llms.txt
+61 −200
− > Tanod (Filipino for a village watchman) is a set of pay-per-call security tools for AI agents− > and developers, over HTTP and MCP. It watches and reports; it does not promise safety.− > Pay per call in USDC on Base with x402; no account or API key. 3 free scans (or− ## API− - [OpenAPI spec](https://tanod.dev/openapi.json): machine-readable description of every endpoint.− ### pactlint (contract scan)− - `POST https://tanod.dev/v1/scan/source` with JSON `{"source": "<one .sol file>"}` or− `{"standard_json": {...solc standard-JSON input, every import inline...}}`. Optional:− `filename`, `compiler_version` (X.Y.Z), `options` (`include_informational`,− `include_noisy`, `include_dependencies`). Returns the JSON scan report.− - `POST https://tanod.dev/v1/scan/address` with JSON `{"address": "0x...", "chain": "ethereum" | "base"}`:− fetches the verified source from Sourcify and scans it. Unverified contracts get 404 and are− not charged.− - `GET https://tanod.dev/v1/source/{chain}/{address}`: verified source, ABI and compiler settings− (USD 0.005).− ### txpeek (pre-transaction check)− - `POST https://tanod.dev/v1/check/address` with JSON `{"address": "0x...", "chain": "base" | "ethereum"}`:− pre-transaction check (USD 0.005). Call it right before transacting with, approving or− buying a token at an address. Returns `verdict` (low | caution | high | unknown), `risk_score`− 0-100 and `reasons` (code, severity, points, one-sentence message), plus proxy/admin,− Sourcify verification, risky functions found in the bytecode, token basics and− `checked_at_block`. Heuristic pre-check, not an audit; no honeypot simulation. Results are− cached for 10 minutes. If the chain cannot be read: 503, not charged.− ### toolsniff (skill and MCP server scanner)− - `POST https://tanod.dev/v1/scan/package`: check an AI-agent skill or MCP server before installing it. JSON− `{"source": "npm:name[@version]" | "pypi:name[==version]" | "github:owner/repo[@ref][//subdir]" |− "https://github.com/owner/repo[/tree/ref/dir]" | "clawhub:[owner/]slug[@version]"}`, or an upload:− JSON `{"content_base64": "...", "filename": "SKILL.md"}` or multipart/form-data with a `file`− part (.zip/.tar/.tgz/.tar.bz2/.tar.xz up to 20 MB, or one file with its name). The package− is downloaded (or taken from the upload), unpacked safely and read as text; it is never− installed, imported or run. Returns the skillscan JSON report: `verdict` (safe-looking | review |− dangerous | unknown), `risk_score` 0-100, `summary`, `findings` (rule id, severity, confidence,− file:line, evidence, explanation), statically extracted MCP `tools`, `dependencies`. Checks:− prompt/instruction injection and MCP tool poisoning, hidden Unicode text, remote code execution,− credential and wallet access, exfiltration endpoints, install-time hooks, persistence and− privilege escalation, over-broad MCP tools, typosquatting, and known-vulnerable or malicious− dependencies via OSV.dev (registry sources only: uploads are never sent to OSV). It cannot see− dynamically registered tools, code fetched at run time, nested archives or heavily obfuscated− logic, and it does not execute anything. Typically 2-4 s for a registry package, 5-15 s for a− GitHub monorepo, hard limit 60 s (past it: `error.code` `timeout`, verdict+ > Tanod (Filipino for a village watchman) is a set of pay-per-call tools for AI agents and developers,+ > over HTTP and MCP (248 MCP tools and 254 paid API routes): documents and PDFs to Markdown, tables, Word or CSV; live market data; web pages,+ > search and DNS; chain reads; and security checks. Results are automated; it does not promise safety.+ > Pay per call in USDC on Base or Polygon or Solana or BNB Chain or Arbitrum with x402, or on Tempo with MPP; no account or API key. 3 free scans (or+ ## Start here+ - Every route with its request body, price and free pool: [llms-full.txt](https://tanod.dev/llms-full.txt).+ - [OpenAPI spec](https://tanod.dev/openapi.json): every paid route, with `x-payment-info` (price) per operation and+ `info.x-guidance` (how to pay).+ - MCP (streamable HTTP, stateless): `https://tanod.dev/mcp`, every tool in one server `tanod`; or one focused server per family+ below (same tools, prices and free tier). Payment over MCP: a `PaymentRequired` object in `structuredContent` of an+ error result; retry with the payment in `_meta["x402/payment"]`.+ - Discovery: `https://tanod.dev/.well-known/x402`, `https://tanod.dev/.well-known/mcp/server-card.json`.+ ## New+ - `POST /v1/x402/seller-report`, USD 0.01: one report on your x402 endpoint: listing lint, price position, buyer preflight, Bazaar demand and coded fixes. [Guide](https://tanod.dev/learn/x402-seller-report-api.html)+ - `POST /v1/compute/gpu-prices`, USD 0.002: cloud GPU list prices per GPU-hour on AWS, Azure and Google Cloud (on-demand and spot) by chip, memory and region, cheapest first. [Guide](https://tanod.dev/learn/cloud-gpu-price-api.html)+ - `POST /v1/chain/approvals`, USD 0.005: a wallet's live ERC-20 and Permit2 allowances, risky ones flagged, with an unsigned revoke transaction each. [Guide](https://tanod.dev/learn/token-approval-audit-api.html)+ - `POST /v1/chain/drain-check`, USD 0.002: each token transfer out of a wallet sorted into sent, pulled by a spender or x402-authorized, with a nonce check. [Guide](https://tanod.dev/learn/wallet-drain-check-api.html)+ - `POST /v1/chain/address-poisoning`, USD 0.002: is the recipient a lookalike of an address the wallet paid? Checked against its own transfer history and contacts. [Guide](https://tanod.dev/learn/address-poisoning-check-api.html)+ - `POST /v1/agents/preflight`, USD 0.001: pay, caution or avoid for an x402 endpoint you have not paid before, from its live 402 and the agent index. [Guide](https://tanod.dev/learn/x402-endpoint-preflight-api.html)+ - `POST /v1/chain/transfer-fees`, USD 0.002: the fee of one USDC or USDT transfer on 6 chains, cheapest first. [Guide](https://tanod.dev/learn/gas-price-api.html)+ - `POST /v1/chain/pre-trade-check`, USD 0.005: a Uniswap V3 swap quoted at up to 5 sizes: price impact per size, best fee tier and pool, gap to the latest candle. [Guide](https://tanod.dev/learn/uniswap-quote-api.html)+ - `POST /v1/chain/token-honeypot`, USD 0.005: simulated buy and sell-back of an ERC-20 token on Base or Ethereum before you buy it. [Guide](https://tanod.dev/learn/token-honeypot-check-api.html)+ ## Families+ Each family has its own OpenAPI document, llms.txt and MCP server.+ - **Pre-transaction Safety Checks (Tanod)**: Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC. 22 MCP tools at `https://tanod.dev/mcp/security`, 23 HTTP routes: [OpenAPI](https://tanod.dev/openapi/security.json), [llms.txt](https://tanod.dev/families/security/llms.txt)+ - **EVM & Solana Chain Reads (Tanod)**: Read EVM and Solana chains for balances, tokens, eth_call, logs, receipts, gas, blocks and ENS. 40 MCP tools at `https://tanod.dev/mcp/chain`, 41 HTTP routes: [OpenAPI](https://tanod.dev/openapi/chain.json), [llms.txt](https://tanod.dev/families/chain/llms.txt)+ - **Aviation & Space Weather Data (Tanod)**: Flight and sky conditions for agents, from METAR/TAF and airports to aurora and satellite passes. 14 MCP tools at `https://tanod.dev/mcp/sky`, 14 HTTP routes: [OpenAPI](https://tanod.dev/openapi/sky.json), [llms.txt](https://tanod.dev/families/sky/llms.txt)+ - **Crypto & Macro Market Data (Tanod)**: Market data for agents: token prices, DeFi TVL and DEX volume, perp funding, FX, yields, SEC data. 29 MCP tools at `https://tanod.dev/mcp/finance`, 29 HTTP routes: [OpenAPI](https://tanod.dev/openapi/finance.json), [llms.txt](https://tanod.dev/families/finance/llms.txt)+ - **PDF & Office Tools (Tanod)**: Convert and edit PDF, Word, Excel, PowerPoint: Office to PDF, Markdown, tables, OCR, merge, split. 39 MCP tools at `https://tanod.dev/mcp/docs`, 39 HTTP routes: [OpenAPI](https://tanod.dev/openapi/docs.json), [llms.txt](https://tanod.dev/families/docs/llms.txt)+ - **Image Resize & Convert Tools (Tanod)**: Edit images in one call: resize, convert, compress, crop, metadata, favicons, QR codes, OCR. 18 MCP tools at `https://tanod.dev/mcp/images`, 18 HTTP routes: [OpenAPI](https://tanod.dev/openapi/images.json), [llms.txt](https://tanod.dev/families/images/llms.txt)+ - **Text Analysis & Cleanup Tools (Tanod)**: Analyse and clean up text: stats, language, keywords, summary, sentiment, PII redaction, diff. 20 MCP tools at `https://tanod.dev/mcp/text`, 20 HTTP routes: [OpenAPI](https://tanod.dev/openapi/text.json), [llms.txt](https://tanod.dev/families/text/llms.txt)+ - **Developer Utilities & Validators (Tanod)**: Small developer helpers: encode, hash, HMAC, JWT, IDs, JSON, cron, time zones, validators. 34 MCP tools at `https://tanod.dev/mcp/util`, 35 HTTP routes: [OpenAPI](https://tanod.dev/openapi/util.json), [llms.txt](https://tanod.dev/families/util/llms.txt)+ - **Web Reader & Search (Tanod)**: Read and search the web: page to Markdown, screenshots, search, news, metadata, sitemaps, RDAP. 37 MCP tools at `https://tanod.dev/mcp/web`, 37 HTTP routes: [OpenAPI](https://tanod.dev/openapi/web.json), [llms.txt](https://tanod.dev/families/web/llms.txt)+ - **Embeddings, Rerank & Speech-to-Text (Tanod)**: Local ML models: speech to text (SRT/VTT), embeddings, reranking, entities, zero-shot, translation. 15 MCP tools at `https://tanod.dev/mcp/ml`, 15 HTTP routes: [OpenAPI](https://tanod.dev/openapi/ml.json), [llms.txt](https://tanod.dev/families/ml/llms.txt)+ - **x402 & MCP Server Index (Tanod)**: Find paid APIs for agents in an index of x402 endpoints and MCP servers, with price benchmarks. 12 MCP tools at `https://tanod.dev/mcp/agents`, 12 HTTP routes: [OpenAPI](https://tanod.dev/openapi/agents.json), [llms.txt](https://tanod.dev/families/agents/llms.txt)+ no scans). The micro-API and agentscan pools are listed with each route in `https://tanod.dev/llms-full.txt`.+ are in the `PAYMENT-REQUIRED` header and, identical, in the JSON body (a header copy over 11 KB abridges only its+ Bazaar output example, kept whole in the body and in /openapi.json): scheme `exact`, USDC on+ base (`eip155:8453`), payTo `0x593857A4a4F619543ea12394137C3004ce841720`, `amount` in USDC atomic units (6 decimals). Also payable in USDC on Polygon (eip155:137) or Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp) or BNB Chain (eip155:56) or Arbitrum (eip155:42161): the 402 lists one requirement per network, Base first. On BNB Chain (eip155:56) USDC has 18 decimals, so that entry's `amount` is the price times 10^18, and the payment is a Permit2 transfer (extra.assetTransferMethod permit2). Ci+ - MPP on Tempo works too: the same `402` also carries `WWW-Authenticate: Payment` (method `tempo`,
Showing the first 40 of each.