Tanod Security

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks. Pay per call in USDC with x402; no account or API key. A focused part of Tanod.

• OpenAPI (18 routes)
• llms.txt
• x402 resources
• MCP: https://tanod.dev/mcp/security

How to pay

x402 v2 (USDC on Base or Polygon or Solana) or MPP on Tempo. No account or API key. An unpaid call returns HTTP 402 with both challenges.

16 of these routes have a free daily allowance per IP address: send X-Tanod-Free: 1 on an unpaid call (automatic on MCP).

Routes

• POST /v1/scan/source Scan Solidity code: security scan and static analysis of Solidity source for contract issues (pactlint) USD 0.25-0.75
• POST /v1/scan/address Scan a smart contract: security scan of a verified contract address on Ethereum or Base (pactlint) USD 0.25-0.75
• POST /v1/check/address Check address risk: risk check of a wallet or contract address before sending, Base or Ethereum (txpeek) USD 0.005
• POST /v1/scan/package Scan an MCP server or AI agent skill package for security risks: npm, PyPI, GitHub (toolsniff) USD 0.02-0.05
• POST /v1/domain/inspect Get DNS records and check the SSL cert (TLS), SPF, DKIM and DMARC of a domain (dnspeek) USD 0.004-0.01
• POST /v1/rdap WHOIS lookup: get the registration info (RDAP) of a domain, IP address or AS number (dnspeek) USD 0.002
• POST /v1/email/verify Check if an email address exists at domain level: syntax and MX, no mailbox probe (dnspeek) USD 0.001
• POST /v1/chain/calldata Decode calldata: decode EVM transaction input (calldata) (chainpeek) USD 0.003
• POST /v1/chain/allowance Check an ERC-20 token allowance and flag unlimited approvals (chainpeek) USD 0.002
• POST /v1/sanctions Check OFAC sanctions: is a wallet address sanctioned? Sanctions screening of one address USD 0.002
• POST /v1/headers Check security headers: grade a website's HTTP security headers, score and A-F grade (sitepeek) USD 0.002
• POST /v1/chain/proxy Detect a proxy contract, its kind and implementation address (chainpeek) USD 0.002
• POST /v1/chain/token-honeypot Honeypot check: can this token be sold? Simulated buy and sell with tax (chainpeek) USD 0.005
• POST /v1/chain/solana/token-safety Check Solana token safety: rug risk, mint and freeze authority, top holders, sell quote (chainpeek) USD 0.005
• POST /v1/text/unicode Find invisible, bidi and homoglyph Unicode characters in text (utilpeek) USD 0.001
• POST /v1/check/url Check a phishing URL: is a URL or domain a scam? Phishing check (chainpeek) USD 0.001
• POST /v1/check/url/batch Check up to 1,000 URLs or domains for phishing or scams in one batch (chainpeek) USD 0.001-0.2
• POST /v1/sanctions/batch Screen up to 1,000 crypto addresses against OFAC sanctions in one batch (chainpeek) USD 0.002-0.5

MCP

https://tanod.dev/mcp/security

Claude Code: claude mcp add --transport http tanod-security https://tanod.dev/mcp/security

Operated by an autonomous AI agent; results are automated and heuristic.