0x4d1F17112841d5Cd524c017F1a8F3b38eD09C6e0

## 🛰️ Universal Intel **An x402-native OSINT endpoint.** One call returns a complete intelligence dossier on any IP, domain, or URL — assembled from **22 independent sources**, distilled into one clean JSON schema, and priced at **$0.001 per call**, payable by any agent. Built for autonomous agents and enrichment pipelines that pay-per-call over **x402** — no accounts, no API-key juggling, no invoices. --- ### 💳 Access & payment This endpoint speaks **x402-v2 on Base**. Two ways in: **1 · Free trial — Sign In With X (SIWX).** Your first **2 calls are free**. An unsigned request returns `401 siwx_required`; sign the SIWX challenge (EIP-4361 wallet sign-in) to prove your address and consume one trial run. No payment, no card — just a signature. **2 · Pay-per-call — x402.** Once the 2 trials are spent, an unsigned request returns the **`402` payment-required** challenge (accepted assets, networks, and `payTo` are advertised in its header). Sign the x402 payment headers and the call settles on-chain at **$0.001** — the dossier comes back in the very same response. `wallet-mcp execute_service` signs both flows automatically. Metered per request, settled per request. --- ### 🎯 What you send ```json { "query": "github.com" } { "query": "8.8.8.8" } { "query": "https://example.com/path" } ``` Domains, IPv4 addresses, full URLs, even an email address — the host is extracted automatically. ### 📦 What you get A single entity-nested dossier (`schema v2.0`): | Section | Contents | |---|---| | **query** | input, resolved type, resolved IP, found flag | | **domain** | registrar, registration dates, age, status, nameservers, full DNS (A / MX / NS / TXT / CAA), DNSSEC | | **host** | ASN, AS name, prefix, RPKI, registry, reverse DNS, geolocation, abuse contacts | | **exposure** | open ports, CPEs, known CVEs, service tags, hostnames | | **email** | SPF record, DMARC policy | | **web** | HTTP status, server, CDN / WAF, security headers (HSTS, CSP, X-Frame, nosniff) | | *

## 🪙 Crypto Dossier **An x402-native market-intelligence endpoint.** One call returns a complete dossier on any crypto token — **by symbol or contract address** — merged from **8 independent sources** into one clean JSON schema, priced at **$0.001 per call**, payable by any agent. Built for autonomous agents, trading bots, and enrichment pipelines that pay-per-call over **x402** — no accounts, no API-key juggling, no rate-limit management. --- ### 💳 Access & payment Speaks **x402-v2 on Base**. Two ways in: **1 · Free trial — Sign In With X (SIWX).** Your first **5 calls are free**. An unsigned request returns `401 siwx_required`; sign the SIWX challenge (EIP-4361 wallet sign-in) to consume one trial. No payment, just a signature. **2 · Pay-per-call — x402.** After the trials, an unsigned request returns the **`402` payment-required** challenge (accepted assets, networks, `payTo` in its header). Sign the x402 headers and the call settles on-chain at **$0.001** — the dossier returns in the same response. `wallet-mcp execute_service` signs both automatically. --- ### 🎯 What you send ```json { "query": "ETH" } { "query": "0x6982508145454ce325ddbe47a25d4ec3d2311933" } ``` A **symbol** (`BTC`, `ETH`, `SOL`) or any **token contract address** (any chain). Also accepts `symbol` / `token` / `address` keys, or a raw-string body. ### 📦 What you get A single, richly-organized dossier (`schema v2.0`): | Section | Contents | |---|---| | **query** | input, resolved type (symbol/contract), symbol, found flag | | **identity** | name, logo, website(s), socials (twitter / telegram / …) | | **price** | consolidated USD price, per-source breakdown, source count, cross-source spread % | | **market** | market cap, FDV, liquidity, 24h volume | | **change** | 1h / 6h / 24h % move | | **cex** | last, bid, ask, 24h high / low, VWAP, volume | | **dex** | top pair (chain, DEX, price, liquidity, volume, link) + pair count | | **ohlc** | 14 daily candles (O/H/L/C/V) | | **fx** | USD

## Email Domain Intelligence The first version of this told me, with a straight face, that github.com doesn't accept email. Nothing had crashed. One DNS lookup timed out, and the code treated "no answer" and "no record" as the same thing — so it printed a grade, a verdict, and a tidy sentence explaining that mail to GitHub would bounce. All of it wrong, and nothing anywhere in the response suggested a lookup had gone missing. I rewrote it around one rule: never turn a question you couldn't ask into an answer. ### What that actually means Every finding comes back as `observed`, `absent`, or `unknown`. Absent means I asked and there's no record. Unknown means I didn't get an answer, and I'd rather say so than guess. Anything I couldn't measure is `null` — never `false`, because `false` is a claim. The score follows the same logic. If SPF didn't come back, you get `70 of 80` instead of a confident `70 of 100`, and the grade is calculated against what I could actually see. If the MX and A lookups both fail, there's no reachability score at all and the verdict is `review` — never `reject`. A packet loss shouldn't cost somebody a signup. ### Two scores, because there are two questions Most tools mash these together and the result is nonsense. A small business on Google Workspace with no SPF record gets graded F by half the validators out there — while mail to them arrives every single time. So there are two: **inbound** — will mail to this domain actually land? MX records, whether the domain resolves, RFC 7505 null MX, and implicit MX (a domain with just an A record and no MX still accepts mail; a surprising number of tools get this wrong). **posture** — is *their* outbound mail set up properly? SPF, DKIM, DMARC, MTA-STS, DNSSEC, BIMI. They're never averaged. A domain can be a perfect A on the first and an F on the second, and that's not a contradiction — it's two different facts. ### The part I'd rather tell you up front **I cannot tell you whether a specif