x402-url-to-markdown / tree / src/trustkit.js ยท raw (this view has old GitHub links rewritten for the mirror; raw is byte-exact)
// "Agent trust kit" block shared by the agentgate-builder services' landing pages (keep in sync across repos).
export const TRUST_KIT = [
  { name: 'AgentGate', url: 'https://agentgate.agentgate.workers.dev', price: '$0.005', what: 'Is this AI agent who it says it is? Checks the Concordium Agent Registry (CIS-8004): registered, Active, Verified.' },
  { name: 'WebRead', url: 'https://webread.agentgate.workers.dev', price: '$0.002', what: 'Read any public web page as clean Markdown (robots.txt-aware, SSRF-safe).' },
  { name: 'InjectScan', url: 'https://injectscan.agentgate.workers.dev', price: '$0.003', what: 'Scan text, pages and MCP tool definitions for prompt injection before your agent acts on them.' },
  { name: 'DomainCheck', url: 'https://domaincheck.agentgate.workers.dev', price: '$0.002', what: 'Is this domain or email real and trustworthy? DNS, SPF/DMARC, registration age (RDAP), disposable and parked detection, risk score.' },
  { name: 'PayGuard', url: 'https://payguard.agentgate.workers.dev', price: '$0.001', what: 'Is this crypto address on the US Treasury OFAC SDN list? Exact match with entity, program and list date, plus chain and checksum.' },
  { name: 'PkgGuard', url: 'https://pkgguard.agentgate.workers.dev', price: '$0.003', what: 'Is this dependency safe to install? Known vulnerabilities (CVE/GHSA, severity, fixed-in) and confirmed-malicious packages for a manifest or lockfile.' },
];
export function trustKitHtml(current, esc = (s) => s) {
  const cards = TRUST_KIT.map((t) => `<div class="card"><h3>${t.name === current ? esc(t.name) + ' <span style="color:var(--muted)">(this service)</span>' : `<a href="${esc(t.url)}">${esc(t.name)}</a>`}</h3><p>${esc(t.what)} <b>${esc(t.price)}</b>/call, free tier + remote MCP.</p></div>`).join('');
  return `<h2 id="trust-kit">Agent trust kit</h2>
  <p style="color:var(--muted)">Six small x402 tools for agents that act on outside input: verify <i>who</i> (AgentGate), read <i>what</i> (WebRead), check it is <i>safe to follow</i> (InjectScan), check the <i>domain or email</i> behind it (DomainCheck), screen the <i>wallet</i> before paying it (PayGuard), and check the <i>code</i> before installing it (PkgGuard). Same wallet-free free tiers, same pay-per-call USDC on Base.</p>
  <div class="grid">${cards}</div>`;
}

agentgate-source: code mirror on Cloudflare Pages. All repos