_sources": [
              "NVD",
              "CISA-ICS-CERT",
              "DeepSeek-CTI-Analysis"
            ],
            "recommended_action": "Change default credentials immediately. No downtime required.",
            "ot_protocols_at_risk": [
              "PCOM (20256)",
              "Modbus TCP (502)"
            ],
            "default_credential_risk": {
              "note": "Default password 1111 on port 20256. Actively exploited by IRGC 2023–2024.",
              "risk": "critical"
            }
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "vendor",
                  "model"
                ],
                "properties": {
                  "model": {
                    "type": "string",
                    "description": "Model or product line e.g. s7-1200, quantum, logix, vision"
                  },
                  "vendor": {
                    "type": "string",
                    "description": "Vendor name e.g. siemens, schneider, rockwell, honeywell, unitronics, ge, beckhoff"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 5 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/exposure",
    "mimeType": "application/json",
    "description": "OT asset risk verdict. Pass ?vendor=siemens&model=s7-1500&sector=energy&network=internet-facing. Returns risk_score (0-100), risk_level, escalate (boolean), recommended_action, active CVEs, and threat actors. Optional firmware param enables firmware-specific CVE matching. Cached 1 hour."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "model": "s7-1500",
            "sector": "energy",
            "vendor": "siemens",
            "network": "internet-facing"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "model": "s7-1500",
            "sector": "energy",
            "vendor": "siemens",
            "network": "internet-facing",
            "escalate": true,
            "freshness": "2026-06-13T10:00:00Z",
            "confidence": "high",
            "risk_level": "critical",
            "risk_score": 87,
            "top_threat": "VOLTZITE pre-positioning via CVE-2023-38380",
            "active_cves": 3,
            "ttl_seconds": 3600,
            "data_sources": [
              "NVD",
              "CISA-KEV",
              "MITRE-ATT&CK-ICS",
              "DeepSeek-CTI-Analysis"
            ],
            "threat_actors": [
              "VOLTZITE",
              "SANDWORM"
            ],
            "active_campaigns": 2,
            "recommended_action": "isolate"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "vendor",
                  "model",
                  "sector",
                  "network"
                ],
                "properties": {
                  "model": {
                    "type": "string",
                    "description": "Device model e.g. s7-1500, modicon-m340, controllogix"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Industrial sector e.g. energy, water, manufacturing, oil-and-gas"
                  },
                  "vendor": {
                    "type": "string",
                    "description": "Vendor name e.g. siemens, schneider, rockwell, ge, honeywell"
                  },
                  "network": {
                    "type": "string",
                    "description": "Network exposure: internet-facing | dmz | lan-only | air-gapped"
                  },
                  "firmware": {
                    "type": "string",
                    "description": "Firmware version e.g. 2.9.2 (optional — enables firmware-specific CVE matching)"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 6 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "30000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/actor/sector",
    "mimeType": "application/json",
    "description": "ICS threat actors by sector. Pass ?sector=energy. Returns all groups targeting that sector from live MITRE ATT&CK ICS STIX data. Covers energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "sector": "energy"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "count": 2,
            "query": {
              "sector": "energy"
            },
            "freshness": "2025-05-22T10:00:00.000Z",
            "data_sources": [
              "MITRE-ATT&CK-ICS",
              "DeepSeek-CTI-Analysis"
            ],
            "actors_targeting_sector": [
              {
                "name": "SANDWORM",
                "attribution": "Russia — GRU Unit 74455",
                "activity_status": "ACTIVE",
                "physical_impact": "CONFIRMED DESTRUCTIVE"
              },
              {
                "name": "VOLTZITE",
                "attribution": "China",
                "activity_status": "ACTIVE",
                "physical_impact": "LIKELY"
              }
            ]
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "sector"
                ],
                "properties": {
                  "sector": {
                    "type": "string",
                    "description": "Industry sector e.g. energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 7 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "40000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/compliance",
    "mimeType": "application/json",
    "description": "Compliance gap mapping for a CVE or threat actor across 11 frameworks: NERC CIP, IEC 62443, NIST 800-82, NIST CSF 2.0, CISA CPG, Saudi NCA OTCC, UAE NESA IA. Pass ?cve_id=CVE-2023-38802 or ?actor=SANDWORM, optionally &framework=<value> to filter. Returns triggered controls (e.g. CIP-007-6 R2, IEC 62443-3-3 SR 5.1), status (NON_COMPLIANT_IF_UNMITIGATED / REVIEW_REQUIRED), required action, and compensating controls. For automated compliance reporting agents on cron."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "cve_id": "CVE-2023-38802"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "cve_id": "CVE-2023-38802",
            "query_id": "CVE-2023-38802",
            "freshness": "2026-06-19T10:00:00Z",
            "frameworks": {
              "nerc_cip": [
                {
                  "title": "Security Patch Management",
                  "status": "NON_COMPLIANT_IF_UNMITIGATED",
                  "control": "CIP-007-6 R2",
                  "action_required": "Evaluate CVE-2023-38802 within 35 days of CISA KEV listing.",
                  "compensating_control": "Network segmentation restricting BGP traffic to SCADA DMZ pending patch."
                }
              ],
              "iec_62443_3_3": [
                {
                  "status": "NON_COMPLIANT_IF_UNMITIGATED",
                  "component": "3-3 SR 5.1",
                  "requirement": "Network Segmentation",
                  "compensating_control": "Enforce zone conduits: restrict BGP/ICS protocol traffic to whitelisted source/destination pairs."
                }
              ]
            },
            "data_sources": [
              "OT-Intel-DB-Compliance",
              "DeepSeek-CTI-Analysis"
            ],
            "priority_action": "Apply network segmentation at the ESP boundary immediately; schedule CVE patch for next maintenance window.",
            "controls_triggered": 2
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [],
                "properties": {
                  "actor": {
                    "type": "string",
                    "description": "Threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME — triggers actor-specific control mappings. At least one of cve_id or actor is required."
                  },
                  "cve_id": {
                    "type": "string",
                    "description": "CVE identifier e.g. CVE-2023-38802 — triggers CVE-specific control mappings. At least one of cve_id or actor is required."
                  },
                  "framework": {
                    "type": "string",
                    "description": "Optional filter to one compliance framework. Valid values: nerc_cip, iec_62443_2_1, iec_62443_2_4, iec_62443_3_2, iec_62443_3_3, iec_62443_4_2, nist_800_82, nist_csf, cisa_cpg, nca_otcc, uae_nesa_ia. Omit (or pass 'all') to return matches across every framework."
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 8 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "10000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/ioc",
    "mimeType": "application/json",
    "description": "IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "type": "ip",
            "value": "185.220.101.45"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "ioc": {
              "type": "ip",
              "value": "185.220.101.45"
            },
            "isp": "Tor Project",
            "tor_node": true,
            "freshness": "2025-05-22T10:00:00.000Z",
            "reputation": -2,
            "pulse_count": 50,
            "country_code": "DE",
            "data_sources": [
              "AlienVault-OTX",
              "AbuseIPDB",
              "DeepSeek-CTI-Analysis"
            ],
            "ics_association": {
              "confidence": "high",
              "ics_tags_found": [
                "ics",
                "scada",
                "modbus"
              ],
              "campaign_context": "IP observed in VOLTZITE reconnaissance activity against US electric utilities.",
              "known_threat_actor": "VOLTZITE",
              "associated_with_ics_campaign": true
            },
            "total_abuse_reports": 142,
            "abuse_confidence_score": 87
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "value",
                  "type"
                ],
                "properties": {
                  "type": {
                    "enum": [
                      "ip",
                      "domain"
                    ],
                    "type": "string",
                    "description": "IOC type: ip or domain"
                  },
                  "value": {
                    "type": "string",
                    "description": "The IOC: IP address or domain name"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 9 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "100000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/brief",
    "mimeType": "application/json",
    "description": "Sector threat brief for ICS/OT. Pass ?sector=energy&period=30. Returns active actors, new CVE counts, active campaigns, top advisories, and risk_trend (increasing/stable/decreasing). One call replaces 5+ chained calls. Ideal for weekly reporting and compliance dashboards."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "period": "30",
            "sector": "energy"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "sector": "energy",
            "new_cves": 12,
            "freshness": "2026-06-13T10:00:00Z",
            "confidence": "high",
            "risk_trend": "increasing",
            "period_days": 30,
            "data_sources": [
              "NVD",
              "CISA-ICS-CERT",
              "MITRE-ATT&CK-ICS",
              "OT-Intel-DB",
              "DeepSeek-CTI-Analysis"
            ],
            "active_actors": [
              "VOLTZITE",
              "SANDWORM",
              "BENTONITE"
            ],
            "critical_cves": 3,
            "top_advisories": [
              {
                "id": "ICSA-26-150-01",
                "title": "Siemens SIMATIC S7-1500",
                "cvss_max": 9.8
              }
            ],
            "active_campaigns": 2,
            "recommended_actions": [
              "Patch CVE-2023-38380 on all internet-facing Siemens devices",
              "Monitor for LOTL techniques on OT-adjacent hosts",
              "Review remote access paths into the energy DMZ"
            ],
            "risk_trend_rationale": "VOLTZITE pre-positioning activity increased in Q2 2026 targeting US electric grid."
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "sector"
                ],
                "properties": {
                  "period": {
                    "type": "string",
                    "description": "Lookback window in days, default 30"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Industrial sector e.g. energy, water, manufacturing, oil-and-gas, electric, nuclear"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 10 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "amount": "30000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://ot-intel-api.onrender.com/ot/delta",
    "mimeType": "application/json",
    "description": "ICS sector change feed — only what is NEW in the last N days. Pass ?sector=water&days=7. Returns new CVEs, new CISA advisories, and new actor activity since the last call. Designed for cron-based monitoring agents. Eliminates redundant reprocessing."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "days": "7",
            "sector": "water"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "since": "2026-06-06T00:00:00Z",
            "sector": "water",
            "new_cves": [
              {
                "id": "CVE-2026-1234",
                "cvss": 9.1,
                "ot_severity": "critical",
                "affected_vendors": [
                  "Schneider Electric"
                ]
              }
            ],
            "freshness": "2026-06-13T10:00:00Z",
            "net_change": "1 new critical CVE, 1 new advisory",
            "data_sources": [
              "NVD",
              "CISA-ICS-CERT",
              "MITRE-ATT&CK-ICS"
            ],
            "new_advisories": [
              {
                "id": "ICSA-26-164-01",
                "title": "Schneider Electric Modicon",
                "cvss_max": 9.1
              }
            ],
            "new_actor_activity": []
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "sector"
                ],
                "properties": {
                  "days": {
                    "type": "string",
                    "description": "Lookback window in days, default 7, max 30"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Industrial sector e.g. energy, water, manufacturing, oil-and-gas, electric"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Can I trust it score from our own monitoring

score from our own monitoring

85/100 Solid

                           │         │     ···│···
0                          55        75       93

                │     │   ·│··
0               55    75   93

#151 of 386 in Data. Bands: strong 93+, solid 75+, mixed 55+, weak below 55.

Reliability: 100% uptime 30d
Compliance: A 14/14 checks pass
Price: $0.01 to $0.10 p62 in Data
Risk: clean no risk flag
Traction: $1.02 30d 9 buyers, top buyer 32% (address, not entity)

14/14 compliance checks

402 payload captured
accepts[] array present
payTo address recoverable
payTo at accepts[0].payTo (conformant shape)
payTo is a valid on-chain address
atomic price declared
atomic price in a sane range
asset (token) address declared
network resolves to CAIP-2
payment scheme declared
served over HTTPS
declares the current x402 version (2)
EIP-712 domain parameters present on every EVM entry
x402 v2 envelope delivered in the payment-required header

402 terms unchanged since 2026-07-20. Last up 2026-10-19.

── Site signals

homepage reachable
openapi doc
pricing page
llms.txt
robots.txt
terms page

How the score works

What the score read on this service: status online, 100% uptime 30d, 333ms response p95, x402 compliance 14 of 14, $0.01 price against the category, on-chain traction measured. Each of those is measured, and each is published in full below.

The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.

Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.

It is a score inside Data, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 386 listings, this one among them: the same 386 the position above is counted against. When the two differ, the field is the wider one, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.

Settled via coinbase ($1.02, 50 tx). Traction is a conservative undercount; first settlement seen 2026-05-21.

All measured facts

What it does

Pay-per-call OT/ICS threat intelligence API. Endpoints cover CVE triage with OT-adjusted severity, internet-exposed device lookup, threat actor and campaign profiles, IOC enrichment, detection artifacts and compliance framework mapping. Responses are LLM-enriched. Priced in USDC on Base.

OT Intel API is a listed x402 Data API. Captured payment terms name Base. Monitoring and settlement figures below describe the observations available to this directory; an unpaid HTTP 402 check does not prove that a paid call will deliver.

Assessment computed at 2026-10-19 08:03:09 UTC. Latest service check observed at 2026-10-19 11:34:16 UTC. Service data JSON · Measurement methodology.

Page rendered at 2026-10-19 11:41:55 UTC. This response time is separate from the observation and computation times attached to each measurement.

Latest endpoint observation: 2026-10-19 11:34:16 UTC. Latest price capture: 2026-07-20 19:16:15 UTC. Prices are recorded quotes, not a promise of availability. Token assets and payment terms are listed separately. Endpoint data JSON · Price history JSON · Measurement methodology.

Assessment computed at 2026-10-19 08:03:09 UTC. Uptime uses the stated daily-rollup window; response times are in milliseconds, compliance is passed/evaluated checks, and traction is a measured settlement floor. The comparison score is out of 100 within this category. Assessment JSON · Measurement methodology.

Observed daily coverage: 2026-09-20 to 2026-10-19 UTC. Daily monitoring and settlement rollups do not expose their computation time; a bucket date is not an update timestamp. Latest settlement in the assessment: 2026-10-18 11:48:51 UTC. Uptime and response JSON · Volume JSON · Buyers JSON · Measurement methodology.

Ranked from the measured category pool, refreshed at most once a minute. The comparison has no persisted computation timestamp; the assessment time above belongs to this service only. Ranking API documentation · Ranking methodology.

x402 List home · Services · Data

uptime · latest daily rollup: 100%
uptime 7d: 100%
uptime 30d: 100%
uptime 90d: 100%
response p95: 333ms
avg response: 277ms
total checks: 2,715

Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.

price (min): $0.01
price (max): $0.10
category percentile (min): p62 in Data
category percentile (max): p71 in Data
endpoints / prices: 10 / 6
model: tiered
stability: 100%

No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.

domain age: -
registrar: -
hosting: free host
domain created: ---

Identity facts, not a risk score.

assessment volume 30d: $1.02
exact assessment volume 30d (USD): 1.02
assessment recorded at (UTC): 2026-10-19T08:03:09.798Z
buyers 30d: 9
settlements 30d: 50
measured since: 2026-05-21 (start of our harvest window)
last settlement: 2026-10-18
top buyer share: 32% of 30d volume (address, not entity)
top 3 buyers share: 88% of 30d volume (addresses, not entities)
concentrated volume: no
trend 7d vs 30d: 0.92x the 30d daily rate
networks: eip155:8453
volume all-time: $39.47
settlements all-time: 519
median settlement 30d: $0.01
max settlement 30d: $0.05

Assessment volume uses the latest 30d assessment. Over time sums daily address snapshots, rounded to cents and refreshed separately. The two sources can differ in timing, precision and shared-address attribution. Amounts use cents for comparison; known sub-cent values keep up to 12 significant digits. The exact stored assessment value is shown above.

Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.

Top buyer share lowers the on-chain traction part of the ranking score behind this page's verdict and /best, by up to half when one address holds all 30d volume. The Recommended and Highest volume sorts of the services list do not use it; they use the Concentrated volume rule instead.

member since: 2026-07-20

Recent checks

Latest 18 unpaid HTTP checks, newest first; response times in milliseconds, observation times in UTC
Checked at (UTC)	Status	HTTP	Response	Endpoints
2026-10-19 11:34:16 UTC	Online	402	191ms	10
2026-10-19 11:18:18 UTC	Online	402	199ms	10
2026-10-19 10:57:19 UTC	Online	402	157ms	10
2026-10-19 10:36:11 UTC	Online	402	120ms	10
2026-10-19 10:20:10 UTC	Online	402	91ms	10
2026-10-19 10:04:09 UTC	Online	402	95ms	10
2026-10-19 09:48:09 UTC	Online	402	143ms	10
2026-10-19 09:32:07 UTC	Online	402	149ms	7
2026-10-19 09:16:06 UTC	Online	402	100ms	10
2026-10-19 09:00:08 UTC	Online	402	172ms	10
2026-10-19 08:44:08 UTC	Online	402	187ms	10
2026-10-19 08:27:08 UTC	Online	402	257ms	10
2026-10-19 08:11:08 UTC	Online	402	241ms	10
2026-10-19 07:55:05 UTC	Online	402	169ms	10
2026-10-19 07:39:05 UTC	Online	402	311ms	10
2026-10-19 07:23:05 UTC	Online	402	316ms	10
2026-10-19 07:07:04 UTC	Online	402	287ms	10
2026-10-19 06:51:04 UTC	Online	402	302ms	10

Changes0 in 30d

No changes recorded in the last 30 days.

all changes

Over time

On-chain volume daily snapshots, USD 30d: $1.02, peak $0.15 on 09-23

                $0.15                                                                            
       ▃▃       ██                                                                               
       ██       ██                                        ▃▃                   ▅▅                
       ██       ██                   ██                   ██                   ██                
       ██       ██             ▅▅    ██    ▅▅             ██ ▃▃    ▅▅          ██                
       ██ ██ ·  ██ ▅▅ ▅▅ ·  ·  ██ ·  ██ ·  ██ ·  ██ ·  ·  ██ ██ ▅▅ ██ ▅▅ ▅▅ ·  ██ ██ ▅▅ ▅▅ ▅▅ ·  
    $0

volume no data in the payload

Distinct buyers per dayDistinct buyers per day

        2  1  ·  2  1  1  ·  ·  2  ·  2  ·  1  ·  1  ·  ·  2  3  1  2  1  1  ·  3  2  1  1  1  ·

Uptime 1 of 29 completed days below 100%

       ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ▇▇ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██

uptime below 100%, to scale

       09-20                                     10-04                                   10-19*

Volume 30d: $1.02
Uptime: 1 of 29 completed days below 100%

Daily on-chain settlement volume in US dollars, 2026-09-20 to 2026-10-19; highest day $0.15 on 09-23; 10 days have no data in the payload; distinct buyers per day

Day    Volume             USD  Buyers
09-20                   $0.13       2
09-21                   $0.03       1
09-22  · no data
09-23                   $0.15       2
09-24                   $0.02       1
09-25                   $0.02       1
09-26  · no data, 2 days to 09-27
09-28                   $0.05       2
09-29  · no data
09-30                   $0.09       2
10-01  · no data
10-02                   $0.05       1
10-03  · no data
10-04                   $0.03       1
10-05  · no data, 2 days to 10-06
10-07                   $0.10       2
10-08                   $0.04       3
10-09                   $0.02       1
10-10                   $0.05       2
10-11                   $0.02       1
10-12                   $0.02       1
10-13  · no data
10-14                   $0.11       3
10-15                   $0.03       2
10-16                   $0.02       1
10-17                   $0.02       1
10-18                   $0.02       1
10-19* · no data

More charts

Response time daily average, ms min 183ms, avg 273ms, max 541ms

       ▃▃ ▅▅ ▅▅ ▄▄ ██ ██ ▅▅ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▃▃ ▅▅ ▄▄ ▃▃ ▃▃ ▄▄ ▄▄ ▄▄ ▄▄ ▅▅ ▄▄ ▃▃ ▃▃ ▃▃ ▃▃ ▃▃ ▄▄

09-20 to 10-19* UTC

      ▃▅▅▄██▅▄▄▄▄▄▄▃▅▄▃▃▄▄▄▄▅▄▃▃▃▃▃▄

      09-20         10-04     10-19*

Scores over time

x402 compliance low 14/14, high 14/14

       ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄

09-20 to 10-19* UTC

      ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

      09-20         10-04     10-19*

Price percentile in Data own low to high; exact values below

       ▁▁ ▃▃ ▃▃ ▃▃ ▁▁ ▁▁ ▁▁ ▁▁ ▁▁ ▃▃ ▃▃ ▃▃ ▃▃ ▃▃ ▅▅ ▅▅ ▅▅ ▅▅ ▇▇ ▇▇ ▅▅ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▅▅ ▅▅ ▇▇ ▇▇

09-20 to 10-19* UTC

      ▁▃▃▃▁▁▁▁▁▃▃▃▃▃▅▅▅▅▇▇▅▇▇▇▇▇▅▅▇▇

      09-20         10-04     10-19*

Site signals present (of 6) own low to high; exact values below

       ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄

09-20 to 10-19* UTC

      ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

      09-20         10-04     10-19*

       09-20                                     10-04                                   10-19*

      09-20         10-04     10-19*

Scores: one day per column, 09-20 to 10-19*, on the columns of Response time. Uptime held below 100% on some days in this window, including any partial day. Daily readings remain in the Uptime strip and Values. The checklist grew from 11 to 14 checks on 2026-07-28, before this window. Pillar lines use their own low and high. Exact dated readings are available in each readout and in Values.

Each series spans only the dates it has data for. Every series is also served as JSON at /api/v1/services/ot-intel-api/price, /scores, /volume and /buyers.

Values

* today so far, partial (UTC).

The uptime summary counts completed UTC days only. The strip, readouts and table retain today's partial reading.

Daily snapshot total, 30d: $1.02, peak $0.15 on 09-23. The visible 30d total in Traction comes from the latest assessment. These sources can differ in their window, refresh time, cent rounding and shared-address attribution.

Daily address snapshots: 2026-09-20 to 2026-10-19 UTC; * today so far, partial (UTC). Daily snapshots store cents. A recorded $0.00 with settlements cannot distinguish exact zero from volume rounded away. Lost precision is unavailable here.

Settlement volume uses the stored USD valuation of tracked payments; it is distinct from token quantities. USD-pegged assets are valued at 1 USD per token in these rollups. The measured settlement floor does not cover all payments to this service.

Assessment history last recorded at 2026-10-19 08:03:09 UTC. Each UTC day uses its last recorded run; missing readings stay unmeasured. Assessment history JSON · Measurement methodology.

Daily values, 2026-09-20 to 2026-10-19: address settlement volume in USD, distinct buyer and settlement counts, uptime percent, average response milliseconds, compliance passed/total, price percentile 0-100, site signals out of 6; UTC dates
Day	Volume	Buyers	Settlements	Uptime	Response	Compliance	Price percentile	Site signals
2026-09-20	$0.13	2	3	100%	192.84ms	14/14	p59	4/6
2026-09-21	$0.03	1	1	100%	317.28ms	14/14	p60	4/6
2026-09-22	no data	no data	no data	100%	363.34ms	14/14	p60	4/6
2026-09-23	$0.15	2	4	100%	237.77ms	14/14	p60	4/6
2026-09-24	$0.02	1	1	100%	540.58ms	14/14	p59	4/6
2026-09-25	$0.02	1	1	100%	509.29ms	14/14	p59	4/6
2026-09-26	no data	no data	no data	100%	335.01ms	14/14	p59	4/6
2026-09-27	no data	no data	no data	100%	296.48ms	14/14	p59	4/6
2026-09-28	$0.05	2	4	100%	279.43ms	14/14	p59	4/6
2026-09-29	no data	no data	no data	100%	254.04ms	14/14	p60	4/6
2026-09-30	$0.09	2	3	100%	264.30ms	14/14	p60	4/6
2026-10-01	no data	no data	no data	100%	272.12ms	14/14	p60	4/6
2026-10-02	$0.05	1	1	100%	265.83ms	14/14	p60	4/6
2026-10-03	no data	no data	no data	100%	232.07ms	14/14	p60	4/6
2026-10-04	$0.03	1	1	100%	307.00ms	14/14	p61	4/6
2026-10-05	no data	no data	no data	100%	249.50ms	14/14	p61	4/6
2026-10-06	no data	no data	no data	100%	183.00ms	14/14	p61	4/6
2026-10-07	$0.10	2	4	100%	224.60ms	14/14	p61	4/6
2026-10-08	$0.04	3	4	98.89%	258.39ms	14/14	p62	4/6
2026-10-09	$0.02	1	2	100%	290.57ms	14/14	p62	4/6
2026-10-10	$0.05	2	3	100%	264.11ms	14/14	p61	4/6
2026-10-11	$0.02	1	2	100%	256.79ms	14/14	p62	4/6
2026-10-12	$0.02	1	2	100%	313.54ms	14/14	p62	4/6
2026-10-13	no data	no data	no data	100%	237.60ms	14/14	p62	4/6
2026-10-14	$0.11	3	5	100%	220.61ms	14/14	p62	4/6
2026-10-15	$0.03	2	3	100%	206.81ms	14/14	p62	4/6
2026-10-16	$0.02	1	2	100%	184.24ms	14/14	p61	4/6
2026-10-17	$0.02	1	2	100%	210.02ms	14/14	p61	4/6
2026-10-18	$0.02	1	2	100%	183.00ms	14/14	p62	4/6
2026-10-19*	no data	no data	no data	100%	237.07ms	14/14	p62	4/6

Alternatives in Data

claw402 strong 97/100 100% up 30d $1.1k 30d

SniperX•x402 strong 97/100 99.9% up 30d $582.66 30d

glim.sh strong 95/100 100% up 30d $30.28 30d

cn402 strong 93/100 100% up 30d $39.26 30d

twit.sh strong 93/100 100% up 30d $47.43 30d

5 of 385 other ranked services in Data, ordered by the same measured score.

see the whole category

Own this service?

Keep this listing accurate. Ownership is proven with a domain check and every change is reviewed by hand.

Update this listing

Earn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.

Verify this service ($0.25)

Embed a badge

HTML

<a href="https://x402-list.com/services/ot-intel-api?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/ot-intel-api.svg" alt="OT Intel API listed on x402-list" height="28">
</a>

Markdown

[![OT Intel API on x402-list](https://x402-list.com/badge/ot-intel-api.svg)](https://x402-list.com/services/ot-intel-api?utm_source=badge&utm_medium=referral&utm_campaign=embed)

HTML, live uptime variant

<a href="https://x402-list.com/services/ot-intel-api?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/ot-intel-api.svg?data=uptime" alt="OT Intel API uptime on x402-list" height="28">
</a>

Delisting

To request delisting, email info@x402-list.com or update your listing at /services/ot-intel-api/update.