SiteCheck Agent Intel & Dev

Checks an x402 (HTTP 402 payment) endpoint before you pay: one unpaid GET, then the HTTP status, whether a 402 challenge with an accepts list is present, the payment networks, asset, price and pay-to address format, CORS header and response time. Does not pay, does not verify the seller's identity or reputation, and gives one sample, not uptime.

Is this address or domain on the ScamSniffer community blacklist (public GitHub scam-database: wallet addresses, or phishing domains with their linked addresses)? Returns listed yes or no and the list size. A 'no' does not prove safety, and the list is not updated in real time.

Checks up to 5 references against public registries: DOI through Crossref, arXiv ids through the arXiv API, ISBN-10/13 through Open Library (checksum first). Returns title, year, venue and a BibTeX entry plus an APA-style string for each verified one; unknown ones come back as not_found. Authors are given for DOI and arXiv only.

Checks an agent's JSON output against a JSON Schema (draft 2020-12 keywords: type, properties, required, additionalProperties, items, enum, const, length, pattern, minimum/maximum, item counts). Returns valid yes/no, each error with its path and the value with disallowed fields removed. $ref, allOf/anyOf/oneOf, if/then and format return an error instead of passing silently.

Recent TLS certificates logged for a domain (Certificate Transparency via Cert Spotter's public index): issuer, validity dates, names on the certificate, and any name outside the domain. Shows the 10 newest; does not check revocation or the live server's certificate chain.

Reader view of one public https page: its <title> and the <main> or <article> content (else <body>) as Markdown, with links and images resolved. Removes scripts, styles, navigation, footers, forms and iframes. Cookie banners built as plain divs are NOT removed. Pages that block automated requests return a 503.

Current base fee and priority-fee percentiles (10th, 50th, 99th) for Ethereum, Base or Arbitrum from public RPC nodes, with the next block's base fee projected from the last block's fullness (EIP-1559 rule). Solana is not included here. Forecasts are a one-block projection, not a congestion model.

Converts raw HTML you send (up to 500 KB) to GitHub-flavoured Markdown: headings, paragraphs, links, images, lists, code blocks, quotes, bold and italic. Scripts, styles, navigation, footers, forms and comments are removed; tables are flattened to text. Relative links need a base URL to become absolute.

Makes a QR code as scalable SVG (21x21 modules, version 1) for up to 17 bytes at level L, 14 at M, 11 at Q or 7 at H, with the mask chosen by the standard penalty rules. Returns the SVG and a base64 copy. Larger versions are not supported; longer text returns 400.

IP type check: country, ISP and ASN, whether the address is a known Tor exit (Tor Project's public list), a proxy or VPN and a hosting/datacenter address (ip-api.com flags), and a LOW/MEDIUM/HIGH level from those flags. It is not a threat score: no abuse-report or spam history is included. ip-api's free tier is for non-commercial use only.

Today's trending Google searches for one country (public Google Trends RSS): rank, query, approximate search volume (e.g. '200+'), and the news items behind each trend. Country only: Google's feed has no industry categories, and it lists daily trends, not a breakout history.

NBA player season statistics, sorted leaderboard: per player team, position, age, games, minutes, points, rebounds, assists, steals, blocks, turnovers, FG/3P/FT made-attempted-percentage, double-doubles, triple-doubles (per-game and totals). Regular season or playoffs, 2003 to now (season = year it ends, 2026 = 2025-26). Data from ESPN's public stats API (stats.nba.com blocks automated access).

Screens one text for prompt-injection patterns in English (instruction override, role or system-prompt extraction, jailbreak personas, hidden or encoded instructions) using a fixed rule list based on OWASP LLM01 categories. Returns HIGH/MEDIUM/LOW/NONE, each match, and the text with matches removed. A rule list misses rewording and other languages: treat NONE as no known pattern, not as safe.

Screens one message (DM, email or chat text) for common crypto and phishing scam signals in English: urgency, fake support or giveaway, wallet-connect or seed-phrase requests, guaranteed returns, and suspicious links. Returns HIGH/MEDIUM/LOW/NONE with each matched phrase. A fixed rule list: it misses new wording and other languages, and it never sees the sender's account.

ESPN NHL scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON. Times are UTC; days with no games return an empty list.

Liveness and latency of one public HTTPS endpoint, measured from this server: three GET requests, returning each HTTP status and the time to the response headers, the median and the worst time, and an UP/DEGRADED/DOWN level. One location only: it does not test other regions, and it does not measure the TLS handshake on its own.

CORS check for a public HTTPS endpoint: three GET requests with a made-up origin, the null origin and no origin, reporting whether the server echoes the origin, allows null, returns a wildcard, and allows credentials. Only reads response headers of GET requests; it does not test preflight, methods or authentication.

DNSSEC status for a domain using Cloudflare's public resolver (1.1.1.1 DNS-over-HTTPS): whether the resolver validated the answer (AD flag), the DS records in the parent zone, and the DNSKEY records with key-signing keys. The validation is done by Cloudflare's resolver, not by this tool walking the chain to the root.

European Central Bank euro reference rates (published once per working day around 16:00 CET): the rate for one currency against the euro, and an optional conversion of an amount between two of the listed currencies. Rates are the ECB's daily reference, not a live market quote; the list has about 30 currencies.

Resolves a postal code in one country (ISO 2-letter code, e.g. US, DE, TR, GB) to its place names, state or province, and latitude and longitude, from Zippopotam.us. Covers only the countries that service publishes. No time zone or administrative municipality is returned, since no free source for them was used.

Validates an IBAN (MOD-97 checksum and country length, computed here) and, if it passes, looks up the bank name, city and BIC (SWIFT) through OpenIBAN's public validation. The bank lookup depends on OpenIBAN's directory and may be missing for some banks; a valid checksum does not prove the account exists.

Extracts vendor name, tax ID, line items, net subtotal, VAT rates and payment details (IBAN, BIC) from an invoice image (PNG or JPEG, a public https URL or base64, up to 4 MB) sent straight to a Cloudflare Workers AI vision model. Model output is parsed as JSON and checked for the expected keys; unparseable output is an error, not a guess. Requires the env.AI binding.

Transcribes an audio file (a public https URL or base64, up to 6 MB; WAV, MP3, M4A or OGG as the model accepts them) to text with a Cloudflare Workers AI Whisper model, returning the text and any timestamped segments the model gives. Requires the env.AI binding.

Turns text (up to 1000 characters) into speech with a Cloudflare Workers AI TTS model, in English, Spanish, French or Japanese. Returns base64 audio as the model gives it. German and Turkish are not offered: the model used here does not list them. Requires the env.AI binding.

Bitcoin Spent Output Profit Ratio (SOPR) daily series for all holders, short-term holders (sth) or long-term holders (lth) from the free bitcoin-data.com (BGeometrics) API, with the latest value, 7/30-day averages and days spent in profit (>1) vs loss (<1). The free feed is delayed about 7 days. Statistics only, not a trading signal. Bitcoin only.

Sportsbook odds from Covers.com odds screens (NFL, NBA, MLB, NHL, college, WNBA): every listed game with Covers game ID, away/home team, kick-off text and, for each sportsbook shown (e.g. bet365, BetVictor, William Hill, Betway), the away and home price in American, decimal and fractional odds plus Covers' market tag. The books shown depend on the visitor's region.

FanDuel Sportsbook (New Jersey) game lines for NFL, NBA, MLB, NHL, WNBA and college football/basketball: each listed game with FanDuel event ID, away/home team, start time and the moneyline, spread (puck line in NHL) and total, every price in American and decimal odds with the line. Read from the JSON FanDuel's own web app loads; only games FanDuel currently lists, no props or futures.

Hugging Face Papers search: arXiv papers matching a query with title, abstract summary, publish date, community upvotes, comment count and arXiv link. Public search API; ranking is Hugging Face's.

NFL official passing leaders for a regular season from nfl.com's stats page, sorted by passing yards: player, yards, yards per attempt, attempts, completions, completion %, touchdowns, interceptions, passer rating, sacks. Passing only; other categories are not returned.

NRL Telstra Premiership ladder for a season from the NRL site's own ladder data: position, club, played, wins, draws, losses, points for and against, points difference, competition points, form and streak. Season stats only; no player stats.

Openverse openly licensed image search (Creative Commons and public domain): title, creator, license, ready-made attribution, source page, direct image URL and size. Images only; each result keeps its own license. Results can be slow (up to ~15 s).

Horse racing racecards from Sporting Life (UK & Ireland, plus international meetings): today's meetings with course, country, going, surface and weather, and each race's time, name, class, age band, distance, runner count, stage (declared, off, result) and winning time; plus the next ten races with runners (horse, age, form, jockey, trainer, draw, official rating, current and earlier odds) and the

US sportsbook odds comparison from SportsbookReview: for a league (NFL, NBA, MLB, NHL, college, WNBA), market (spread, moneyline or totals) and optional date, every game with teams, start time, venue, public consensus pick percentages and each sportsbook's opening and current line and price (BetMGM, bet365, DraftKings, FanDuel, Caesars, BetRivers, Fanatics, Hard Rock…).

SportsLine (CBS Sports) odds board: for NFL, NBA, MLB, NHL, college or WNBA, every listed game with teams, start time, venue, TV, status, SportsLine's projected score and, per sportsbook (consensus, BetMGM, DraftKings, FanDuel, bet365, Caesars…), the opening and current moneyline, point spread and total with prices.

TeamRankings team stat table for NBA or NFL, for one stat page (for example points-per-game): rank, team, the season value, last 3 games, last game, home and away averages, and the previous season, as TeamRankings publishes them.

Pre-match head-to-head odds for one sport from The Odds API (v4): each event with start time, teams and each bookmaker's decimal prices, plus the best price per outcome and which bookmaker offers it. Needs the owner's free The Odds API key; uses quota on that key.

TikTok sound (music) stats from TikTok's public embed player and sound page: sound ID, title, artist, total number of videos made with the sound, cover image and the first 10 videos using it (video ID, link, creator username, caption, play count, cover). Accepts a sound ID or a tiktok.com/music/… URL. Unknown sounds return 404.

Understat expected-goals (xG) player stats for one league and season: top players by xG with goals, xG, assists, xA, shots, key passes and minutes. Leagues: EPL, La_liga, Bundesliga, Serie_A, Ligue_1, RFPL. Season is the start year (2025 = 2025-26).

Betting lines from VegasInsider's odds screens (NFL, NBA, MLB, NHL, WNBA, college football/basketball): every listed game with VI event ID, start time, teams with rotation numbers and, per market (spread, total or moneyline), the opening line, each US sportsbook's line and price (bet365, BetMGM, DraftKings, Caesars, FanDuel, Hard Rock, Fanatics, BetRivers) and VI's consensus. American odds; 'even'

Current perpetual-futures funding rate for one coin (USDT-margined) on Binance, OKX and Bybit, with each rate annualised (3 payments a day), mark price, and from Bybit: open interest value and the long/short account ratio. A table of exchanges, not a time-series heatmap; funding history is not included.

TrustRadius software product summary: product name, vendor, category, TrustRadius score (out of 10) and rating count, product description, TrustRadius' review digest (overview, top pros and cons, number of reviews it is based on) and the top industries using the product (share of tracked installs). Takes the product slug from trustradius.com/products/<slug>/reviews. Via a rendering residential pro

DICK'S Sporting Goods products in a category (e.g. mens-running-shoes, golf-drivers, kayaks): product name, brand, part number, price and list price range (USD), rating, review count, badge (new, sale...), number of SKUs (sizes/colors) and link; 48 per page (page 1 to 20), plus the total count. From dickssportinggoods.com's public category pages via a residential proxy. Takes about 20 s; allow a 4

Research starter: searches English Wikipedia (not the open web) for a query and returns the top articles with their summary text, description and last edit time. No AI synthesis; the caller reads and combines the sources.

Heuristic Solidity linter for a snippet or file (up to 60000 characters): unchecked low-level call/send/delegatecall, value-sending external calls before a storage write (possible reentrancy), arithmetic under pragma below 0.8.0 (overflow risk), and public or external state-changing functions without a visible owner or sender check, with line numbers. Not an audit; misses most real bugs.

Finds the top-ROI accounts on Hyperliquid's public perp leaderboard (week, month or all-time window, with a minimum account size) and reads their live open positions from Hyperliquid's public info API, then sums net long/short USD exposure per coin. Shows where the best-performing Hyperliquid traders are positioned now. Hyperliquid perps only, not spot wallets on other chains; not investment advic

Looks at the first Solana slot where a token mint appears (public RPC): if its history fits in 8 pages of signatures, it counts the distinct fee payers of the transactions in that slot. Several different fee payers in one slot is a bundle-sniping signal, not proof. Mints with longer history return HISTORY_TOO_LONG; this tool cannot see Jito bundle metadata.

Compares the runtime bytecode of two Ethereum contracts you name: the share of shared PUSH4 function selectors (Jaccard) and the cosine similarity of their opcode frequencies, combined into one 0 to 1 score with a SIMILAR, PARTIAL or DIFFERENT label. It compares two addresses only; it has no database of known scam or exploit templates, so it cannot say a contract is a known clone.

Contracts created by a deployer wallet on Ethereum, from its most recent 50 transactions (Blockscout public API): creation hash, time and new contract address. Only that recent page is read, so older launches are missing. No rug-pull or abandoned-pool judgement: liquidity history is not included.

Trap flags for an EVM token (Ethereum, BSC, Base, Arbitrum, Polygon) from GoPlus token security, which simulates buy and sell: honeypot result, buy/sell/transfer tax, blacklist, pausable transfers, hidden owner, mintable, anti-whale and slippage modifiers. The tool reports GoPlus's flags; it runs no simulation of its own.

For one perpetual on Hyperliquid (public info API): mark price, open interest (in coins and USD), funding rate, and estimated liquidation prices for longs and shorts at 5x, 10x, 20x and 50x. The estimates are formula-based from the mark price and the asset's maximum leverage, not observed positions: the public API does not show which price each trader is liquidated at.