npm package risk
relay402.georgespring.workers.dev · 30 paid endpoints · listed 2026-10-27
website trust report from a direct HTTPS fetch: status, response headers, HSTS, CSP and clickjacking protection signals.
livelast check 15 h ago
100%valid x402 answers, 72 h
$0.816USDC received on Base, 7 days
2distinct payers, 7 days
55.1score (0-100)
Paid endpoints
| Method | Endpoint | Price | Networks |
|---|---|---|---|
| GET | relay402.georgespring.workers.dev/api/public-holidays Official public holidays for any of 110+ countries and a given year: date, English and local name, nationwide flag and holiday type. For scheduling, logistics, | $0.001 | Base |
| GET | relay402.georgespring.workers.dev/api/robots-check Checks whether a given user agent may fetch a given path on a host, per the site's robots.txt (specific-agent groups, wildcard rules, Allow/Disallow longest-mat | $0.001 | Base |
| GET | relay402.georgespring.workers.dev/api/wayback-snapshot Finds the closest archived snapshot of any public URL in the Internet Archive Wayback Machine. Returns the snapshot URL, capture timestamp and original HTTP sta | $0.001 | Base |
| GET | relay402.georgespring.workers.dev/api/security-cve-lookup CVE lookup for agents: checks OSV.dev for a CVE identifier and returns severity, summary, references and a normalized risk report. | $0.003 | Base |
| GET | relay402.georgespring.workers.dev/api/web-dns-lookup DNS-over-HTTPS lookup for common record types, normalized into a risk report for web and email agents. | $0.003 | Base |
| GET | relay402.georgespring.workers.dev/api/agent-tool-call-diff diff scan for planned tool calls: compares before and after snippets and flags destructive, network or secret-related actions. | $0.005 | Base |
| GET | relay402.georgespring.workers.dev/api/web-dmarc-check DMARC check for a domain: finds the TXT record, policy mode and aggregate-reporting signal for email trust decisions. | $0.005 | Base |
| GET | relay402.georgespring.workers.dev/api/web-email-deliverability email deliverability and spoofing check from DNS: MX, SPF and DMARC records with concise risk flags. | $0.005 | Base |
| GET | relay402.georgespring.workers.dev/api/web-ssl-cert-info SSL certificate signal check using public Certificate Transparency records, including issuer and expiry risk where available. | $0.005 | Base |
| GET | relay402.georgespring.workers.dev/api/product-barcode Resolves an EAN/UPC/GTIN barcode (8-14 digits) to product data: name, brands, quantity, categories, Nutri-Score and image, from the Open Food Facts database (3M | $0.008 | Base |
| GET | relay402.georgespring.workers.dev/api/npm-package-check Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and compu | $0.01 | Base |
| GET | relay402.georgespring.workers.dev/api/package-vulns Known-vulnerability check for a software dependency before installing it: queries the OSV.dev database (Google Open Source Vulnerabilities) for npm, PyPI, Go, M | $0.01 | Base |
| GET | relay402.georgespring.workers.dev/api/security-github-repo-health public GitHub repository health check: archived status, recency, license, stars, forks, issues and risk flags for dependency or vendor review. | $0.01 | Base |
| GET | relay402.georgespring.workers.dev/api/web-domain-risk domain risk report from DNS signals: address records, nameservers, MX records and high-abuse TLD heuristics. | $0.01 | Base |
| GET | relay402.georgespring.workers.dev/api/company-jobs Current job openings for a given company: titles, locations, departments, posting dates, application URLs. Sourced from the company's official careers system (G | $0.015 | Base |
| GET | relay402.georgespring.workers.dev/api/security-npm-risk npm package risk report for coding agents: registry metadata, weekly downloads, license, repository, deprecation and install script risk signals. | $0.015 | Base |
| GET | relay402.georgespring.workers.dev/api/security-pypi-risk PyPI package risk report for agents: package metadata, latest release recency, license, project links, yanked release and supply-chain risk flags. | $0.015 | Base |
| GET | relay402.georgespring.workers.dev/api/agent-eval-case-generate deterministic eval-case generator for agents: creates happy-path, ambiguous-input and adversarial-instruction cases from a goal. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/agent-mcp-tool-risk-score MCP tool risk scorer for agents: scans a tool JSON description for shell, filesystem, network and secret-access capabilities. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/agent-trace-brief trace brief for agent runs: scans trace JSON or log text for failures, timeouts and auth/payment errors and returns a compact risk report. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/security-db-migration-risk database migration risk scan for SQL migrations: flags destructive statements, unbounded updates and risky NOT NULL column additions. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/security-deploy-config-risk deployment configuration risk scan for YAML, Docker Compose or Kubernetes snippets: flags privileged containers, latest tags, host networking and plaintext secr | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/security-prompt-injection-risk prompt-injection risk scan: detects instruction override, tool abuse and secret exfiltration phrases before an agent consumes untrusted text. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/security-secrets-check local secret pattern scan for pasted files or diffs: detects common private keys, API keys, GitHub tokens and EVM private keys without sending data to an LLM. | $0.02 | Base |
| GET | relay402.georgespring.workers.dev/api/compose-email-trust-report composed email trust report from MX, SPF and DMARC DNS records for outreach, onboarding and anti-spoofing agents. | $0.03 | Base |
| GET | relay402.georgespring.workers.dev/api/web-website-trust-report website trust report from a direct HTTPS fetch: status, response headers, HSTS, CSP and clickjacking protection signals. | $0.03 | Base |
| GET | relay402.georgespring.workers.dev/api/compose-domain-threat-report composed domain threat report from DNS infrastructure signals and high-abuse TLD heuristics for agent browsing decisions. | $0.04 | Base |
| GET | relay402.georgespring.workers.dev/api/compose-repo-health-brief repository health brief from a GitHub repo slug or pasted repository notes, returning concise risk flags for agent planning. | $0.04 | Base |
| GET | relay402.georgespring.workers.dev/api/compose-agent-prelaunch-audit prelaunch audit for an agent spec or checklist: flags obvious launch risks around secrets, unsafe tools, missing evals and rate limits. | $0.06 | Base |
| GET | relay402.georgespring.workers.dev/api/sanctions-screen Screens a person or entity name against US OFAC sanctions lists: SDN (Specially Designated Nationals incl. aliases) and the Consolidated non-SDN list, refreshed | $0.10 | Base |
Latest checks
| When | Endpoint | HTTP | ms | Result |
|---|---|---|---|---|
| 15 h ago | relay402.georgespring.workers.dev/api/agent-eval-case-generate | 402 | 808 | valid x402 v2 terms |
Income on Base (7 days)
| Day | Transfers | USDC | |
|---|---|---|---|
| 2026-11-02 | 2 | $0.101 | |
| 2026-11-01 | 3 | $0.102 | |
| 2026-10-31 | 3 | $0.102 | |
| 2026-10-30 | 3 | $0.102 | |
| 2026-10-29 | 3 | $0.102 | |
| 2026-10-28 | 3 | $0.102 | |
| 2026-10-27 | 3 | $0.102 | |
| 2026-10-26 | 4 | $0.103 |
Is this your API?
Add the live badge to your docs: 
Claim it for free with
<a href="https://logicnodes.io/observatory/p/relay402.georgespring.workers.dev"><img src="https://logicnodes.io/observatory/badge/relay402.georgespring.workers.dev.svg" alt="x402 status"></a>
Claim it for free with
x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/relay402.georgespring.workers.dev