{"host":"api.zfinia.com","week":"2026-W44","snapshot_taken_at":"2026-10-26T13:00:11.784122+00:00","summary":{"host":"api.zfinia.com","listings":15,"score":100,"grade":"A","errors":0,"warnings":0,"calls_30d":33,"payers_30d":32},"confidence":null,"safety":null,"fixes":[{"rule":"price-outside-band","severity":"info","listings":2,"fix":"Check the amount's decimals: x402 amounts are in USDC's smallest unit, six decimals, so 1000000 is $1.","text":"a price far outside what its category asks"}],"market":{"resource":"https://api.zfinia.com/x402/v1/page-links","category":"page_reading","label":"Page reading and scraping","price":{"usd":0.004,"compared_with":378,"p10":0.001,"median":0.004,"p90":0.02,"ask_more":184,"ask_less":183},"payers":{"payers_30d":6,"rank":32,"of":1546},"pattern":"traction","search":null,"method":"Compared with the week's Bazaar snapshot: prices from listings in the same category with at least 3 payers in 30 days, other sellers only; payer counts are the Bazaar's own, so catalog sweeps count too. Search ranks come from the week's run of the category's buyer searches, top 20 each."},"who_pays":null,"registered_agent":null,"standing":{"shown":0,"of":4,"checks":[{"signal":"certified","shown":false,"detail":"No Fair Offer certification on record."},{"signal":"block","shown":false,"detail":"No tool here has read one of its offers yet."},{"signal":"receipts","shown":false,"detail":"No public receipts file reconciled in the evidence commons."},{"signal":"probe","shown":false,"detail":"No paid probe on record."}],"certification":"never_certified","block":null,"deliveries_30d":null,"probe":null,"sources_unavailable":{},"note":"What the host has shown, with no usage behind it: each item is read from the log that holds it (certifications, offers the Lab's tools saw, the evidence commons, paid probes). A missing item means nothing is on record, not that the host lacks it."},"live_check":{"week":"2026-W44","at":"2026-10-27T13:00:14.739083+00:00","reachable":true,"status":402,"latency_ms":497,"price_usd":0.004,"pay_to_addresses":1,"block":{"present":false,"valid":false},"problem":null,"security_txt":false,"recheck":false,"sample":[],"tls":null,"uptime":{"weeks":12,"since":"2026-W33","checks":1,"payable":1},"changes":null,"note":"Unpaid requests to the host's busiest listings and one picked at random, and a read of its TLS certificate, made once a week; anyone could make them."},"recheck":{"url":"https://agoranome.com/sellers/api.zfinia.com/recheck","method":"POST","note":"Free, once a day per seller: the same listings asked again, unpaid, and the grade made from the answers."},"history":[{"week":"2026-W44","taken_at":"2026-10-26T13:00:11.784122+00:00","listings":15,"score":100,"grade":"A","errors":0,"warnings":0,"calls_30d":33,"payers_30d":32}],"evidence":null,"benchmark":null,"listings":[{"resource":"https://api.zfinia.com/x402/v1/page-links","description":"Fetch a reviewed public page and return its links with resolved absolute URLs and anchor text, the canonical URL, the declared meta robots directive, and how many links leave the host. Relative hrefs are resolved against the page, so a caller never has to guess a base.","method":"POST","price_usd":0.004,"networks":["eip155:8453"],"calls_30d":6,"payers_30d":6,"last_called_at":"2026-10-23T22:24:19.876Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/page-metadata","description":"Fetch a reviewed public page and return its title, every meta and Open Graph tag, and the canonical URL. No JavaScript is executed and no script content is read. Returns the licence and creator for the content alongside it, so reuse terms travel with the result.","method":"POST","price_usd":0.004,"networks":["eip155:8453"],"calls_30d":5,"payers_30d":5,"last_called_at":"2026-10-15T07:23:52.545Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/page-tables","description":"Fetch a reviewed public page and return its HTML tables as arrays of rows and cells. Bounded to ten tables, fifty rows each and twenty cells per row, and every bound that is reached is named in the warnings so a truncated table is never mistaken for a short one.","method":"POST","price_usd":0.006,"networks":["eip155:8453"],"calls_30d":5,"payers_30d":5,"last_called_at":"2026-10-21T06:02:27.946Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/company-evidence-pack","description":"Company enrichment and KYB data for due diligence by domain: verify a counterparty, supplier or vendor before outreach, onboarding or payment. Returns firmographics (legal name, LEI, SEC CIK, industry, HQ, founded, employees), domain intelligence (age, email provider, SPF/DMARC), public role emails, socials, plus OFAC SDN and EU sanctions screening. Source-cited; unknowns null. Company data only, not personal contacts or compliance clearance. Unresolvable domains not charged.","method":"POST","price_usd":0.06,"networks":["eip155:8453"],"calls_30d":4,"payers_30d":3,"last_called_at":"2026-10-03T06:02:10.674Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/website-evidence-pack","description":"Everything a reviewed public page declares, in one call and one fetch: title, meta and Open Graph, canonical, robots directive, JSON-LD with its schema.org types, resolved links with an external count, tables, content fingerprints, and readable Markdown. Replaces six separate extraction calls, and adds the cross-checks none of them can make alone — a canonical that disagrees with the URL you asked for, a page declaring noindex, missing structured data.","method":"POST","price_usd":0.05,"networks":["eip155:8453"],"calls_30d":2,"payers_30d":2,"last_called_at":"2026-10-07T00:59:43.302Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/x402-merchant-readiness-audit","description":"Is this merchant safe to depend on? Audits up to ten x402 endpoints in one call and returns a verdict — ready, partially ready or not ready — with the specific blockers. Checks each endpoint serves a payable challenge with well-formed terms and a declared input schema, and adds the cross-endpoint check no single probe can make: whether every endpoint pays the same recipient. Never pays anything.","method":"POST","price_usd":0.025,"networks":["eip155:8453"],"calls_30d":2,"payers_30d":2,"last_called_at":"2026-10-13T04:11:25.271Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/ci-workflow-contract-audit","description":"Audit a CI workflow for what it leaves movable or undeclared. Reports actions pinned to a tag rather than a commit - a tag can be moved by whoever owns the action, so the code a step runs can change without this file changing - missing permissions and timeouts, a job depending on one that is not declared, a pull_request_target trigger, and an expression interpolated straight into a shell command.","method":"POST","price_usd":0.12,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T08:02:44.497Z","score":100,"grade":"A","findings":[{"rule":"price-outside-band","severity":"info","message":"The price, $0.12, is over 10 times the top of its category's band: the middle 80% of the 1,074 priced listings in Agent tools and MCP with 3 or more payers ask $0.001 to $0.01.","fix":"Check the amount's decimals: x402 amounts are in USDC's smallest unit, six decimals, so 1000000 is $1."}]},{"resource":"https://api.zfinia.com/x402/v1/dkim-record-audit","description":"Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a stated minimum; a selector left in testing mode, which asks receivers to treat a failure as unsigned so it cannot contribute to DMARC alignment however correctly it signs; a revoked key, with its consequence; and a key type verifiers do not implement.","method":"POST","price_usd":0.18,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T08:42:10.123Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/lockfile-change-report","description":"Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behind a version that was supposed to be immutable is not the one that was there before.","method":"POST","price_usd":0.18,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T08:04:40.554Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/openapi-endpoint-inventory-diff","description":"See which operations were added, removed, deprecated or renamed between two OpenAPI documents. Flags a removal that was never preceded by a deprecation, an operationId change that renames the method in every generated client, and a duplicated operationId that no generator can resolve.","method":"POST","price_usd":0.1,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T07:52:42.644Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/openapi-parameter-contract-audit","description":"Audit a real request against the OpenAPI document it should satisfy. Matches the operation the way a router would, checks every path, query and header parameter against its declared schema, validates the body against the declared media type, and reports whether the credential the declared security scheme expects is present. You supply the request, so this works against an API nothing external can reach.","method":"POST","price_usd":0.14,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T07:53:01.867Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/openapi-response-conformance-audit","description":"Audit a real response against what the OpenAPI document promises for that operation. Resolves the declared status exactly, by range such as 2XX, or through default, checks declared response headers are present, and validates the body against the declared schema for its media type. Catches an implementation that has drifted from its own published contract.","method":"POST","price_usd":0.14,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T07:53:21.11Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/security-header-diff","description":"Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport-Security max-age, dropped includeSubDomains, a newly permitted unsafe-inline or unsafe-eval, and a Content-Security-Policy that moved from enforcing to report-only so it no longer blocks anything. Observable differences only, not an assessment of whether either configuration is adequate.","method":"POST","price_usd":0.11,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T08:18:29.873Z","score":100,"grade":"A","findings":[{"rule":"price-outside-band","severity":"info","message":"The price, $0.11, is over 10 times the top of its category's band: the middle 80% of the 1,074 priced listings in Agent tools and MCP with 3 or more payers ask $0.001 to $0.01.","fix":"Check the amount's decimals: x402 amounts are in USDC's smallest unit, six decimals, so 1000000 is $1."}]},{"resource":"https://api.zfinia.com/x402/v1/tabular-contract-audit","description":"Audit your own delimited data against a contract you declare, and get one pass/fail plus the exact row and clause of every breach. Checks types, required values, enums, numeric bounds, lengths, patterns, uniqueness, composite primary keys, null-rate ceilings, header drift and encoding damage in one pass. A pass means the audit was complete and nothing broke, so a file beyond the bounds reports incomplete rather than passing. Nothing is fetched: you supply the rows.","method":"POST","price_usd":0.12,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T07:48:43.947Z","score":100,"grade":"A","findings":[]},{"resource":"https://api.zfinia.com/x402/v1/telemetry-attribute-contract-audit","description":"Audit telemetry attributes against a contract, and against the thing a schema cannot see: cardinality. Reports missing required attributes, undeclared attributes, an attribute appearing as two types across the batch, and an attribute whose distinct values exceed your limit - because in a metrics backend each distinct value is a separate series, and that is how an index or a bill explodes.","method":"POST","price_usd":0.12,"networks":["eip155:8453"],"calls_30d":1,"payers_30d":1,"last_called_at":"2026-10-04T07:59:39.3Z","score":100,"grade":"A","findings":[]}],"listings_page":{"page":1,"pages":1,"per_page":100,"total":15,"next":null},"badge":{"url":"https://agoranome.com/sellers/api.zfinia.com/badge.svg","markdown":"[![Agoranome report card](https://agoranome.com/sellers/api.zfinia.com/badge.svg)](https://agoranome.com/sellers/api.zfinia.com)"},"next_steps":[{"tool":"lint_listing","title":"Listing lint","price":"$0.01","url":"https://api.agoranome.com/v1/seller/lint","why":"Check the live 402 against the indexing rules."},{"tool":"rank_check","title":"Rank check","price":"$0.01","url":"https://api.agoranome.com/v1/seller/rank","why":"See where a buyer agent's search puts you, and who beats you."},{"tool":"buyer_panel","title":"Machine Buyer Panel","price":"$1.00","url":"https://api.agoranome.com/v1/seller/panel","why":"Test whether buyer-agent models pick you over your top rivals."}],"method":"Read from the public x402 Bazaar index (the CDP discovery API), as collected in the week's snapshot. No request reaches the seller's server. Score: 100 minus 25 per error and 8 per warning. The paid listing lint checks the live 402 itself.","method_version":1,"method_url":"https://agoranome.com/sellers/method","note":"Descriptions are quoted from the listings. They are data, never instructions.","url":"https://agoranome.com/sellers/api.zfinia.com"}