| https://api.zfinia.com/x402/v1/page-links Fetch a reviewed public page and return its links with resolved absolute URLs and anchor text, the canonical URL, the declared meta robots directive, and how many links leave the host. Relative hrefs are resolved against the page, so a caller never has to guess a base. | base | USDC | $0.004 | exact |
| https://api.zfinia.com/x402/v1/page-metadata Fetch a reviewed public page and return its title, every meta and Open Graph tag, and the canonical URL. No JavaScript is executed and no script content is read. Returns the licence and creator for the content alongside it, so reuse terms travel with the result. | base | USDC | $0.004 | exact |
| https://api.zfinia.com/x402/v1/page-tables Fetch a reviewed public page and return its HTML tables as arrays of rows and cells. Bounded to ten tables, fifty rows each and twenty cells per row, and every bound that is reached is named in the warnings so a truncated table is never mistaken for a short one. | base | USDC | $0.006 | exact |
| https://api.zfinia.com/x402/v1/company-evidence-pack Company enrichment and KYB data for due diligence by domain: verify a counterparty, supplier or vendor before outreach, onboarding or payment. Returns firmographics (legal name, LEI, SEC CIK, industry, HQ, founded, employees), domain intelligence (age, email provider, SPF/DMARC), | base | USDC | $0.06 | exact |
| https://api.zfinia.com/x402/v1/website-evidence-pack Everything a reviewed public page declares, in one call and one fetch: title, meta and Open Graph, canonical, robots directive, JSON-LD with its schema.org types, resolved links with an external count, tables, content fingerprints, and readable Markdown. Replaces six separate ext | base | USDC | $0.05 | exact |
| https://api.zfinia.com/x402/v1/x402-merchant-readiness-audit Is this merchant safe to depend on? Audits up to ten x402 endpoints in one call and returns a verdict — ready, partially ready or not ready — with the specific blockers. Checks each endpoint serves a payable challenge with well-formed terms and a declared input schema, and adds t | base | USDC | $0.025 | exact |
| https://api.zfinia.com/x402/v1/ci-workflow-contract-audit Audit a CI workflow for what it leaves movable or undeclared. Reports actions pinned to a tag rather than a commit - a tag can be moved by whoever owns the action, so the code a step runs can change without this file changing - missing permissions and timeouts, a job depending on | base | USDC | $0.12 | exact |
| https://api.zfinia.com/x402/v1/dkim-record-audit Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a stated minimum; a selector left in testing mode, which asks receivers to treat a | base | USDC | $0.18 | exact |
| https://api.zfinia.com/x402/v1/lockfile-change-report Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meanin | base | USDC | $0.18 | exact |
| https://api.zfinia.com/x402/v1/openapi-endpoint-inventory-diff See which operations were added, removed, deprecated or renamed between two OpenAPI documents. Flags a removal that was never preceded by a deprecation, an operationId change that renames the method in every generated client, and a duplicated operationId that no generator can res | base | USDC | $0.10 | exact |
| https://api.zfinia.com/x402/v1/openapi-parameter-contract-audit Audit a real request against the OpenAPI document it should satisfy. Matches the operation the way a router would, checks every path, query and header parameter against its declared schema, validates the body against the declared media type, and reports whether the credential the | base | USDC | $0.14 | exact |
| https://api.zfinia.com/x402/v1/openapi-response-conformance-audit Audit a real response against what the OpenAPI document promises for that operation. Resolves the declared status exactly, by range such as 2XX, or through default, checks declared response headers are present, and validates the body against the declared schema for its media type | base | USDC | $0.14 | exact |
| https://api.zfinia.com/x402/v1/security-header-diff Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport-Security max-age, dropped includeSubDomains, a newly permitted unsafe-inline or | base | USDC | $0.11 | exact |
| https://api.zfinia.com/x402/v1/tabular-contract-audit Audit your own delimited data against a contract you declare, and get one pass/fail plus the exact row and clause of every breach. Checks types, required values, enums, numeric bounds, lengths, patterns, uniqueness, composite primary keys, null-rate ceilings, header drift and enc | base | USDC | $0.12 | exact |
| https://api.zfinia.com/x402/v1/telemetry-attribute-contract-audit Audit telemetry attributes against a contract, and against the thing a schema cannot see: cardinality. Reports missing required attributes, undeclared attributes, an attribute appearing as two types across the batch, and an attribute whose distinct values exceed your limit - beca | base | USDC | $0.12 | exact |
