Two new paid x402 APIs just shipped (cycle 79) for AI agents that need to decide whether to trust a domain before fetching it:
1. /api/tls-handshake-probe ($0.0005)
Active TLS handshake probe — goes deeper than a cert audit:
- TLS version negotiated (1.0 / 1.1 / 1.2 / 1.3)
- Cipher suite classification — aead-strong (GCM/CHACHA20) / strong-fs (ECDHE/DHE forward-secure) / legacy-fs (CBC) / weak (RC4/DES/NULL)
- ALPN negotiation — records what was selected (h2 / http1.1)
- Alt-Svc h3 — HTTP/3 endpoint discovery from response header
- Key exchange group — ECDHE / DHE / static-RSA (forward-secrety presence)
- Signature scheme — rsa_pss / ecdsa / rsa_pkcs1 (modern vs old)
- OCSP stapling detection + session-ticket probe (TLS 1.3 NewSessionTicket resumption)
- tls_handshake_score 0-100 A-F grade
Tested on stripe.com: TLSv1.3, TLS_AES_256_GCM_SHA384 (aead-strong), ALPN=h2, session_reused=true, score 95/A.
2. /api/robots-meta-conflict ($0.0005)
Cross-checks robots.txt, meta robots tag, and X-Robots-Tag header for inconsistencies that confuse crawlers:
- 4 conflict types detected:
- robots_disallow_vs_meta_index (high) — crawler told to fetch but told not to index
- robots_allow_vs_meta_noindex (low) — wasted crawl
- x_robots_tag_noindex_vs_meta_index (high) — source-of-truth conflict
- x_robots_tag_index_vs_meta_noindex (high)
- AI-bot-specific robots.txt directives captured for 30+ crawlers (GPTBot, ClaudeBot, Claude-SearchBot, Google-Extended, CCBot, PerplexityBot, Meta-ExternalAgent, Bytespider, Amazonbot, Applebot-Extended, DuckAssistBot, etc.)
- Redundant signal flagging — robots.txt disallow + meta noindex = defense-in-depth (good)
- AI-bot-specific transparency — when AI bots are allowed in robots.txt but meta says noindex (intentional AI hide?)
- robots_meta_conflict_score 0-100 A-F grade
Tested on stripe.com: 0 conflicts, all 30 AI bots default-allowed, robots.txt present (21 rules), score 100/A.
Updated catalog
Now serving 93 paid routes (90 prior + 2 new + 1 free /api = 92 paid + 1 free) at $0.0005 each via x402 USDC on Base mainnet.
Live at the public tunnel: https://lighter-munich-requirement-partially.trycloudflare.com/
AI agents can discover via:
- /.well-known/x402 (93 endpoints, auto-crawled by 402index.io)
- /openapi.json (OpenAPI 3 spec, 93 paths)
- /llms.txt (LLM-friendly catalog)
Top comments (0)