Explore APIs

When does this domain's TLS certificate expire, and is renewal stuck? Input: ?domain=example.com. Returns issuer, not_after, days_left, % lifetime used, renewal cadence, a renewal-stall flag (from Certificate Transparency logs via Cert Spotter) and a live HTTPS handshake/status probe. $0.01 USDC on Base. Certificate details come from CT logs, not the live served cert. For cert+DNS+expiry in one ca

Has a ransomware group claimed this company or vendor? Input: ?q=acme.com or ?q=Acme Corp (domain or company name). Returns found, claim_count and each claim's group, claimed/first-seen dates, country, sector and source with license. $0.01 USDC on Base. Useful for vendor due diligence. These are unverified claims from criminal leak sites, not proof of a breach. For many domains at once use /v1/bat

Register a webhook endpoint

List the supported units and their metadata (abbreviation, measure, system, singular/plural names), optionally filtered to a single measure — a discovery endpoint for choosing valid `from`/`to` values.

Email validation — Syntax check + live MX/deliverability + disposable-domain flag.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Evaluate a mathematical expression with optional named variables — arithmetic, comparison and logic operators plus functions like sqrt, abs, min, max, sin, cos, log, floor, round, etc. A syntax error, an undefined variable, or a non-finite result is a clean 400. The factorial operator is disabled for safety.

Takes one email address and tells you whether it can actually receive mail. Returns a verdict of valid, invalid, or risky, splits the address into username and domain, and flags free providers and role accounts like admin@ or support@. One address per call.

Retrieve change alerts for monitored URLs. Returns list of detected changes with timestamps.

Transform JSON records or CSV uploads with typed schemas and Polars SQL. Filter, aggregate, join and reshape data. Pricing depends on input size and SQL statement count; the 402 response contains the exact USDC amount.

Convert text into a URL-safe slug: transliterate accents, apply a locale character map, and join with a separator.

Look up a domain's RDAP registration data — registrar, status, creation/expiry/update dates, nameservers and DNSSEC. Unregistered domains return found:false.

Compute the determinant of a square matrix via Gaussian elimination with partial pivoting. A non-square, ragged or empty matrix is a clean 400; a singular matrix simply returns 0.

IP geolocation, ASN and reputation lookup: VPN/Tor proxy, hosting and botnet C2 flags with an abuse score, for any IPv4 or IPv6 address.

Current public Lever job openings, counts by team, department, location, commitment and workplace type. Optional since ISO timestamp filters openings by creation date. No account or API key required.

Pay $0.01 USDC as a small donation or a simple live x402 integration test. Optional name and message are stored publicly and shown on GET /donations. Network: Base Mainnet. Each request records one donation and returns public feed links.

Detect whether an email address uses a disposable / throwaway domain (Mailinator, TempMail, etc.). Classifies the INPUT address. Static list match, no external call.

Balance an equation such as "H2 + O2 -> H2O" into the smallest whole-number coefficients using exact rational linear algebra. Equations that cannot be balanced with positive coefficients are clean 400s.

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is se

Concierge reader: send a public URL plus the JSON template you want; get that page's data back filled into your template. Free email field type (syntax, MX, disposable, role; no SMTP probe). Bad/private url, format >8KB, slow or unreachable page -> 400 charged:false before payment.

Validate an email address: format check plus a live MX record lookup on its domain

Pre-share leak check ($0.005 USDC via x402). Scan text or an https text URL for your own terms (plain list, or salted-hash list sent per call, never stored) plus leak-shaped strings: emails, coordinates, IPs, AWS/GitHub/Slack/sk- keys, private keys, JWTs. Binary URLs are listed as unscanned. Max 10 MB, https only. Returns JSON hits with line numbers. A clean scan is not a clearance.

Fetch a public https URL, compute SHA-256 of the response body, and report whether it changed vs a prior sha256/etag ($0.01 USDC via x402). Sticky: store sha256 and call again later. Optional previous_sha256, previous_etag, include_body_if_changed. https only — http, file, data, localhost, and private IPs rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Returns JSON { url, final_url, cont

Convert a public https RSS 2.0 or Atom feed URL to tidy markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Optional max_items (default 20, cap 50). Returns JSON { url, final_url, feed_title?, feed_link?, format, items, markdown, item_count, warnings }.

Convert HTML to tidy markdown ($0.005 USDC via x402). Pass html (string) and/or url (public https to fetch). At least one required; if both, prefers html and warns. URL fetches use the same allowlist as WELL-002 (https only — http/file/data/localhost/private IPs rejected; 1 MB body, ~10s timeout, max 5 redirects). Returns JSON { source, url?, final_url?, content_type?, markdown, warnings }.

Convert a public https URL that returns JSON to tidy markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Requires JSON content-type or a parseable JSON body. Returns JSON { url, final_url, content_type, markdown, warnings }.

Convert a public https URL to markdown ($0.005 USDC via x402). https only — http, file, data, localhost, and private IPs are rejected. Caps: 1 MB body, ~10s timeout, max 5 redirects. Returns JSON { url, final_url, title?, content_type, markdown, warnings }.

Extract tables from a PDF ($0.01 USDC via x402). Pass pdf_base64 or a https pdf_url. Optional schema maps headers. Optional max_pages (1-10). Returns JSON { pages, tables: [{ page, headers, rows }], warnings }. Text PDFs are parsed in-worker; scans require HOSTED_PARSER_URL.

Converts a local time in one IANA zone to up to 20 target zones. Returns local time, UTC offset, abbreviation and DST flag per target, and flags nonexistent or ambiguous local times at DST transitions.

Convert a free-form address or place name into ranked coordinates with a structured, normalized address. Optionally bias by country and language.