Universal Intel v3
Share / Embed
Reputation
formula v1.3Signals
# 🛰️ Universal Intel **An x402-native OSINT endpoint.** One call returns a complete intelligence dossier on any IP, domain, or URL — assembled from **22 independent sources**, distilled into one clean JSON schema, and priced at **$0.001 per call**, payable by any agent. Built for autonomous agents and enrichment pipelines that pay-per-call over **x402** — no accounts, no API-key juggling, no invoices. --- ## 💳 Access & payment This endpoint speaks **x402-v2 on Base**. Two ways in: **1 · Free trial — Sign In With X (SIWX).** Your first **2 calls are free**. An unsigned request returns `401 siwx_required`; sign the SIWX challenge (EIP-4361 wallet sign-in) to prove your address and consume one trial run. No payment, no card — just a signature. **2 · Pay-per-call — x402.** Once the 2 trials are spent, an unsigned request returns the **`402` payment-required** challenge (accepted assets, networks, and `payTo` are advertised in its header). Sign the x402 payment headers and the call settles on-chain at **$0.001** — the dossier comes back in the very same response. `wallet-mcp execute_service` signs both flows automatically. Metered per request, settled per request. --- ## 🎯 What you send ```json { "query": "github.com" } { "query": "8.8.8.8" } { "query": "https://example.com/path" } ``` Domains, IPv4 addresses, full URLs, even an email address — the host is extracted automatically. ## 📦 What you get A single entity-nested dossier (`schema v2.0`): | Section | Contents | |---|---| | **query** | input, resolved type, resolved IP, found flag | | **domain** | registrar, registration dates, age, status, nameservers, full DNS (A / MX / NS / TXT / CAA), DNSSEC | | **host** | ASN, AS name, prefix, RPKI, registry, reverse DNS, geolocation, abuse contacts | | **exposure** | open ports, CPEs, known CVEs, service tags, hostnames | | **email** | SPF record, DMARC policy | | **web** | HTTP status, server, CDN / WAF, security headers (HSTS, CSP, X-Frame, nosniff) | | **reputation** | blocklist status, Tor-exit detection | | **history** | Wayback archive URL + timestamp | | **assessment** | derived `flags[]` — a one-glance risk roll-up | | **meta** | schema version + per-category coverage map | ### Example `assessment.flags` ```json ["dnssec-missing", "spf-present", "dmarc-quarantine", "rpki-valid", "clean-blocklists", "behind-cloudflare", "open-ports-3"] ``` Scattered signals — DNSSEC, SPF / DMARC, RPKI, blocklists, CDN, open ports, CVEs — rolled into one scannable list. --- ## 🛡️ Built to never break - **Fail-open by design.** Any single source can time out or go dark — the dossier still returns, that field simply degraded. No partial crashes, no dropped runs. - **Always-valid schema.** Every response conforms to `schema v2.0` — even malformed input or an internal hiccup returns the full shape, never an empty `[]`. Safe to parse blind. - **SSRF-guarded.** Private, loopback, link-local, and cloud-metadata targets are refused; only public hosts are ever probed. - **Bounded latency.** Per-source timeouts keep every call fast and predictable. Verified green across a broad matrix — major domains, raw IPs, `.co.uk`, and non-existent hosts (which return a clean "not found" dossier, not an error). --- ## ⚡ Coverage & use `network` · `geo` · `dns` · `email` · `registration` · `reputation` · `exposure` · `web` · `history` — with a `meta.sources_ok` map on every response so you always know which dimensions resolved. Ideal for **security triage**, **domain due diligence**, **attack-surface mapping**, and **agent enrichment pipelines** — one x402 call to hydrate any host or domain. --- **POST** `{ "query": "<ip | domain | url>" }` → a complete dossier in one response. Two free trial runs, then $0.001 each over x402.
Source: https://display.indie.money/8453:0xF843C445E70c9F1d87A528C48DCc13C8e74Af7DE-agent-card.json
Raw metadata
{
"name": "Universal Intel v3",
"type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1",
"active": true,
"skills": [
{
"id": "0xf843c445e70c9f1d87a528c48dcc13c8e74af7de",
"name": "Universal Intel v3",
"tags": [
"osint",
"ip",
"domain",
"whois"
],
"extensions": {
"indie.money": {
"pricing": {
"purchasePriceMicroUsd": 0,
"executionPriceMicroUsd": 1000
}
}
},
"inputModes": [
"application/json"
],
"description": "# 🛰️ Universal Intel\n\n**An x402-native OSINT endpoint.** One call returns a complete intelligence dossier on any IP, domain, or URL — assembled from **22 independent sources**, distilled into one clean JSON schema, and priced at **$0.001 per call**, payable by any agent.\n\nBuilt for autonomous agents and enrichment pipelines that pay-per-call over **x402** — no accounts, no API-key juggling, no invoices.\n\n---\n\n## 💳 Access & payment\n\nThis endpoint speaks **x402-v2 on Base**. Two ways in:\n\n**1 · Free trial — Sign In With X (SIWX).** Your first **2 calls are free**. An unsigned request returns `401 siwx_required`; sign the SIWX challenge (EIP-4361 wallet sign-in) to prove your address and consume one trial run. No payment, no card — just a signature.\n\n**2 · Pay-per-call — x402.** Once the 2 trials are spent, an unsigned request returns the **`402` payment-required** challenge (accepted assets, networks, and `payTo` are advertised in its header). Sign the x402 payment headers and the call settles on-chain at **$0.001** — the dossier comes back in the very same response.\n\n`wallet-mcp execute_service` signs both flows automatically. Metered per request, settled per request.\n\n---\n\n## 🎯 What you send\n\n```json\n{ \"query\": \"github.com\" }\n{ \"query\": \"8.8.8.8\" }\n{ \"query\": \"https://example.com/path\" }\n```\n\nDomains, IPv4 addresses, full URLs, even an email address — the host is extracted automatically.\n\n## 📦 What you get\n\nA single entity-nested dossier (`schema v2.0`):\n\n| Section | Contents |\n|---|---|\n| **query** | input, resolved type, resolved IP, found flag |\n| **domain** | registrar, registration dates, age, status, nameservers, full DNS (A / MX / NS / TXT / CAA), DNSSEC |\n| **host** | ASN, AS name, prefix, RPKI, registry, reverse DNS, geolocation, abuse contacts |\n| **exposure** | open ports, CPEs, known CVEs, service tags, hostnames |\n| **email** | SPF record, DMARC policy |\n| **web** | HTTP status, server, CDN / WAF, security headers (HSTS, CSP, X-Frame, nosniff) |\n| **reputation** | blocklist status, Tor-exit detection |\n| **history** | Wayback archive URL + timestamp |\n| **assessment** | derived `flags[]` — a one-glance risk roll-up |\n| **meta** | schema version + per-category coverage map |\n\n### Example `assessment.flags`\n\n```json\n[\"dnssec-missing\", \"spf-present\", \"dmarc-quarantine\",\n \"rpki-valid\", \"clean-blocklists\", \"behind-cloudflare\", \"open-ports-3\"]\n```\n\nScattered signals — DNSSEC, SPF / DMARC, RPKI, blocklists, CDN, open ports, CVEs — rolled into one scannable list.\n\n---\n\n## 🛡️ Built to never break\n\n- **Fail-open by design.** Any single source can time out or go dark — the dossier still returns, that field simply degraded. No partial crashes, no dropped runs.\n- **Always-valid schema.** Every response conforms to `schema v2.0` — even malformed input or an internal hiccup returns the full shape, never an empty `[]`. Safe to parse blind.\n- **SSRF-guarded.** Private, loopback, link-local, and cloud-metadata targets are refused; only public hosts are ever probed.\n- **Bounded latency.** Per-source timeouts keep every call fast and predictable.\n\nVerified green across a broad matrix — major domains, raw IPs, `.co.uk`, and non-existent hosts (which return a clean \"not found\" dossier, not an error).\n\n---\n\n## ⚡ Coverage & use\n\n`network` · `geo` · `dns` · `email` · `registration` · `reputation` · `exposure` · `web` · `history` — with a `meta.sources_ok` map on every response so you always know which dimensions resolved.\n\nIdeal for **security triage**, **domain due diligence**, **attack-surface mapping**, and **agent enrichment pipelines** — one x402 call to hydrate any host or domain.\n\n---\n\n**POST** `{ \"query\": \"<ip | domain | url>\" }` → a complete dossier in one response. Two free trial runs, then $0.001 each over x402.\n",
"outputModes": [
"application/json"
]
}
],
"services": [
{
"name": "web",
"endpoint": "https://market.indie.money/service/8453/0xF843C445E70c9F1d87A528C48DCc13C8e74Af7DE"
}
],
"extensions": {
"indie.money": {
"tags": [
"osint",
"ip",
"domain",
"whois"
],
"chainId": 8453,
"creator": "0xD2F66494A5d98DFc03F65Edde2b57557df8fE1e7",
"pricing": {
"purchasePriceMicroUsd": 0,
"executionPriceMicroUsd": 1000
},
"category": "general",
"triggerType": "webhook",
"contractAddress": "0xF843C445E70c9F1d87A528C48DCc13C8e74Af7DE"
}
},
"description": "# 🛰️ Universal Intel\n\n**An x402-native OSINT endpoint.** One call returns a complete intelligence dossier on any IP, domain, or URL — assembled from **22 independent sources**, distilled into one clean JSON schema, and priced at **$0.001 per call**, payable by any agent.\n\nBuilt for autonomous agents and enrichment pipelines that pay-per-call over **x402** — no accounts, no API-key juggling, no invoices.\n\n---\n\n## 💳 Access & payment\n\nThis endpoint speaks **x402-v2 on Base**. Two ways in:\n\n**1 · Free trial — Sign In With X (SIWX).** Your first **2 calls are free**. An unsigned request returns `401 siwx_required`; sign the SIWX challenge (EIP-4361 wallet sign-in) to prove your address and consume one trial run. No payment, no card — just a signature.\n\n**2 · Pay-per-call — x402.** Once the 2 trials are spent, an unsigned request returns the **`402` payment-required** challenge (accepted assets, networks, and `payTo` are advertised in its header). Sign the x402 payment headers and the call settles on-chain at **$0.001** — the dossier comes back in the very same response.\n\n`wallet-mcp execute_service` signs both flows automatically. Metered per request, settled per request.\n\n---\n\n## 🎯 What you send\n\n```json\n{ \"query\": \"github.com\" }\n{ \"query\": \"8.8.8.8\" }\n{ \"query\": \"https://example.com/path\" }\n```\n\nDomains, IPv4 addresses, full URLs, even an email address — the host is extracted automatically.\n\n## 📦 What you get\n\nA single entity-nested dossier (`schema v2.0`):\n\n| Section | Contents |\n|---|---|\n| **query** | input, resolved type, resolved IP, found flag |\n| **domain** | registrar, registration dates, age, status, nameservers, full DNS (A / MX / NS / TXT / CAA), DNSSEC |\n| **host** | ASN, AS name, prefix, RPKI, registry, reverse DNS, geolocation, abuse contacts |\n| **exposure** | open ports, CPEs, known CVEs, service tags, hostnames |\n| **email** | SPF record, DMARC policy |\n| **web** | HTTP status, server, CDN / WAF, security headers (HSTS, CSP, X-Frame, nosniff) |\n| **reputation** | blocklist status, Tor-exit detection |\n| **history** | Wayback archive URL + timestamp |\n| **assessment** | derived `flags[]` — a one-glance risk roll-up |\n| **meta** | schema version + per-category coverage map |\n\n### Example `assessment.flags`\n\n```json\n[\"dnssec-missing\", \"spf-present\", \"dmarc-quarantine\",\n \"rpki-valid\", \"clean-blocklists\", \"behind-cloudflare\", \"open-ports-3\"]\n```\n\nScattered signals — DNSSEC, SPF / DMARC, RPKI, blocklists, CDN, open ports, CVEs — rolled into one scannable list.\n\n---\n\n## 🛡️ Built to never break\n\n- **Fail-open by design.** Any single source can time out or go dark — the dossier still returns, that field simply degraded. No partial crashes, no dropped runs.\n- **Always-valid schema.** Every response conforms to `schema v2.0` — even malformed input or an internal hiccup returns the full shape, never an empty `[]`. Safe to parse blind.\n- **SSRF-guarded.** Private, loopback, link-local, and cloud-metadata targets are refused; only public hosts are ever probed.\n- **Bounded latency.** Per-source timeouts keep every call fast and predictable.\n\nVerified green across a broad matrix — major domains, raw IPs, `.co.uk`, and non-existent hosts (which return a clean \"not found\" dossier, not an error).\n\n---\n\n## ⚡ Coverage & use\n\n`network` · `geo` · `dns` · `email` · `registration` · `reputation` · `exposure` · `web` · `history` — with a `meta.sources_ok` map on every response so you always know which dimensions resolved.\n\nIdeal for **security triage**, **domain due diligence**, **attack-surface mapping**, and **agent enrichment pipelines** — one x402 call to hydrate any host or domain.\n\n---\n\n**POST** `{ \"query\": \"<ip | domain | url>\" }` → a complete dossier in one response. Two free trial runs, then $0.001 each over x402.\n",
"x402Support": true,
"registrations": [
{
"agentId": 60185,
"agentRegistry": "eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432"
}
],
"supportedTrust": [
"reputation"
]
}
Registrations
Cross-chain pointers from this agent's metadata back to its on-chain identity.
| Chain | Registry | Agent ID |
|---|---|---|
| Base Mainnet | 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432 | 60185 |
Services
-
webEndpoint
https://market.indie.money/service/8453/0xF843C445E70c9F1d87A528C48DCc13C8e74Af7DE
The ValidationRegistry contract is not yet deployed on Base Mainnet. Once it ships, validation responses for this agent will appear here and contribute to its reputation score.
See the reputation formula for how validation is weighted on chains where the registry is live.