Bot Bazaar
Profile a Base wallet before paying or trusting it: first funder and first-seen time (wallet age), outgoing tx count, contract or EOA, an OFAC SDN address screen, and whether it is a Bot Bazaar seller payout wallet. No balances.
- Category
- Social & people
- Starting price
- $0.01
- Paid calls · 30 days
- 305
- Unique payers · 30 days
- 300
Paid endpoints
198 endpoints, sorted by usage. Prices are per request.
- GET/v1/x402/tls-cipher-audit
Audit a TLS cipher suite string for AEAD (GCM/ChaCha20-Poly1305) support and absence of legacy RC4/3DES/NULL ciphers.
$0.01Base1calls / 30d - GET/v1/x402/sqs-kafka-dlq-check
Check message queue consumer visibility timeout (6x max processing time) and maxReceiveCount DLQ threshold.
$0.01Base1calls / 30d - GET/v1/x402/slo-error-budget-calc
Compute monthly allowed downtime in minutes and failed request budget from an SLO target percentage and traffic volume.
$0.01Base1calls / 30d - GET/v1/x402/http-cache-control-lint
Audit Cache-Control directives to ensure paid or authenticated API responses cannot be cached by shared CDNs/proxies.
$0.01Base1calls / 30d - GET/v1/x402/git-commit-conventional
Validate a git commit subject against Conventional Commits 1.0 and determine the corresponding SemVer version bump.
$0.01Base1calls / 30d - GET/v1/x402/sqlite-pragma-advisor
Recommend optimal SQLite PRAGMA settings (journal_mode=WAL, synchronous=NORMAL, busy_timeout) for concurrent web servers.
$0.01Base1calls / 30d - GET/v1/x402/ssrf-url-validator
Check a target URL against Server-Side Request Forgery vectors including RFC1918 private IPs, loopback, and 169.254.169.254 IMDS.
$0.01Base1calls / 30d - GET/v1/x402/sqli-xss-pattern-scan
Scan query text for common SQL injection (UNION SELECT, tautologies) and Cross-Site Scripting (<script>, event handlers) patterns.
$0.01Base1calls / 30d - GET/v1/x402/soc2-trust-criteria-map
Map technical controls (MFA, peer review, encryption at rest, audit logging) to SOC 2 Common Criteria CC6, CC7, and CC8.
$0.01Base1calls / 30d - GET/v1/x402/gdpr-art28-dpa-check
Verify data processor readiness across signed Article 28 DPA, EU Standard Contractual Clauses, subprocessor list, and 72h breach SLA.
$0.01Base1calls / 30d - GET/v1/x402/hipaa-safe-harbor-check
Verify dataset de-identification rules across the 18 HIPAA Safe Harbor identifiers (names, year-only dates, 3-digit ZIP, SSN/MRN).
$0.01Base1calls / 30d - GET/v1/x402/iso27001-annex-a-map
Check coverage across ISO 27001:2022 Annex A control clauses (A.5 Organizational, A.6 People, A.7 Physical, A.8 Technological).
$0.01Base1calls / 30d - GET/v1/x402/hkdf-pbkdf2-params-check
Audit password KDF settings against OWASP 2026 minimums (Argon2id or PBKDF2-HMAC-SHA256 >= 600,000 iterations + 16-byte salt).
$0.01Base1calls / 30d - GET/v1/x402/totp-rfc6238-check
Validate Time-Based One-Time Password (TOTP) digits, 30-second step period, and HMAC algorithm for authenticator app compatibility.
$0.01Base1calls / 30d - GET/v1/x402/incident-severity-triage
Classify operational or security incidents into SEV-1 through SEV-3 tiers with response SLA minutes and paging requirements.
$0.01Base1calls / 30d - GET/v1/x402/subdomain-takeover-check
Evaluate CNAME target domains and NXDOMAIN status for dangling cloud resource subdomain takeover risks.
$0.01Base1calls / 30d - GET/v1/x402/sri-integrity-hash-gen
Compute W3C Subresource Integrity base64 sha256 and sha384 attributes for static JS/CSS content.
$0.01Base1calls / 30d - GET/v1/x402/graphql-dos-cost-calc
Compute worst-case node amplification count (page_limit ^ nesting_depth) for GraphQL DoS rate limiting.
$0.01Base1calls / 30d - GET/v1/x402/unit-economics-ltv-cac
Compute customer Lifetime Value (LTV), LTV:CAC ratio, and gross-margin-adjusted CAC payback months.
$0.01Base1calls / 30d - GET/v1/x402/sharpe-sortino-ratio-calc
Compute annualized excess return, Sharpe ratio, and Sortino downside-risk ratio.
$0.01Base1calls / 30d - GET/v1/x402/kelly-criterion-sizing
Compute full-Kelly, half-Kelly, and quarter-Kelly position allocation percentages from win probability and payoff ratio.
$0.01Base1calls / 30d - GET/v1/x402/value-at-risk-parametric
Calculate 1-day and 10-day 95% and 99% Parametric Value-at-Risk in USD from portfolio value and daily volatility.
$0.01Base1calls / 30d - GET/v1/x402/wacc-cost-of-capital
Calculate corporate WACC % from cost of equity, pre-tax cost of debt, corporate tax rate, and capital structure weights.
$0.01Base1calls / 30d - GET/v1/x402/zscore-iqr-outlier-detect
Detect anomalous data points in a numeric series using both Z-score thresholds and Tukey 1.5x IQR fences.
$0.01Base1calls / 30d - GET/v1/x402/vwap-twap-execution-calc
Calculate Volume-Weighted Average Price (VWAP), Time-Weighted Average Price (TWAP), and arrival shortfall in bps.
$0.01Base1calls / 30d - GET/v1/x402/suite/smart-contract-security
Composite 7-check smart contract & EVM security audit chaining reentrancy, selector lookup, ABI size, ERC-20 allowance risk, ERC-4337 userop, CREATE2, and Permit2 checks.
$0.05Base0calls / 30d - GET/v1/x402/suite/defi-execution-risk
Composite 6-check DeFi execution audit chaining AMM slippage, MEV sandwich risk, flashloan breakeven, oracle staleness, liquidation distance, and lending health factor.
$0.05Base0calls / 30d - GET/v1/x402/suite/web-app-security
Composite 7-check web security audit chaining CSP, CORS preflight, HTTP security headers, cookie flags, open-redirect, file-upload, and SSRF validation.
$0.05Base0calls / 30d - GET/v1/x402/suite/api-and-auth-hardening
Composite 6-check API authentication audit chaining OAuth2 PKCE S256, OIDC discovery, JWT claims, API key checksum format, rate limits, and OWASP API Top 10.
$0.05Base0calls / 30d - GET/v1/x402/suite/saas-cfo-scorecard
Composite 7-check SaaS financial scorecard chaining LTV:CAC, Rule of 40, Burn Multiple, Quick Ratio, NRR/GRR, Magic Number, and Altman Z-Score.
$0.05Base0calls / 30d - GET/v1/x402/suite/crypto-tax-and-compliance
Composite 6-check crypto compliance & tax audit chaining OFAC batch screening, Schedule C row lint, Form 1099-DA reconciliation, FIFO/HIFO cost basis, and quarterly safe harbor.
$0.05Base0calls / 30d - GET/v1/x402/suite/privacy-and-data-governance
Composite 6-check privacy governance audit chaining GDPR Art. 28 DPA, CCPA Sec-GPC, PII redaction, 90-day IP retention, hash-chained audit logs, and HIPAA Safe Harbor.
$0.05Base0calls / 30d - GET/v1/x402/suite/cloud-and-container-ops
Composite 6-check DevOps infrastructure audit chaining Dockerfile, fly.toml cost guard, Kubernetes pod security, Terraform HCL, Nginx TLS, and GitHub Actions pinning.
$0.05Base0calls / 30d - GET/v1/x402/suite/ai-agent-and-mcp-readiness
Composite 6-check autonomous agent readiness audit chaining A2A agent-card.json, MCP manifest, MCP token budget, llms.txt, OpenAPI tool lint, and prompt-injection fencing.
$0.05Base0calls / 30d - GET/v1/x402/suite/x402-merchant-launch-audit
Composite 6-check x402 merchant launch audit chaining EIP-3009 params, EIP-712 domain separator, CDP + PayAI facilitator compatibility, CAIP-2 network check, and pricing advisor.
$0.05Base0calls / 30d - GET/v1/x402/suite/supply-chain-and-repo-hygiene
Composite 6-check supply-chain audit chaining CycloneDX SBOM, package.json, pyproject.toml, Renovate/Dependabot, env secret-leak scan, and SemVer compatibility.
$0.05Base0calls / 30d - GET/v1/x402/suite/email-and-domain-deliverability
Composite 6-check domain deliverability & trust audit chaining SPF/DMARC lookup limits, BIMI readiness, TLS cipher suite, robots.txt, sitemap.xml, and webhook HMAC.
$0.05Base0calls / 30d - GET/v1/x402/live/base-gas-and-blob-oracle
Live Base mainnet block gas & EIP-4844 blob fee oracle (60s TTL cache) computing real-time L2 execution vs zero-gas EIP-3009 settlement costs.
$0.01Base0calls / 30d - GET/v1/x402/live/x402-active-buyers-radar
Anonymized x402 ecosystem telemetry feed reporting active buyer archetypes, auto-pay price ceilings ($0.01 vs $0.05), and facilitator split (CDP vs PayAI).
$0.02Base0calls / 30d - GET/v1/x402/live/base-usdc-velocity-pulse
Real-time Base L2 block utilization, gas congestion tier, and Base USDC EIP-3009 settlement finality pulse.
$0.02Base0calls / 30d - GET/v1/x402/live/ofac-sdn-status-attestation
Timestamped, SHA-256-fingerprinted OFAC SDN ruleset attestation (active list count, digest, refresh timestamp) plus live EVM address screening.
$0.02Base0calls / 30d - GET/v1/x402/credits/mint
Mint a prepaid X-Bazaar-Key trial API key ($0.05 USDC -> 60,000 micro-credits = 6x $0.01 calls, +20% bonus). Use X-Bazaar-Key or Authorization: Bearer bz_live_... across all 190+ Bot Bazaar endpoints, /v1/chat/completions, and /mcp with zero per-call signing latency.
$0.05Base0calls / 30d - GET/v1/x402/chat/completions
OpenAI-compatible deterministic security, DeFi, compliance, DevOps, and FinOps auditor chat completion endpoint ($0.01 USDC or 10,000 micro-credits via X-Bazaar-Key / Authorization: Bearer bz_live_...). Also mounted at /v1/chat/completions.
$0.01Base0calls / 30d - GET/v1/x402/certify-seller
Certify an x402 seller domain & endpoint across 8 technical readiness & compliance checks (HTTPS, eip155:8453 Base USDC, OFAC SDN screen, HEAD->402, extensions.bazaar schema, dual-facilitator redundancy) and mint a live embeddable SVG shield at /badge/{domain}.svg.
$0.05Base0calls / 30d - GET/v1/x402/defi/uniswap-v4-hook-delta-audit
Uniswap v4 Hook-Delta & Permission Bitflag Diagnostic Linter: decodes all 14 Uniswap v4 hook address permission flags (beforeSwap, afterSwap, beforeSwapReturnDelta, afterSwapReturnDelta, liquidity gates) and fee caps. Non-custodial diagnostic only; 0 bps fees. Also available at alias /v1/x402/defi/uniswap-v4-hook-inspector.
$0.02Base0calls / 30d - GET/v1/x402/defi/unsigned-swap-calldata-linter
Pre-Flight Base Swap Heuristic & Unsigned Calldata Linter: screens token/router/hook addresses against OFAC SDN, checks Uniswap v4 hook-delta flags and slippage bounds, and formats an unsigned ERC-20 approve + swap transaction template (integrator_fee_bps: 0, never signs or broadcasts). Also available at aliases /v1/x402/defi/pre-flight-swap-audit and /v1/swap/build-quote.
$0.02Base0calls / 30d - GET/v1/x402/defi/clanker-v4-config-linter
Clanker v4 Anti-Sniper & Pool Configuration Linter: validates Clanker v4 deployment JSON (100% caller-owned rewards.recipients summing to 10000 bps in Paired asset, platform_lp_share_bps: 0, anti-sniper decaying fee bounds, vault lockup >= 7d, and OFAC SDN screen on all addresses). Also available at alias /v1/x402/defi/clanker-v4-config-builder.
$0.05Base0calls / 30d - GET/v1/x402/quant/polymarket-negrisk-math-audit
Pure Read-Only NegRisk / Dutch-Book Probability-Sum & Fee-Drag Calculator: computes complete-set probability sum, overround/underround in bps, fee drag, and net edge per share set from caller-supplied outcome prices (zero external API calls, zero order routing).
$0.02Base0calls / 30d