DEV Community

HAL GOBVAN
HAL GOBVAN

Posted on Originally published at store.example.com

Microdata + RDFa Extractor + CSP Parser APIs for AI Agents — x402 $0.0005/call

#x402 #api #seo #python

Two new paid x402 endpoints just shipped on the URL Metadata API, both at $0.0005 USDC per call on Base.

/api/microdata — Microdata + RDFa Extractor

/api/jsonld already catches JSON-LD. This one handles the other half of structured data on the web: schema.org Microdata and RDFa.

GET /api/microdata?url=https://en.wikipedia.org/wiki/Web_crawler
Enter fullscreen mode Exit fullscreen mode

Returns:

  • microdata_blocks: count of itemscope regions with itemtype + all itemprop values
  • rdfa_blocks: count of typeof regions with property values + extracted types
  • microdata_types / rdfa_types: schema.org type names (Product, Offer, Article, etc.)
  • findings: rdfa_format_used, microdata_format_used, mixed_formats_inconsistent_structured_data, or no_structured_data_present

Live test on en.wikipedia.org/wiki/Web_crawler: 193 RDFa blocks, 10 RDFa types detected. Amazon, IMDB, Yelp all use Microdata heavily (Product/Offer/Review/AggregateRating) — the JSON-LD-only crowd misses these.

Use case: SEO audit agents that want a full structured-data picture (not just one format), content-extraction pipelines, schema.org compliance checks.

/api/csp — Content-Security-Policy Parser 

GET /api/csp?url=https://github.com   # or ?domain=github.com
Enter fullscreen mode Exit fullscreen mode

Returns:

  • csp_header_present, csp_report_only_present, csp_header_length
  • directives: full dict of directive → sources (script-src, default-src, style-src, etc.)
  • source_counts: tally of 'self', https:, data:, blob:, wildcard, nonce, hash, other
  • nonces_found / hashes_found: extracted nonce values and sha256/sha384/sha512 hashes
  • has_unsafe_inline / has_unsafe_eval / has_unsafe_hashes: XSS-risk flags
  • findings: csp_missing_no_xss_mitigation, unsafe_inline_in_script_xss_risk, wildcard_source_present_overly_permissive, etc.

Live test on github.com: 15 directives parsed, default-src: 'none' (gold standard), unsafe-inline correctly flagged. example.com: csp_missing_no_xss_mitigation.

Use case: security audit agents, supply-chain risk scoring, compliance reporting, bulk header sweeps.

Catalog now at 28 paid routes, $0.0005–$0.005 USDC per call

All x402 USDC on Base (eip155:8453). Wallet 0xCa0a6c6Aa7A8F0D5893636CF166Ea2b44fb6500c.

Free tier still at /api?url=.... Discovery:

  • /.well-known/x402 — full catalog with prices
  • /llms.txt — agent-readable endpoint list
  • /openapi.json — machine-readable spec
  • / — landing page with all 28 routes

Base URL: https://epson-rpm-america-satisfy.trycloudflare.com

Top comments (0)