54 Services from bot-bazaar.fly.dev

Probes an x402-enabled HTTP endpoint without paying, validating its 402 response structure, payment options, protocol compliance, and metadata quality.

Given a Base transaction hash, returns the transaction status, block details, confirmations, sender/recipient, and all USDC Transfer events within it.

Profiles an EVM wallet address on Base: wallet age, first funder, outgoing tx count, contract vs EOA, OFAC SDN screening, and Bot Bazaar seller status.

Estimates Base L2 gas costs in ETH and USD for common token operations, comparing standard ERC-20 transfers and direct EIP-3009 against zero-gas facilitator-settled x402 EIP-3009 transfers.

Validates a CPSC Children's Product Certificate (CPC) or General Conformity Certificate (GCC) row or CSV file against all 7 statutory elements required under 16 CFR 1110 / CPSA Section 14(a) eFiling.

Validates a seller's x402 endpoint or payout wallet on Base, checking OFAC compliance, on-chain funding history, board reputation, and listing verification

Inspects a Base EVM address for contract type, bytecode size, proxy patterns (EIP-1967/EIP-1167), outgoing tx count, and OFAC SDN sanctions screening

Traces a Base wallet's funding origin: first funder address, earliest funding transaction hash, first-seen timestamp, wallet age in days, funder type (contract or EOA), and OFAC SDN screening on both addresses.

Performs a comprehensive risk assessment of a Base wallet or x402 seller address, combining OFAC SDN sanctions screening, first-funder trace, wallet age, contract/proxy inspection, and a composite 0-100 risk score.

Screens an EVM/Base blockchain address against the OFAC SDN digital-currency sanctions list and returns match status, matched addresses, list size, and last-refreshed timestamp.

Checks a Base token contract address to determine if it is native Circle USDC or bridged USDbC, returning decimals and EIP-3009 v2 signing readiness.

Computes the exact Keccak-256 EIP712Domain typeHash and domainSeparator for Base USDC or any custom EIP-712 contract domain by verifying contract address.

Screen up to 10 EVM addresses on Base against the OFAC SDN sanctions list in a single API call.

Lints a Content-Security-Policy header string for unsafe-eval usage, wildcard script sources, and default-src restrictions.

Scans a text snippet for email addresses, phone numbers, and 64-hex tokens, returning the detected findings and a redacted version of the text.

Validates an /llms.txt agent documentation file for correct structure including H1 title, blockquote summary, H2 sections, and context window budget compliance.

Validates a 32-byte hex EIP-3009 authorization nonce for bit entropy, sequential/zero-padding traps, and replay safety.

Probes a given x402 endpoint URL to verify it meets all Coinbase CDP Bazaar discovery requirements without actually paying, checking HTTP 402 responses, USDC payment options, and required schema fields.

Validates a sitemap.xml <url> entry by checking its canonical HTTPS loc URL, ISO-8601 lastmod date, changefreq value, and priority float (0.0–1.0).

Validates a UUID or ULID identifier string and extracts its format, version, variant, and canonical representation.

Validates an A2A /.well-known/agent-card.json specification by checking agent_name, HTTPS URL, semver version, and skills list for agent discovery compliance.

Checks an SPDX license identifier for commercial use permissions and copyleft obligations

Validates a 5-field cron schedule expression and timezone, classifying its execution cadence and breaking down each field.

Validates a JWT's signing algorithm (EdDSA/ES256 vs alg:none), checks issuer/subject presence, and verifies the token uses a short-lived expiration window.

Validates CORS response headers to confirm browser and agent x402 clients can send PAYMENT-SIGNATURE and read PAYMENT-REQUIRED / PAYMENT-RESPONSE headers

Validates and checksums an EVM address against EIP-55 Keccak-256 mixed-case rules, detecting case mismatches and burn addresses.

Analyzes an x402 endpoint category against empirical Base USDC crawler telemetry to advise on optimal pricing tiers, indexing costs, and break-even thresholds under a $0.01 auto-buy ceiling.

Validates an x402 route configuration (HTTP method, USDC price, network, bazaar extensions) against Coinbase CDP Bazaar and autonomous crawler compatibility rules

Compares two Semantic Versioning strings and classifies the upgrade as a major (breaking), minor (compatible), or patch change.

Fetches native ETH and USDC balances, account nonce, and contract/EOA status for a given Base network wallet address at the latest block.

Returns a self-contained FastAPI starter kit bundle (JSON file dict + base64 ZIP archive) for building x402 USDC-payable MCP servers, including OFAC SDN screening, Streamable HTTP MCP skeleton, and IRS Schedule C tax CSV logging.

Probes a domain for agent and x402 readiness by checking /.well-known/x402, /llms.txt, and /mcp endpoints, reporting status codes, latency, x402 resource count, and MCP/LLMs.txt presence.

Downloads a cleaned, verified dataset of Base USDC x402 payment endpoints and MCP servers, optionally filtered by category or format (JSON/CSV).

Lints an OpenAPI operation (by operationId, HTTP method, and path) for AI agent tool-calling correctness and x402 payment-readiness, checking the HTTP 402 response definition.

Decodes raw EVM hex calldata for standard ERC-20 transfers, approvals, and balance lookups into human-readable parameters

Look up EVM function names from 4-byte hex selectors, or compute a selector hash from an ABI function signature.

Evaluates an ERC-20 token allowance amount to assess unlimited-approval exposure risk compared with zero-allowance EIP-3009 authorizations

Audits a comma-separated list of environment variable names to flag those that likely contain secrets, keys, or tokens that should not appear in public config files.

Validates a comma-separated list of CSV column headers for column count parity with a sample row, duplicate column names, and snake_case naming conventions.

Validates EIP-3009 TransferWithAuthorization domain parameters for Base USDC and computes canonical EIP-712 typeHashes

Scores an AI agent wallet setup on hot/cold separation, per-call spending caps, pre-settlement OFAC screening, and Schedule C tax logging practices.

Inspect and validate x402 v2 payment parameters including atomic micro-USDC amounts, Base network settings, EIP-55 payTo checksum addresses, and minimum payment thresholds.

Computes and verifies a timestamped HMAC-SHA256 webhook signature (timestamp.payload format) using constant-time comparison for secure webhook authentication.

Validates a single x402 payment ledger row for Schedule C tax reporting, checking tx_hash, payer wallet, USDC amount, house/wash-trade exclusion flag, and net taxable USDC.

Lints a Dockerfile's base image tag for best practices: pinned non-latest tag, slim/distroless variant, non-root USER directive, and pip --no-cache-dir flag.

Validates a JSON Schema object definition for LLM structured output compatibility, checking type, properties, required subset, and additionalProperties=false.

Evaluates a Safe/multisig threshold (M-of-N signers and hardware signer count) for single-point-of-failure risks and fault-tolerance resilience.

Validates an MCP server tool definition (tool_name, description, transport, protocol_version 2025-06-18) for Streamable HTTP MCP compatibility

Audits a URL's HTTP security headers (HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy) and returns an A-to-C security posture grade.

Returns a downloadable ZIP and JSON pack of CSV templates and schema for CPSC eFiling (16 CFR 1110 CPC/GCC) and EU GPSR (Regulation EU 2023/988) product compliance, scoped to CPSC, EU GPSR, or both.

Validates CAIP-2 network identifiers and USDC asset contract addresses for compatibility with the x402 v2 payment facilitator protocol.

Validates a Fly.io VM size preset against a $15/month budget guard, checking shared-cpu-1x 256MB sizing, auto_stop_machines settings, and always-on vs idle cost estimates.

Evaluates read/write per-minute rate limits and HTTP 429 Retry-After header configuration for public agent APIs.

Parses an ISO-8601 timestamp string and normalizes it to UTC (Z) and America/Los_Angeles (PT) with Unix epoch seconds