Roundhouse AI

URL Safety

14 live x402 APIs for AI agents: web access, token safety, speech-to-text, chain data, SEO, search, email, video. Pay per call in USDC on Base, no API key.

InferenceLiveeip155:8453Exactvia cdp
https://safe.cyberwarex.com/check
PhishingUrlSecurityTyposquatSafety
Calls · 30d
20↑ 73%
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 15 snapshots so far.
$10.61
Verified settled volume
1,431 settlements proven x402 by their on-chain EIP-3009 marker.
$0.0030
Listed price
As published in the catalog. Always read the live 402 before paying.
21
Calls · 30d
Upstream's own call count for this endpoint, not ours.
2
Unique payers · 30d
Last called 2026-09-24 07:36Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "trust": "https://cyberwarex.com/trust",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2",
      "amount": "3000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "catalog": {
    "docs": "https://cyberwarex.com/llms.txt",
    "services": "https://cyberwarex.com/.well-known/x402"
  },
  "resource": {
    "url": "https://safe.cyberwarex.com/check",
    "tags": [
      "phishing",
      "url",
      "security",
      "typosquat",
      "safety"
    ],
    "iconUrl": "https://cyberwarex.com/assets/icon.png",
    "mimeType": "application/json",
    "description": "Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.",
    "serviceName": "URL Safety"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "url": "https://coinbase.com.secure-login.xyz/verify"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "url": "https://coinbase.com.secure-login.xyz/verify",
            "host": "coinbase.com.secure-login.xyz",
            "labels": [
              "brand_impersonation",
              "suspicious_tld"
            ],
            "source": "heuristics + RDAP",
            "reasons": [
              "'coinbase' appears in the host but the domain is secure-login.xyz, not coinbase.com"
            ],
            "verdict": "DANGEROUS",
            "risk_score": 80,
            "domain_age_days": 4,
            "registrable_domain": "secure-login.xyz"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET",
                  "HEAD",
                  "DELETE"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "url"
                ],
                "properties": {
                  "url": {
                    "type": "string",
                    "description": "The URL to check (a bare domain is accepted too)."
                  }
                },
                "additionalProperties": false
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object",
                "properties": {
                  "url": {
                    "type": "string"
                  },
                  "host": {
                    "type": "string"
                  },
                  "labels": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "reasons": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "signals": {
                    "type": "object"
                  },
                  "verdict": {
                    "type": "string",
                    "description": "SAFE | SUSPICIOUS | DANGEROUS."
                  },
                  "risk_score": {
                    "type": "integer",
                    "description": "0 (clean) to 100."
                  },
                  "domain_age_days": {
                    "type": [
                      "integer",
                      "null"
                    ],
                    "description": "best-effort via RDAP."
                  },
                  "registrable_domain": {
                    "type": "string"
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "free_trial": {
    "how": "repeat this exact request with header `X-Free-Trial: 1` (or `?free_trial=1`) and no payment; you get the real result",
    "terms": "per client IP per UTC day; automated monitors/crawlers/indexers are excluded; shared daily pool per service",
    "endpoints": [
      "check",
      "domain"
    ],
    "calls_per_ip_per_day": 3
  },
  "quickstart": {
    "docs": "https://cyberwarex.com/llms.txt",
    "node": "npm i x402-fetch viem | import {wrapFetchWithPayment} from 'x402-fetch'; import {privateKeyToAccount} from 'viem/accounts'; const f = wrapFetchWithPayment(fetch, privateKeyToAccount(PK)); const r = await f(URL)",
    "python": "pip install x402 eth-account | from x402.clients.requests import x402_requests; from eth_account import Account; s = x402_requests(Account.from_key(PK)); r = s.get(URL)",
    "pay_with": "USDC on Base (eip155:8453); `accepts[0].amount` is in 6-decimal units (3000 = $0.003)",
    "prepaid_credits": "POST /subscribe {\"usd\": 5} on any cyberwarex host -> X-Subscription-Key (+10% bonus, one key works suite-wide, no per-call signing)"
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.003USDC≈ $0.003 USD
on Base · exact scheme

Pay 0.003 USDC on Base to 0x058D…921B2. The signed payment is good for 5 minutes.

Paid to
0x058D…921B2
USD Coin contract
0x8335…02913
Payment window
5 minutes
As published
3000 smallest units
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2",
    "amount": "3000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "url": "https://coinbase.com.secure-login.xyz/verify"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "url": "https://coinbase.com.secure-login.xyz/verify",
          "host": "coinbase.com.secure-login.xyz",
          "labels": [
            "brand_impersonation",
            "suspicious_tld"
          ],
          "source": "heuristics + RDAP",
          "reasons": [
            "'coinbase' appears in the host but the domain is secure-login.xyz, not coinbase.com"
          ],
          "verdict": "DANGEROUS",
          "risk_score": 80,
          "domain_age_days": 4,
          "registrable_domain": "secure-login.xyz"
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET",
                "HEAD",
                "DELETE"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "required": [
                "url"
              ],
              "properties": {
                "url": {
                  "type": "string",
                  "description": "The URL to check (a bare domain is accepted too)."
                }
              },
              "additionalProperties": false
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object",
              "properties": {
                "url": {
                  "type": "string"
                },
                "host": {
                  "type": "string"
                },
                "labels": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  }
                },
                "reasons": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  }
                },
                "signals": {
                  "type": "object"
                },
                "verdict": {
                  "type": "string",
                  "description": "SAFE | SUSPICIOUS | DANGEROUS."
                },
                "risk_score": {
                  "type": "integer",
                  "description": "0 (clean) to 100."
                },
                "domain_age_days": {
                  "type": [
                    "integer",
                    "null"
                  ],
                  "description": "best-effort via RDAP."
                },
                "registrable_domain": {
                  "type": "string"
                }
              }
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-09-24 07:36Z
Last indexed by Roundhouse
2026-09-24 14:50Z
Last enriched (probe, favicon, geo)
2026-09-23 22:15Z
x402 version
2
Max timeout
300s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 15 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service URL Safety and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=URL%20Safety'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://safe.cyberwarex.com/check, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402,
or use an organization key from https://roundhouseai.io/dashboard/team.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.