Fabler Labs machine store (x402 API)

Endpoints (21 live)

• GET /market/funding-spreads — Compare current perpetual funding rates across Binance, Bybit, Hyperliquid, and, for single-symbol requests, OKX. Returns interval-normalized annualized rates, gross cross-venue spreads, source status, mark prices when available, and funding timestamps. Optional symbol query; no symbol returns the ten widest current spreads. Market data only, not financial advice. (0.001 USDC on Base)
• GET /scrape — Scrapes web pages and returns extracted content from a given URL. (0.005 USDC on Base)
• POST /scan/secrets — Scans for exposed secrets and credentials in content or code. (0.005 USDC on Base)
• GET /buy/pre-deploy-security-checklist — Generates a security checklist to review before deploying contracts or apps. (0.1 USDC on Base)
• POST /audit/url-security — Create a bounded security evidence snapshot for a public HTTPS URL. Checks status, validated redirect chain, HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and cookie flags without retaining response-body content. Response metadata only; not a vulnerability scan or TLS-certificate audit. (0.08 USDC on Base)
• GET /audit/url-security — Create a bounded security evidence snapshot for a public HTTPS URL. Checks status, validated redirect chain, HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and cookie flags without retaining response-body content. Response metadata only; not a vulnerability scan or TLS-certificate audit. (0.08 USDC on Base)
• POST /audit/pre-deploy — Validate a partial or complete 18-point pre-deploy security review record. Reports missing checks, failed checks, and blank evidence, and returns ready only when every required item is accounted for. This is an evidence-completeness gate, not a code scan or security guarantee. (0.08 USDC on Base)
• POST /audit/agent-config — Audit a CLAUDE.md or CONSTITUTION.md for the failure modes that break unattended AI agents (money caps, the data-vs-instructions boundary, kill conditions). (0.05 USDC on Base)
• POST /market/krw-prices — Compare a spot KRW price for one symbol across Upbit and Bithumb's public, account-free ticker APIs. Required symbol (1-10 letters/digits, uppercase-normalized); optional exchange (all, upbit, or bithumb; default all). Returns per-exchange price, rolling 24h volume and notional, normalized change rate with its exchange-specific basis, and upstream timestamp, plus an absolute/percent spread when both exchanges succeed. At least one requested exchange must return a fresh, well-formed quote or the call fails and does not settle. POST compatibility method for agent directories and buyers that cannot originate GET payments; a field supplied in both the query string and the JSON body is rejected as ambiguous. (0.001 USDC on Base)
• GET /market/krw-prices — Compare a spot KRW price for one symbol across Upbit and Bithumb's public, account-free ticker APIs. Required symbol (1-10 letters/digits, uppercase-normalized); optional exchange (all, upbit, or bithumb; default all). Returns per-exchange price, rolling 24h volume and notional, normalized change rate with its exchange-specific basis, and upstream timestamp, plus an absolute/percent spread when both exchanges succeed. At least one requested exchange must return a fresh, well-formed quote or the call fails and does not settle. (0.001 USDC on Base)
• POST /render/og — Render a 1200x630 Open Graph card PNG from a title and subtitle. (0.01 USDC on Base)
• GET /buy/agent-kit — autonomous-agent-starter-kit.zip — Autonomous Agent Starter Kit — CONSTITUTION template, safety rails, and supervisor pattern for unattended AI agents. (29 USDC on Base)
• POST /market/polymarket/activity — Track what any Polymarket wallet is buying and selling — point your agent at a smart-money or whale address and get its public trades as a signal feed for copy-trading or market research, with no Polymarket account or API key. Reads the official account-free Polymarket Data API (data-api.polymarket.com/activity) for one strict 0x wallet address; optional bounded limit (default 25, max 100), offset (max 10,000), activity type, BUY/SELL side, start/end unix-second window, sortBy, and sortDirection. Returns sanitized activity rows — each with type, side, size, usdc_size, price, outcome, market title and slug, transaction hash, and unix timestamp — and drops name, pseudonym, bio, and profile images. Read-only; Fabler Labs is not affiliated with Polymarket; no betting execution, custody, or wager recommendation. Upstream failures, timeouts, oversized responses, and malformed or drifted schemas return non-2xx and do not settle. POST compatibility method for agent directories and buyers that cannot originate GET payments; a field supplied in both the query string and the JSON body is rejected as ambiguous. (0.001 USDC on Base)
• GET /buy/ai-coding-security-pack-v1 — ai-coding-security-pack.zip — AI Coding Security Pack — 5 subagents, slash commands, and checklists that catch injection, broken-authorization, and secrets bugs before they reach a PR. (29 USDC on Base)
• POST /market/funding-spreads — Compare current perpetual funding rates across Binance, Bybit, Hyperliquid, and, for single-symbol requests, OKX. Returns interval-normalized annualized rates, gross cross-venue spreads, source status, mark prices when available, and funding timestamps. Optional symbol query; no symbol returns the ten widest current spreads. Market data only, not financial advice. POST compatibility method for agent directories and buyers that cannot originate GET payments. (0.001 USDC on Base)
• POST /nft/owner — Look up the current owner of one ERC-721 token on Base with ownerOf(uint256). Accepts a strict contract address and uint256 decimal token ID, performs one read-only eth_call with bounded public-RPC fallback, and returns the normalized owner address. Reverts, non-contracts, nonexistent tokens, malformed responses, and upstream failures return non-2xx and do not settle. POST compatibility method for agent directories and buyers that cannot originate GET payments. (0.003 USDC on Base)
• GET /buy/constitution-packs-v1 — agent-constitution-pack.zip — Agent Constitution Pack — seven annotated CONSTITUTION.md files for common autonomous-agent business types. (19 USDC on Base)
• GET /buy/pack — ai-coding-workflow-pack.zip — AI Coding Workflow Pack — subagents, slash commands, and rules-file addenda for Claude Code and other AI coding tools. (24 USDC on Base)
• GET /nft/owner — Look up the current owner of one ERC-721 token on Base with ownerOf(uint256). Accepts a strict contract address and uint256 decimal token ID, performs one read-only eth_call with bounded public-RPC fallback, and returns the normalized owner address. Reverts, non-contracts, nonexistent tokens, malformed responses, and upstream failures return non-2xx and do not settle. (0.003 USDC on Base)
• GET /market/polymarket/activity — Track what any Polymarket wallet is buying and selling — point your agent at a smart-money or whale address and get its public trades as a signal feed for copy-trading or market research, with no Polymarket account or API key. Reads the official account-free Polymarket Data API (data-api.polymarket.com/activity) for one strict 0x wallet address; optional bounded limit (default 25, max 100), offset (max 10,000), activity type, BUY/SELL side, start/end unix-second window, sortBy, and sortDirection. Returns sanitized activity rows — each with type, side, size, usdc_size, price, outcome, market title and slug, transaction hash, and unix timestamp — and drops name, pseudonym, bio, and profile images. Read-only; Fabler Labs is not affiliated with Polymarket; no betting execution, custody, or wager recommendation. Upstream failures, timeouts, oversized responses, and malformed or drifted schemas return non-2xx and do not settle. (0.001 USDC on Base)

+1 more endpoint.