The service's listing describes it this way: Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. One entry per finding with rule, severity, exact line number and a suggested fix. Rule-based, no LLM: same snippet, same findings. Send Python or JavaScript as text. Use it as a code review or vulnerability scanner for AI-generated code before shipping. Not a formal audit. Website
A service is a tool an AI agent pays to call. Code security scan: secrets, vul is listed on this page under AI inference / LLM, settling on Base, through x402. 30-day settled volume on this page is $38.75. The listing comes from the service catalog. Open a row for payments, payers, and chains. See Bazaar, agent payment use cases, and the methodology.
FacilitatorsCoinbase
Methodology · settled volume through 2026-11-02 · catalog Nov 2, 2026, 9:02 PM UTC
| Metric | 24h | 7d | 30d |
|---|---|---|---|
| Volume | $0.00 | $38.25 | $38.75 |
| Payments | 0 | 29 | 30 |
| Payers | 0 | 1 | 1 |
| Avg payment | $0.00 | $1.32 | $1.29 |
| Share of AI inference / LLM | — | 5.1% | 0.6% |
| Use-case rank | — | #4 | #9 |
Payers can be counted more than once when they paid through more than one facilitator.
Data through Nov 2, 2026. Since Oct 31. Earlier days in this range settled under $1. Source: public settlement logs. Methodology
| Time | Daily settled volume for Code security scan: secrets, vul |
|---|---|
| 2026-10-31 | $15.00 |
| 2026-11-01 | $23.25 |
| 2026-11-02 | $0.00 |
| Time | Daily buyers for Code security scan: secrets, vul |
|---|---|
| 2026-10-22 | 1 |
| 2026-10-23 | 0 |
| 2026-10-24 | 0 |
| 2026-10-25 | 0 |
| 2026-10-26 | 0 |
| 2026-10-27 | 0 |
| 2026-10-28 | 0 |
| 2026-10-29 | 0 |
| 2026-10-30 | 0 |
| 2026-10-31 | 8 |
| 2026-11-01 | 9 |
100.0%
Top payer's share of lifetime volume. Not the period selected above.
100.0%
Lifetime buyers with more than one payment, divided by all buyers.
Price, network, and asset come from the x402 Bazaar catalog.
| Endpoint | Network | Asset | Price | Scheme |
|---|---|---|---|---|
| https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified JWT. One entry per finding with rule, severity, exact line n | base | USDC | $1.00 | exact |
| https://fachada.chelsea-hermes.workers.dev/feed/ohlcv Crypto market data API for AI agents: Bitcoin BTC/USD and Ethereum ETH/USD price candles (daily OHLCV, 1000 days / 2.7 years, updated daily, Binance public data), a market summary (last close, 24h 7d 30d change, 30-day high and low) and crypto derivatives (perpetual futures fundi | base | USDC | $0.50 | exact |
| https://fachada.chelsea-hermes.workers.dev/feed/derivados Crypto market data API for AI agents: Bitcoin BTC/USD and Ethereum ETH/USD price candles (daily OHLCV, 1000 days / 2.7 years, updated daily, Binance public data), a market summary (last close, 24h 7d 30d change, 30-day high and low) and crypto derivatives (perpetual futures fundi | base | USDC | $0.50 | exact |
| https://fachada.chelsea-hermes.workers.dev/feed/dormidos Crypto market data API for AI agents: Bitcoin BTC/USD and Ethereum ETH/USD price candles (daily OHLCV, 1000 days / 2.7 years, updated daily, Binance public data), a market summary (last close, 24h 7d 30d change, 30-day high and low) and crypto derivatives (perpetual futures fundi | base | USDC | $0.50 | exact |
| https://fachada.chelsea-hermes.workers.dev/feed/resumen Crypto market data API for AI agents: Bitcoin BTC/USD and Ethereum ETH/USD price candles (daily OHLCV, 1000 days / 2.7 years, updated daily, Binance public data), a market summary (last close, 24h 7d 30d change, 30-day high and low) and crypto derivatives (perpetual futures fundi | base | USDC | $0.50 | exact |
| https://fachada.chelsea-hermes.workers.dev/travel/v1/travel/parse-request Turns a travel request written as free text (WhatsApp, email, form) into structured JSON a back office can act on: destination, check-in and check-out dates, nights, adults, children, budget, currency, interests, and what is still missing before quoting. Rule-based, no LLM: same | base | USDC | $3.00 | exact |
| https://fachada.chelsea-hermes.workers.dev/trip/v1/plan Researches a destination and returns one ready JSON plan from free, no-key sources: the geocoded place, up to 16 days of weather, the driving route and distance from your origin, and what is around (hotels, food, transport, ATMs, crypto). Call it for current ground truth about a | base | USDC | $3.00 | exact |
| https://fachada.chelsea-hermes.workers.dev/travel/v1/plan Turns a travel request written as free text (WhatsApp, email, form) into structured fields a back office can act on: destination, check-in and check-out dates, nights, adults, children, budget, currency, interests, and the list of what is still missing before quoting. Rule-based | base | USDC | $3.00 | exact |
| https://fachada.chelsea-hermes.workers.dev/detective/v1/verificar Verifies whether another AI agent (or a wallet) is who it claims to be before you pay it or hire it. Reads the agent DID at MolTrust (proof of possession, live credentials, on-chain anchor, revocation, reputation, ERC-8004 id) and adds Base on-chain signals (contract or person, n | base | USDC | $0.25 | exact |
| Processor | Volume | Tx | Share |
|---|---|---|---|
| Coinbasex402 | $38.25 | 29 | 100.0% |
We read settlements directly from each chain's public records and refresh them every few minutes.
Data through 2026-11-02. Source: public settlement logs.
Agent GDP. (2026). Code security scan: secrets, vul [Data set]. Retrieved November 2, 2026, from https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev.
"Code security scan: secrets, vul." Agent GDP, 2 Nov. 2026, https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev.
@misc{agentgdp_code_security_scan_secrets_vul_2026,
author = {{Agent GDP}},
title = {Code security scan: secrets, vul},
year = {2026},
url = {https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev},
note = {Retrieved November 2, 2026. Data through 2026-11-02. Licensed under CC BY 4.0.},
license = {https://creativecommons.org/licenses/by/4.0/}
}Code security scan: secrets, vul: $38.25 settled volume (7d), 29 payments, 1 buyers. Agent GDP, data through 2026-11-02. https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev Retrieved November 2, 2026.
Data from Agent GDP (https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev), licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
Payers on a day can be counted more than once if they paid through more than one facilitator. Weekly change compares the last 7 full days with the 7 days before, once both weeks are fully covered on this service's networks; other periods compare with the previous period of the same length. The page link uses the service's site when we have one, and the payee address otherwise.
Volume and payment counts include earlier days. Transaction-level detail available from arc from October 26, 2026, base from October 23, 2026, polygon from October 27, 2026, solana from April 12, 2026, tempo from June 22, 2026.
Paste this on your site. It says Indexed by Agent GDP, with this name, and it links back to this page.
Source: agentgdp.io · Beta
<a href="https://agentgdp.io/service/fachada.chelsea-hermes.workers.dev?utm_source=badge"><img src="https://brtdbhwxirjrwvubkyxa.supabase.co/storage/v1/object/public/embed/v1/badge/service/fachada.chelsea-hermes.workers.dev.svg" alt="Code security scan: secrets, vul · Indexed by Agent GDP" /></a>
Get API access Higher limits cover the same figures. Full history, saved views, and morning alerts are on Pro.
Something wrong on this page? Report a correction