{"x402Version":2,"name":"Security & Privacy Checks","description":"Security and privacy checks: offline leaked-secret scanning and PII detection/redaction for prompts, logs and tool output, plus live CISA known-exploited vulnerability (KEV) catalog checks by CVE for patch prioritization.","version":"0.1.0","openapi":"https://scan.openverbs.com/openapi.json","resources":[{"url":"https://scan.openverbs.com/v1/secrets","method":"POST","description":"Scan source code or configuration text for hardcoded secrets: AWS access keys, GitHub/Slack/Google tokens, Stripe and OpenAI keys, PEM private-key blocks, JWTs and high-entropy secret assignments. Placeholder values are filtered out. Each finding gives the rule, a severity (critical/high/medium/low), line and column, entropy and a masked excerpt. Offline and deterministic.","tags":["scan for secrets","detect leaked credentials","api key scanner","find hardcoded tokens","secret leak detection","credential scan api"],"accepts":[{"scheme":"exact","network":"eip155:8453","price":"$0.004","payTo":"0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A","asset":"USDC"}]},{"url":"https://scan.openverbs.com/v1/detect","method":"POST","description":"Find personally identifiable information in a text blob: emails, phone numbers, credit cards (Luhn-validated), IBANs (mod-97 validated), IPv4/IPv6 addresses, US SSNs and JWTs. Returns every match with its type and character offsets, plus per-type counts. Validated — not just pattern-matched — to keep false positives low. Fully offline.","tags":["detect pii","pii detection api","find personal data","privacy data scanner","identify sensitive text","pii lookup"],"accepts":[{"scheme":"exact","network":"eip155:8453","price":"$0.004","payTo":"0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A","asset":"USDC"}]},{"url":"https://scan.openverbs.com/v1/redact","method":"POST","description":"Return the input text with every detected PII span replaced. `mode` controls the replacement: \"label\" (default) → `[EMAIL]`; \"mask\" → the value covered with a mask character; \"hash\" → `[EMAIL:1a2b3c4d]`, a stable per-value fingerprint so equal values stay linkable without exposing them. Same validated detectors as `/detect`. Fully offline.","tags":["redact pii","pii redaction api","mask personal data","anonymize sensitive text","remove private information","hash pii values"],"accepts":[{"scheme":"exact","network":"eip155:8453","price":"$0.004","payTo":"0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A","asset":"USDC"}]},{"url":"https://scan.openverbs.com/v1/kev","method":"POST","description":"Check up to 50 CVE IDs against CISA's Known Exploited Vulnerabilities (KEV) catalog. Returns membership, vendor/product, exploitation evidence, ransomware-use status and remediation guidance from CC0 data. Not listed does not mean safe or unexploited. Federal due dates are not global deadlines. Refreshed hourly; stale snapshots are explicitly flagged.","tags":["cisa kev","known exploited vulnerabilities","actively exploited cve","cve remediation","ransomware vulnerabilities"],"accepts":[{"scheme":"exact","network":"eip155:8453","price":"$0.006","payTo":"0xb3f4de103F34b99f0Da19B4F16D6B53a14C2194A","asset":"USDC"}]}]}