agent-site-audit

A deterministic website-audit service for autonomous agents and humans. One call, flat JSON, no signup. SSRF-guarded.

x402 · USDC on Base 0.25 USDC / full audit free 3-check scan

Website URL Free scan runs 3 of 9 checks — no payment, no account.

What you get for the payment

/audit — 0.25 USDC

Flat JSON (~1 KB): HTTP status, latency, server, title, content fingerprint, robots policy, redirect chain, sitemap, viewport, JSON-LD, the full issue list and a 0-100 agent-readiness score.

/audit?url=…

/report — 0.25 USDC

The same audit as a self-contained HTML report for humans: score dial, every finding in plain language, and the exact fix to apply.

/report?url=…

/deep — 0.25 USDC

Technical deep audit: TLS certificate, the seven security headers, cookie flags, DNS and email security (SPF, DMARC, DKIM, CAA, MX), delivery and AI-agent readiness. Every finding ranked, with a copy-paste fix.

/deep?url=… · readable report

Free preview — no payment

Three of nine checks, so an agent can see the shape of the result before paying.

For AI agents

Machine-readable. Full version: /for-agents.md · /llms.txt

MCP SERVER   POST https://agent.audito.lat/mcp        (JSON-RPC 2.0, streamable HTTP)
  1) initialize   {"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{}}}
  2) tools/list   {"jsonrpc":"2.0","id":2,"method":"tools/list"}
  3) tools/call   {"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"scan_site","arguments":{"url":"https://example.com"}}}

FREE TOOLS   service_info · scan_site
PAID TOOLS   audit_site (0.25 USDC) · deep_audit (0.25 USDC)
  Call a paid tool WITHOUT payment -> you receive the x402 challenge
  (scheme exact · network eip155:8453 · asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
   · amount 250000 · payTo 0x6B60905d1a4bC09c3F8a0248bC2209B6Fe2388Bf · maxTimeoutSeconds 60).
  Sign an EIP-3009 USDC TransferWithAuthorization, base64 the payload and retry
  passing it as "payment". Each signature is single use and the payer must hold
  at least 0.25 USDC, otherwise the call is refused (no work is delivered).

PLAIN HTTP (same products, no MCP)
  GET /scan?url=<url>           free  · 3-of-9 preview
  GET /robots-policy?url=<url>  free  · robots verdict
  GET /audit?url=<url>           0.25 USDC · flat JSON audit
  GET /report?url=<url>          0.25 USDC · HTML report
  GET /deep?url=<url>            0.25 USDC · deep audit (+&format=html for the report)
  Payment travels in the X-Payment header (same base64 payload).

DISCOVERY  /for-agents.md · /llms.txt · /openapi.json · /.well-known/x402
           /.well-known/agent.json · /.well-known/agent-card.json · /.well-known/mcp/server-card.json
RESULTS are deterministic: no AI inference is used or billed to serve them.

Machine-readable:

/llms.txt          what this service offers (for AI)
/openapi.json       OpenAPI 3.1 (3 paid resources)
/.well-known/x402   x402 discovery document
/agent-card.json    agent identity
/discovery.json     service card
/mcp                MCP server: scan_site, audit_site, deep_audit
/robots-policy      free robots verdict
/audit?url=<url>     paid 0.25 USDC (x402)

Contact: agente@audito.lat · Security: /.well-known/security.txt