ScorpTech Recon x402 API
payment-ready until 2026-11-03
Pay-per-call security, OSINT and web-data tools for AI agents: HTTP security-header audit, email auth (SPF/DKIM/DMARC), domain intel, phishing score, CVE lookup, npm/PyPI package risk, Solana transaction decode, URL to markdown, DNS dump, certificate-transparency subdomains, x402 endpoint preflight and more (22 tools). x402 v2, exact scheme, USDC on Solana mainnet, $0.005-$0.01 per call, no signup or API key.
Compare: all web scraping APIs · all WHOIS and domain APIs · all blockchain APIs
Call it x402 v2
x402 v2
- Base URL
- https://scorptech.it.com/api/x402
- Payment
- x402 v2, header channel
$ curl -i 'https://scorptech.it.com/api/x402/v1/ct-subdomains' An unpaid request returns HTTP 402 with the payment terms. Sign a payment authorization, then retry with the PAYMENT-SIGNATURE header.
Endpoints 22 paid routes on scorptech.it.com
GET/v1/ct-subdomains Solana$0.008since 10-27
GET/v1/cve-lookup Solana$0.01since 10-27
GET/v1/dns-dump Solana$0.005since 10-27
GET/v1/domain-intel Solana$0.01since 10-27
GET/v1/email-auth Solana$0.005since 10-27
GET/v1/github-health Solana$0.008since 10-27
GET/v1/headers-audit Solana$0.005since 10-27
GET/v1/http-probe Solana$0.005since 10-27
14 more in Example 402 response
Prices as captured in the 402 response: median $0.005 across the 22 endpoints, unchanged since first capture.
Example 402 response
Endpoints and prices
| Method | Path | Description | Price | Network | Asset | 402 channel | Captured |
|---|---|---|---|---|---|---|---|
| GET | / | Certificate Transparency subdomain enumeration via crt.sh JSON API. Returns unique hostnames (capped) issued under the domain. | $0.008 | Solana | USDC | header | since 10-27 |
| GET | / | Search NIST NVD CVE API 2.0 by product/keyword with optional CVSSv3 severity filter. Returns CVE ids, scores, vectors, descriptions and reference URLs. Public NVD data. | $0.01 | Solana | USDC | header | since 10-27 |
| GET | / | All common DNS records for a domain via Cloudflare DNS-over-HTTPS: A, AAAA, NS, MX, TXT, CAA. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | One-call domain due-diligence: RDAP registration age/expiry/registrar, A/AAAA/NS/MX/CAA, live TLS certificate (issuer, expiry, SANs, trust), Certificate-Transparency subdomain enumeration, and risk flags (new domain, expiring cert, no CAA). Good for phishing/scam triage of links before an agent visits or pays them. | $0.01 | Solana | USDC | header | since 10-27 |
| GET | / | Email authentication & deliverability posture for a domain: SPF (qualifier, lookup count, duplicates), DMARC policy/rua/pct, DKIM probe across common selectors, MTA-STS, TLS-RPT, BIMI, MX; scored with actionable issues. Useful for spoofing-risk and vendor checks. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | GitHub repository health summary via public API: stars/forks/issues, license, languages, last push age, latest release & commit, heuristic healthScore and notes. Unauthenticated rate limits apply. | $0.008 | Solana | USDC | header | since 10-27 |
| GET | / | Graded HTTP security-header audit of a URL: HSTS, CSP quality, XFO, nosniff, Referrer/Permissions/COOP/CORP/COEP, cookie flags, redirect chain, server info leaks, with fix recommendations. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Fast HTTP GET probe: final URL, status, timing, response bytes, and a subset of interesting headers (server, cache, HSTS, CDN). | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | IP ASN + geolocation from free public sources (ipapi.co + RIPE Stat prefix-overview). Country/city/coords, ASN/org, announced prefix. Public IPs only. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | MX / mail-routing check: sorted MX with inferred provider (Google, M365, Proofpoint, etc.), A/AAAA, SPF presence, null-MX detection. Complements /v1/email-auth. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Extract Open Graph, Twitter Card, title/description, canonical, icons and JSON-LD @types from a public URL. Ideal for link unfurling agents. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | npm or PyPI package risk/typosquat check: registry metadata, weekly downloads (npm), deprecation, license/repo presence, edit-distance to popular packages, and whether close-name variants already exist. Heuristic · not a malware scanner. | $0.01 | Solana | USDC | header | since 10-27 |
| GET | / | Heuristic phishing-likelihood score for a URL/domain: brand typosquat distance, subdomain depth, punycode, RDAP age, HTTPS reachability. Returns scored signals · not a verdict. Low Bazaar crowding. | $0.008 | Solana | USDC | header | since 10-27 |
| GET | / | Lightweight RDAP registration age lookup: registered/expiry dates, ageDays, daysToExpiry, registrar, status flags via rdap.org bootstrap. Faster/cheaper than full domain-intel when you only need age. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Follow HTTP redirects (max 10) with SSRF protections; report each hop status, Location, Server and Content-Type. Detect open-redirect chains and tracking bounces. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Fetch and parse robots.txt plus discovered sitemaps for a domain: user-agents, allow/disallow samples, sitemap index vs urlset, URL counts and sample locs. Useful for crawl planning and AI agent politeness checks. | $0.005 | Solana | USDC | header | since 10-27 |
| POST | / | Validate JSON data against a JSON Schema (Ajv + formats). Body: { "schema": {...}, "data": {...} }. Returns valid boolean and error list. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Decode a Solana mainnet transaction via public RPC: status, fee, compute units, parsed instructions, inner instructions, account keys, logs. No API key. Unique on Bazaar. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Lightweight technology fingerprint from public HTML/headers: CMS, frameworks (Next/Nuxt/React/Vue), CDNs, analytics, payments, generator meta, script/stylesheet samples. No invasive probing. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Fetch a public HTML page and convert main/article content to Markdown (Turndown). Scripts/styles stripped; output capped. Good for RAG/agent ingestion. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | Check Internet Archive Wayback Machine availability for a URL (closest snapshot timestamp + archived URL). Public availability API. | $0.005 | Solana | USDC | header | since 10-27 |
| GET | / | x402 preflight for AI agents: inspect any paid endpoint BEFORE paying. Fetches the unpaid 402, decodes PAYMENT-REQUIRED (v2 header or v1 body), normalises price to USD, lists networks/assets/payTo/feePayer, validates the offer and Bazaar discovery schema, checks PayAI and Coinbase CDP discovery listing, and returns an OK/RISKY/BROKEN verdict. Never pays the target. | $0.005 | Solana | USDC | header | since 10-27 |
Payment evidence
402 payload captured at . Check evidence JSON · Measurement methodology.
First of 22 payloads captured by the monitor.
117 lines, scroll inside
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/headers-audit",
"tags": [
"security",
"http-headers",
"recon",
"audit"
],
"mimeType": "application/json",
"description": "Graded HTTP security-header audit of a URL: HSTS, CSP quality, XFO, nosniff, Referrer/Permissions/COOP/CORP/COEP, cookie flags, redirect chain, server info leaks, with fix recommendations.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"url": "https://example.com/",
"grade": "D",
"score": 45,
"status": 200,
"cookies": [],
"finalUrl": "https://example.com/",
"findings": [
{
"pass": false,
"header": "strict-transport-security",
"present": false,
"recommendation": "HSTS max-age >= 180 days"
}
],
"infoLeaks": []
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "Public http(s) URL or bare hostname to audit"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
} Other captured 402 responses (21)
Captured payload 2 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/email-auth",
"tags": [
"email",
"dmarc",
"spf",
"dkim",
"security"
],
"mimeType": "application/json",
"description": "Email authentication & deliverability posture for a domain: SPF (qualifier, lookup count, duplicates), DMARC policy/rua/pct, DKIM probe across common selectors, MTA-STS, TLS-RPT, BIMI, MX; scored with actionable issues. Useful for spoofing-risk and vendor checks.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "example.com"
}
},
"output": {
"type": "json",
"example": {
"spf": {
"record": "v=spf1 -all",
"allQualifier": "-"
},
"dkim": {
"selectorsFound": []
},
"dmarc": {
"policy": "reject"
},
"grade": "C",
"score": 60,
"domain": "example.com",
"issues": [
"No MTA-STS."
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. example.com"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 3 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "10000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/domain-intel",
"tags": [
"domain",
"recon",
"tls",
"phishing",
"osint"
],
"mimeType": "application/json",
"description": "One-call domain due-diligence: RDAP registration age/expiry/registrar, A/AAAA/NS/MX/CAA, live TLS certificate (issuer, expiry, SANs, trust), Certificate-Transparency subdomain enumeration, and risk flags (new domain, expiring cert, no CAA). Good for phishing/scam triage of links before an agent visits or pays them.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "example.com"
}
},
"output": {
"type": "json",
"example": {
"tls": {
"issuer": "DigiCert Inc",
"trusted": true,
"daysRemaining": 120
},
"rdap": {
"ageDays": 11000,
"registrar": "RESERVED-IANA",
"registered": "1995-08-14T04:00:00Z"
},
"domain": "example.com",
"riskFlags": [],
"ctSubdomains": {
"count": 3
}
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"description": "Registrable domain, e.g. example.com"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 4 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/robots-sitemap",
"tags": [
"robots",
"sitemap",
"crawl",
"seo",
"recon"
],
"mimeType": "application/json",
"description": "Fetch and parse robots.txt plus discovered sitemaps for a domain: user-agents, allow/disallow samples, sitemap index vs urlset, URL counts and sample locs. Useful for crawl planning and AI agent politeness checks.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "example.com"
}
},
"output": {
"type": "json",
"example": {
"domain": "example.com",
"robots": {
"disallowCount": 12,
"sitemapDirectives": [
"https://example.com/sitemap.xml"
]
},
"sitemaps": [
{
"url": "https://example.com/sitemap.xml",
"urlCount": 50
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"description": "Domain to inspect"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 5 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/tech-stack",
"tags": [
"tech-stack",
"fingerprint",
"recon",
"cms"
],
"mimeType": "application/json",
"description": "Lightweight technology fingerprint from public HTML/headers: CMS, frameworks (Next/Nuxt/React/Vue), CDNs, analytics, payments, generator meta, script/stylesheet samples. No invasive probing.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"url": "https://example.com",
"server": "Vercel",
"technologies": [
"Next.js",
"Vercel",
"Google Tag Manager"
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "Public http(s) URL"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 6 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/rdap-age",
"tags": [
"rdap",
"whois",
"domain-age",
"osint"
],
"mimeType": "application/json",
"description": "Lightweight RDAP registration age lookup: registered/expiry dates, ageDays, daysToExpiry, registrar, status flags via rdap.org bootstrap. Faster/cheaper than full domain-intel when you only need age.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "example.com"
}
},
"output": {
"type": "json",
"example": {
"found": true,
"domain": "example.com",
"ageDays": 11000,
"registrar": "RESERVED-IANA"
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 7 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "8000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/phishing-score",
"tags": [
"phishing",
"security",
"osint",
"risk"
],
"mimeType": "application/json",
"description": "Heuristic phishing-likelihood score for a URL/domain: brand typosquat distance, subdomain depth, punycode, RDAP age, HTTPS reachability. Returns scored signals — not a verdict. Low Bazaar crowding.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://paypa1-secure.example"
}
},
"output": {
"type": "json",
"example": {
"risk": "high",
"score": 72,
"domain": "paypa1-secure.example",
"signals": [
{
"id": "brand_typo",
"weight": 35
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "URL or domain to score"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 8 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "10000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/cve-lookup",
"tags": [
"cve",
"nvd",
"vulnerability",
"security"
],
"mimeType": "application/json",
"description": "Search NIST NVD CVE API 2.0 by product/keyword with optional CVSSv3 severity filter. Returns CVE ids, scores, vectors, descriptions and reference URLs. Public NVD data.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"product": "openssl",
"severity": "HIGH"
}
},
"output": {
"type": "json",
"example": {
"query": "openssl",
"results": [
{
"id": "CVE-2023-xxxx",
"score": 7.5,
"severity": "HIGH"
}
],
"totalResults": 100
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"product"
],
"properties": {
"product": {
"type": "string",
"description": "Product or keyword"
},
"severity": {
"type": "string",
"description": "Optional LOW|MEDIUM|HIGH|CRITICAL"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 9 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "10000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/package-risk",
"tags": [
"npm",
"pypi",
"typosquat",
"supply-chain",
"security"
],
"mimeType": "application/json",
"description": "npm or PyPI package risk/typosquat check: registry metadata, weekly downloads (npm), deprecation, license/repo presence, edit-distance to popular packages, and whether close-name variants already exist. Heuristic — not a malware scanner.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"name": "lodahs",
"ecosystem": "npm"
}
},
"output": {
"type": "json",
"example": {
"risk": "medium",
"package": "lodahs",
"ecosystem": "npm",
"riskScore": 40,
"typosquatOfPopular": [
{
"popular": "lodash",
"distance": 1
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"ecosystem",
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Package name"
},
"ecosystem": {
"type": "string",
"description": "npm or pypi"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 10 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "8000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/github-health",
"tags": [
"github",
"opensource",
"repo-health",
"osint"
],
"mimeType": "application/json",
"description": "GitHub repository health summary via public API: stars/forks/issues, license, languages, last push age, latest release & commit, heuristic healthScore and notes. Unauthenticated rate limits apply.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"repo": "vercel/next.js"
}
},
"output": {
"type": "json",
"example": {
"repo": "vercel/next.js",
"stars": 100000,
"license": "MIT",
"healthScore": 85,
"daysSincePush": 0
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"repo"
],
"properties": {
"repo": {
"type": "string",
"description": "owner/repo or github.com URL"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 11 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/opengraph",
"tags": [
"opengraph",
"metadata",
"unfurl",
"seo"
],
"mimeType": "application/json",
"description": "Extract Open Graph, Twitter Card, title/description, canonical, icons and JSON-LD @types from a public URL. Ideal for link unfurling agents.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"title": "Example",
"twitter": {},
"openGraph": {
"image": "https://example.com/og.png",
"title": "Example"
}
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 12 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/url-markdown",
"tags": [
"markdown",
"html",
"rag",
"extract"
],
"mimeType": "application/json",
"description": "Fetch a public HTML page and convert main/article content to Markdown (Turndown). Scripts/styles stripped; output capped. Good for RAG/agent ingestion.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"chars": 120,
"title": "Example Domain",
"markdown": "# Example Domain\n\nThis domain is for use in illustrative examples."
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 13 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/schema-validate",
"tags": [
"json-schema",
"validation",
"developer-tools"
],
"mimeType": "application/json",
"description": "Validate JSON data against a JSON Schema (Ajv + formats). Body: { \"schema\": {...}, \"data\": {...} }. Returns valid boolean and error list.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"data": {
"n": 1
},
"schema": {
"type": "object",
"required": [
"n"
],
"properties": {
"n": {
"type": "number"
}
}
}
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"valid": true,
"errors": []
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"required": [
"schema",
"data"
],
"properties": {
"data": {},
"schema": {
"type": "object"
}
}
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 14 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/mx-check",
"tags": [
"email",
"mx",
"dns",
"deliverability"
],
"mimeType": "application/json",
"description": "MX / mail-routing check: sorted MX with inferred provider (Google, M365, Proofpoint, etc.), A/AAAA, SPF presence, null-MX detection. Complements /v1/email-auth.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "gmail.com"
}
},
"output": {
"type": "json",
"example": {
"mx": [
{
"exchange": "gmail-smtp-in.l.google.com",
"priority": 5,
"provider": "Google Workspace"
}
],
"domain": "gmail.com",
"canReceive": true
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 15 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/ip-intel",
"tags": [
"ip",
"asn",
"geo",
"network",
"osint"
],
"mimeType": "application/json",
"description": "IP ASN + geolocation from free public sources (ipapi.co + RIPE Stat prefix-overview). Country/city/coords, ASN/org, announced prefix. Public IPs only.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"ip": "1.1.1.1"
}
},
"output": {
"type": "json",
"example": {
"ip": "1.1.1.1",
"asn": "AS13335",
"geo": {
"city": "Sydney",
"country": "Australia"
},
"org": "Cloudflare, Inc."
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"ip"
],
"properties": {
"ip": {
"type": "string",
"description": "Public IPv4 or IPv6"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 16 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/solana-tx",
"tags": [
"solana",
"blockchain",
"transaction",
"decoder"
],
"mimeType": "application/json",
"description": "Decode a Solana mainnet transaction via public RPC: status, fee, compute units, parsed instructions, inner instructions, account keys, logs. No API key. Unique on Bazaar.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"signature": "5VERv8NMvzbJMEkV8xnrLkEaWRtBuf9LG3wLGiyyudM..."
}
},
"output": {
"type": "json",
"example": {
"fee": 5000,
"status": "success",
"signature": "...",
"instructions": [
{
"parsed": {
"type": "transfer"
},
"program": "system"
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"signature"
],
"properties": {
"signature": {
"type": "string",
"description": "Base58 tx signature"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 17 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/wayback",
"tags": [
"wayback",
"archive",
"osint"
],
"mimeType": "application/json",
"description": "Check Internet Archive Wayback Machine availability for a URL (closest snapshot timestamp + archived URL). Public availability API.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"url": "https://example.com/",
"snapshot": {
"url": "https://web.archive.org/web/...",
"timestamp": "20200101000000"
},
"available": true
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 18 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/dns-dump",
"tags": [
"dns",
"recon",
"osint"
],
"mimeType": "application/json",
"description": "All common DNS records for a domain via Cloudflare DNS-over-HTTPS: A, AAAA, NS, MX, TXT, CAA.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "example.com"
}
},
"output": {
"type": "json",
"example": {
"domain": "example.com",
"records": {
"A": [
"93.184.216.34"
],
"NS": [
"a.iana-servers.net"
]
}
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 19 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "8000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/ct-subdomains",
"tags": [
"certificate-transparency",
"subdomains",
"osint",
"recon"
],
"mimeType": "application/json",
"description": "Certificate Transparency subdomain enumeration via crt.sh JSON API. Returns unique hostnames (capped) issued under the domain.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"domain": "github.com"
}
},
"output": {
"type": "json",
"example": {
"count": 120,
"names": [
"api.github.com",
"gist.github.com"
],
"domain": "github.com"
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 20 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/redirect-chain",
"tags": [
"redirect",
"http",
"security",
"recon"
],
"mimeType": "application/json",
"description": "Follow HTTP redirects (max 10) with SSRF protections; report each hop status, Location, Server and Content-Type. Detect open-redirect chains and tracking bounces.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "http://example.com"
}
},
"output": {
"type": "json",
"example": {
"hops": [],
"finalUrl": "https://example.com/",
"hopCount": 2,
"startUrl": "http://example.com/"
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 21 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/http-probe",
"tags": [
"http",
"probe",
"monitoring"
],
"mimeType": "application/json",
"description": "Fast HTTP GET probe: final URL, status, timing, response bytes, and a subset of interesting headers (server, cache, HSTS, CDN).",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"bytes": 1256,
"status": 200,
"timeMs": 120,
"headers": {
"server": "ECS"
}
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Captured payload 22 of 22
{
"error": "Payment required",
"accepts": [
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww"
},
"payTo": "Gzn6fbrn11cd61iH4mgQvtmf4PHmeMCRn8msU4hjpty8",
"amount": "5000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
}
],
"resource": {
"url": "https://scorptech.it.com/api/x402/v1/x402-probe",
"tags": [
"x402",
"agent-payments",
"preflight",
"discovery",
"validation"
],
"mimeType": "application/json",
"description": "x402 preflight for AI agents: inspect any paid endpoint BEFORE paying. Fetches the unpaid 402, decodes PAYMENT-REQUIRED (v2 header or v1 body), normalises price to USD, lists networks/assets/payTo/feePayer, validates the offer and Bazaar discovery schema, checks PayAI and Coinbase CDP discovery listing, and returns an OK/RISKY/BROKEN verdict. Never pays the target.",
"serviceName": "ScorpTech Recon"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"url": "https://tokencheck.agent.deno.net/x402/txguard",
"method": "POST"
}
},
"output": {
"type": "json",
"example": {
"isX402": true,
"issues": [],
"status": 402,
"accepts": [
{
"payTo": "Gzn6...",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"priceUsd": 0.02,
"assetName": "USDC (Solana)"
}
],
"verdict": "OK",
"discovery": {
"facilitator.payai.network": {
"listed": true,
"checked": true
}
},
"cheapestUsd": 0.02,
"x402Version": 2
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "x402 endpoint URL"
},
"body": {
"type": "string",
"description": "optional JSON body for POST probes (default {})"
},
"method": {
"enum": [
"GET",
"POST",
"HEAD"
],
"type": "string",
"description": "HTTP method (default GET)"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Can I trust it score from our own monitoring
score from our own monitoring
86/100 Solid
#109 of 436 in Data. Bands: strong 93+, solid 75+, mixed 55+, weak below 55.
- Reliability
- 100% uptime since 10-27
- Compliance
- A 13/13 checks pass
- Price
- $0.005 to $0.01 p41 in Data
- Risk
- clean no risk flag
- Traction
- $0.00 30d 0 buyers
13/13 compliance checks
- 402 payload captured
- accepts[] array present
- payTo address recoverable
- payTo at accepts[0].payTo (conformant shape)
- payTo is a valid on-chain address
- atomic price declared
- atomic price in a sane range
- asset (token) address declared
- network resolves to CAIP-2
- payment scheme declared
- served over HTTPS
- declares the current x402 version (2)
- EIP-712 domain parameters present on every EVM entry
- x402 v2 envelope delivered in the payment-required header
402 terms unchanged since 2026-10-27. Last up 2026-10-27.
── Site signals
- homepage reachable
- openapi doc
- pricing page
- llms.txt
- robots.txt
- terms page
How the score works
What the score read on this service: status online, 100% uptime, latest daily rollup (no 30d window yet), 206ms response p95, x402 compliance 13 of 13, $0.005 price against the category, on-chain traction measured. Each of those is measured, and each is published in full below.
The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.
Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.
It is a score inside Data, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 436 listings, this one among them: the same 436 the position above is counted against. When the two differ, the field is the wider one, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.
Traction is a conservative undercount.
All measured facts
What it does
Pay-per-call security, OSINT and web-data tools for AI agents: HTTP security-header audit, email auth (SPF/DKIM/DMARC), domain intel, phishing score, CVE lookup, npm/PyPI package risk, Solana transaction decode, URL to markdown, DNS dump, certificate-transparency subdomains, x402 endpoint preflight and more (22 tools). x402 v2, exact scheme, USDC on Solana mainnet, $0.005-$0.01 per call, no signup or API key.
ScorpTech Recon x402 API is a listed x402 Data API. Captured payment terms name Solana. Monitoring and settlement figures below describe the observations available to this directory; an unpaid HTTP 402 check does not prove that a paid call will deliver.
Assessment computed at . Latest service check observed at . Service data JSON · Measurement methodology.
Page rendered at . This response time is separate from the observation and computation times attached to each measurement.
Latest endpoint observation: . Latest price capture: . Prices are recorded quotes, not a promise of availability. Token assets and payment terms are listed separately. Endpoint data JSON · Price history JSON · Measurement methodology.
Assessment computed at . Uptime uses the stated daily-rollup window; response times are in milliseconds, compliance is passed/evaluated checks, and traction is a measured settlement floor. The comparison score is out of 100 within this category. Assessment JSON · Measurement methodology.
Observed daily coverage: 2026-09-28 to 2026-10-27 UTC. Daily monitoring and settlement rollups do not expose their computation time; a bucket date is not an update timestamp. Uptime and response JSON · Volume JSON · Buyers JSON · Measurement methodology.
Ranked from the measured category pool, refreshed at most once a minute. The comparison has no persisted computation timestamp; the assessment time above belongs to this service only. Ranking API documentation · Ranking methodology.
x402 List home · Services · Data
- uptime · latest daily rollup
- -
- uptime 7d
- -
- uptime 30d
- -
- uptime 90d
- -
- response p95
- 206ms
- avg response
- 206ms
- total checks
- 1
Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.
- price (min)
- $0.005
- price (max)
- $0.01
- category percentile (min)
- p41 in Data
- category percentile (max)
- p26 in Data
- endpoints / prices
- 22 / 3
- model
- tiered
- stability
- 0%
No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.
- domain age
- -
- registrar
- -
- hosting
- custom
- domain created
- ---
Identity facts, not a risk score.
- assessment volume 30d
- $0.00
- exact assessment volume 30d (USD)
- 0
- assessment recorded at (UTC)
- 2026-10-27T11:33:30.192Z
- buyers 30d
- 0
- settlements 30d
- 0
- measured since
- --- (start of our harvest window)
- last settlement
- ---
- top buyer share
- -
- top 3 buyers share
- -
- concentrated volume
- no
- trend 7d vs 30d
- -
- networks
- solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d
- volume all-time
- $0
- settlements all-time
- 0
- median settlement 30d
- -
- max settlement 30d
- -
Assessment volume uses the latest 30d assessment. Over time sums daily address snapshots, rounded to cents and refreshed separately. The two sources can differ in timing, precision and shared-address attribution. Amounts use cents for comparison; known sub-cent values keep up to 12 significant digits. The exact stored assessment value is shown above.
Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.
Top buyer share lowers the on-chain traction part of the ranking score behind this page's verdict and /best, by up to half when one address holds all 30d volume. The Recommended and Highest volume sorts of the services list do not use it; they use the Concentrated volume rule instead.
- member since
- 2026-10-27
Recent checks
| Checked at (UTC) | Status | HTTP | Response | Endpoints |
|---|---|---|---|---|
| Online | 402 | 251ms | 22 | |
| Online | 402 | 261ms | 22 | |
| Online | 402 | 227ms | 22 | |
| Online | 402 | 231ms | 22 | |
| Online | 402 | 243ms | 22 | |
| Online | 402 | 202ms | 22 | |
| Online | 402 | 261ms | 22 | |
| Online | 402 | 152ms | 22 | |
| Online | 402 | 206ms | 22 |
Changes0 in 30d
No changes recorded in the last 30 days.
Over time
On-chain volume daily snapshots, USD 30d: $0.00
volume no data in the payload
Distinct buyers per dayDistinct buyers per day
Uptime no completed-day data
- Volume 30d
- $0.00
- Uptime
- no completed-day data
More charts
Response time daily average, ms min 216ms, avg 216ms, max 216ms
09-28 to 10-27* UTC
Each series spans only the dates it has data for. Every series is also served as JSON at /api, /scores, /volume and /buyers.
Values
* today so far, partial (UTC).
The uptime summary counts completed UTC days only. The strip, readouts and table retain today's partial reading.
Daily snapshot total, no volume data in the last 30d. The visible 30d total in Traction comes from the latest assessment. These sources can differ in their window, refresh time, cent rounding and shared-address attribution.
Daily address snapshots: 2026-09-28 to 2026-10-27 UTC; * today so far, partial (UTC). Daily snapshots store cents. A recorded $0.00 with settlements cannot distinguish exact zero from volume rounded away. Lost precision is unavailable here.
Settlement volume uses the stored USD valuation of tracked payments; it is distinct from token quantities. USD-pegged assets are valued at 1 USD per token in these rollups. The measured settlement floor does not cover all payments to this service.
Assessment history last recorded at . Each UTC day uses its last recorded run; missing readings stay unmeasured. Assessment history JSON · Measurement methodology.
| Day | Volume | Buyers | Settlements | Uptime | Response | Compliance | Price percentile | Site signals |
|---|---|---|---|---|---|---|---|---|
| 2026-10-27* | no data | no data | no data | 100% | 215.83ms | 13/13 | p41 | 2/6 |
Alternatives in Data
5 of 435 other ranked services in Data, ordered by the same measured score.
Own this service?
Keep this listing accurate. Ownership is proven with a domain check and every change is reviewed by hand.
Update this listingEarn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.
Verify this service ($0.25)Embed a badge
HTML
<a href="https://x402-list.com/services/ scorptech-recon-x402-api? utm_source=badge& utm_medium=referral& utm_campaign=embed"> <img src="https://x402-list.com/ badge/ scorptech-recon-x402-api.svg" alt="ScorpTech Recon x402 API listed on x402-list" height="28"> </a>
Markdown
[](https://x402-list.com/ services/ scorptech-recon-x402-api? utm_source=badge& utm_medium=referral& utm_campaign=embed)
HTML, live uptime variant
<a href="https://x402-list.com/services/ scorptech-recon-x402-api? utm_source=badge& utm_medium=referral& utm_campaign=embed"> <img src="https://x402-list.com/ badge/ scorptech-recon-x402-api.svg? data=uptime" alt="ScorpTech Recon x402 API uptime on x402-list" height="28"> </a>
Delisting
To request delisting, email info@x402-list.com with the service name, slug, or URL. Removal is free and does not require proof of ownership. Contact.