{"service":"Verbo Media x402 API","provider":"Verbo Media (https://verbomedia.com)","payment":{"protocol":"x402 v2","network":"eip155:84532","asset":"USDC","facilitator":"https://x402.org/facilitator","testnet":true},"endpoints":[{"url":"https://api.verbomedia.com/v1/site-check","methods":["GET","POST"],"price_usd":"$0.02","description":"Use when you need a quick health and security check of a public website, especially WordPress. Returns HTTP status, TLS certificate validity and expiry, WordPress version and plugin versions exposed in public pages, present and missing security headers, response time, and a severity-ranked findings list. Passive: at most 5 light requests, no logins, no brute force. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"url":{"type":"string","description":"Public http(s) URL or bare domain of the site to check, e.g. https://example.com"}},"required":["url"]},"example_input":{"url":"https://example.com"}},{"url":"https://api.verbomedia.com/v1/email-auth","methods":["GET"],"price_usd":"$0.005","description":"Use before sending email from a domain or when mail lands in spam: checks SPF (syntax, lookup count, 'all' policy), DMARC (policy, pct, reporting), DKIM keys on 21 common selectors (plus an optional custom selector), MX, MTA-STS, TLS-RPT and BIMI, then returns a 0-100 score, A-F grade and fix-oriented findings. DNS lookups only; no mail is sent. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"domain":{"type":"string","description":"Domain to check, e.g. example.com"},"selector":{"type":"string","description":"Optional extra DKIM selector to test"}},"required":["domain"]},"example_input":{"domain":"example.com"}},{"url":"https://api.verbomedia.com/v1/domain","methods":["GET"],"price_usd":"$0.01","description":"Use when you need everything about a domain in one call instead of three: DNS records (A, AAAA, NS, MX, CAA, SOA, TXT), registration data from the registry's RDAP server (registrar, created, expiry date, status locks, DNSSEC) and the TLS certificate served on port 443 (issuer, SANs, days left, trust). Flags expiring registrations or certificates, missing locks and single-nameserver setups. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"domain":{"type":"string","description":"Domain or hostname, e.g. example.com (alias: d)"}},"required":["domain"]},"example_input":{"domain":"example.com"}},{"url":"https://api.verbomedia.com/v1/agent-ready","methods":["GET"],"price_usd":"$0.02","description":"Use to find out whether AI agents and AI crawlers can read, cite and pay a website: checks /llms.txt (presence and format), robots.txt rules for 17 AI crawlers (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, PerplexityBot, Google-Extended, CCBot and more), JSON-LD structured data on the home page, noindex/noai directives, and whether the site advertises x402 payments (/.well-known/x402 or 402 responses). Returns a 0-100 score and findings. Max 5 requests. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"url":{"type":"string","description":"Public http(s) URL or bare domain of the site, e.g. https://example.com"}},"required":["url"]},"example_input":{"url":"https://example.com"}},{"url":"https://api.verbomedia.com/v1/x402-check","methods":["GET"],"price_usd":"$0.005","description":"Use to verify that a paid API endpoint returns a valid x402 Payment Required response without paying it: probes the URL unpaid and checks the HTTP 402 status, PAYMENT-REQUIRED header or v1 JSON body, x402 version, scheme, CAIP-2 network, atomic amount and USD price, USDC asset address, payTo address, EIP-712 token domain, description quality, Bazaar discovery metadata (input schema, output example) and CORS exposure. Returns valid true/false plus findings. Nothing is signed or paid. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"url":{"type":"string","description":"Public https URL of the x402-protected endpoint"},"method":{"type":"string","enum":["GET","POST"],"description":"HTTP method for the probe (default GET)"}},"required":["url"]},"example_input":{"url":"https://api.example.com/v1/report"}},{"url":"https://api.verbomedia.com/v1/wp-risk-check","methods":["GET"],"price_usd":"$0.015","description":"Use to see which known vulnerabilities (CVEs) match the WordPress core, plugin and theme versions a site exposes publicly: fingerprints versions from the home page, ?ver= asset strings and readme.html, looks them up in the WPVulnerability database (CC0), and adds PHP end-of-life status from the X-Powered-By header, public exposures (REST user listing, readme.html, xmlrpc.php, MCP REST namespace), HSTS/CSP/X-Frame-Options and DMARC, with a 0-100 score. Passive only: max 5 ordinary GET requests, no logins, no exploit attempts or vulnerability probes. Results are 'known issues for the exposed version' since hosts often backport fixes. Errors (never charged): 400 invalid or non-public target, 429 rate limited, 502 target unreachable.","input_schema":{"type":"object","properties":{"url":{"type":"string","description":"Public http(s) URL or bare domain of a WordPress site, e.g. https://example.com"}},"required":["url"]},"example_input":{"url":"https://example.com"}}],"errors":{"400":"invalid or non-public target (not charged)","402":"payment required (x402)","429":"rate limited","502":"target unreachable (not charged)"},"contact":"contas@verbomedia.com","terms":"https://api.verbomedia.com/terms","fix_offer":{"text":"Problems found? Fixed-price website / WordPress repair by Verbo Media (R$790, delivered in 7 days)","url":"https://verbomedia.com/comprar/"}}