{"x402Version":2,"category":"Security","serviceName":"cheetahsecurity agent firewall","capabilities":{"categories":[{"key":"prompt-injection-scan","label":"Scan untrusted text (post/comment/DM, tool output, web content) for prompt-injection / jailbreak before your agent acts on it"}],"transport":["https-json"]},"discovery":{"x402Version":2,"resources":[{"resource":"https://x402.cheetahsecurity.de/scan","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"20000"}],"extensions":{"bazaar":{"info":{"title":"Agent Input-Firewall","description":"Scan untrusted text (a post/comment/DM, tool result, web content) for prompt-injection / jailbreak before your agent acts on it. Self-hosted detection, no data sharing. Every verdict comes with the injection patterns found (or their absence) and a confidence flag, so you can tell a corroborated detection from a bare model hit."},"schema":{"input":{"type":"object","properties":{"text":{"type":"string"}},"required":["text"]},"output":{"type":"object","properties":{"safe":{"type":"boolean"},"verdict":{"type":"string","description":"clean | suspicious | prompt_injection_detected"},"risk_score":{"type":"number","description":"0 (clean) … 1 (detected)"},"confidence":{"type":"string","description":"low when the ML verdict and the injection-pattern evidence disagree"},"signals":{"type":"object"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/url-check","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"10000"}],"extensions":{"bazaar":{"info":{"title":"Agent URL Reputation","description":"Check a URL/domain for phishing/malware risk before your agent opens or fetches it. Self-hosted heuristic: domain age (RDAP), abuse TLDs, IP-literal hosts, punycode/homograph, phishing hostname patterns. Returns risk_score + verdict + explainable signals."},"schema":{"input":{"type":"object","properties":{"url":{"type":"string"}},"required":["url"]},"output":{"type":"object","properties":{"url":{"type":"string"},"risk_score":{"type":"number"},"verdict":{"type":"string"},"signals":{"type":"object"},"reasons":{"type":"array"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/trust","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"20000"}],"extensions":{"bazaar":{"info":{"title":"Agent Trust / Reputation lookup","description":"Score a counterpart agent's Base wallet before doing business with it. On-chain heuristic (wallet age, tx count, ETH/USDC funds, contract status) plus our escrow dispute history. Returns a 0-1 trust score plus a PROCEED / CAUTION / BLOCK band — or UNKNOWN when the wallet has no activity on Base at all, because finding nothing is not an adverse finding. Explainable signals included."},"schema":{"input":{"type":"object","properties":{"agent":{"type":"string","description":"Base EVM address (0x + 40 hex)"}},"required":["agent"]},"output":{"type":"object","properties":{"agent":{"type":"string"},"trust_score":{"type":"number"},"band":{"type":"string"},"signals":{"type":"object"},"reasons":{"type":"array"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/screen","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"50000"}],"extensions":{"bazaar":{"info":{"title":"Agent AML / counterparty screening","description":"Screen a Base agent wallet for AML risk before sending it funds: OFAC sanctions (direct hit + exposure via recent on-chain counterparties, which covers mixers), our scam/dispute list, and wallet-history signals. Returns a 0-1 risk_score + CLEAR/REVIEW/BLOCK verdict + explainable signals & sources."},"schema":{"input":{"type":"object","properties":{"agent":{"type":"string","description":"Base EVM address (0x + 40 hex)"}},"required":["agent"]},"output":{"type":"object","properties":{"address":{"type":"string"},"risk_score":{"type":"number"},"verdict":{"type":"string"},"signals":{"type":"object"},"reasons":{"type":"array"},"sources":{"type":"array"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/v1/scan","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"20000"}],"extensions":{"bazaar":{"info":{"title":"Agent Input-Firewall","description":"Scan untrusted text (a post/comment/DM, tool result, web content) for prompt-injection / jailbreak before your agent acts on it. Self-hosted detection, no data sharing. Every verdict comes with the injection patterns found (or their absence) and a confidence flag, so you can tell a corroborated detection from a bare model hit."},"schema":{"input":{"type":"object","properties":{"text":{"type":"string"}},"required":["text"]},"output":{"type":"object","properties":{"safe":{"type":"boolean"},"verdict":{"type":"string","description":"clean | suspicious | prompt_injection_detected"},"risk_score":{"type":"number","description":"0 (clean) … 1 (detected)"},"confidence":{"type":"string","description":"low when the ML verdict and the injection-pattern evidence disagree"},"signals":{"type":"object"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/v1/url-check","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"10000"}],"extensions":{"bazaar":{"info":{"title":"Agent URL Reputation","description":"Check a URL/domain for phishing/malware risk before your agent opens or fetches it. Self-hosted heuristic: domain age (RDAP), abuse TLDs, IP-literal hosts, punycode/homograph, phishing hostname patterns. Returns risk_score + verdict + explainable signals."},"schema":{"input":{"type":"object","properties":{"url":{"type":"string"}},"required":["url"]},"output":{"type":"object","properties":{"url":{"type":"string"},"risk_score":{"type":"number"},"verdict":{"type":"string"},"signals":{"type":"object"},"reasons":{"type":"array"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/v1/reputation","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"30000"}],"extensions":{"bazaar":{"info":{"title":"Agent Bulk URL Reputation","description":"Vet a batch of URLs/domains for phishing/malware risk in a single call — for research/commerce agents checking many links or merchants at scale. Same self-hosted heuristic as /v1/url-check (RDAP domain age, abuse TLDs, IP-literal/punycode hosts, phishing patterns); returns a per-url verdict plus an aggregate malicious/suspicious/safe summary."},"schema":{"input":{"type":"object","properties":{"urls":{"type":"array","items":{"type":"string"}}},"required":["urls"]},"output":{"type":"object","properties":{"count":{"type":"number"},"summary":{"type":"object"},"results":{"type":"array"}}}}}}},{"resource":"https://x402.cheetahsecurity.de/skill-check","type":"http","accepts":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x0CEb89C3aDD0eB15Ad3ECdB09C8fEa3D5C96dCF5","maxAmountRequired":"50000"}],"extensions":{"bazaar":{"info":{"title":"Agent Skill Pre-Install Check","description":"Statically analyse a skill/tool package BEFORE your agent installs it: RCE and curl|bash patterns, reverse shells, secret exfiltration, destructive commands, obfuscation, over-broad permissions, plus reputation of every referenced URL and an injection scan of the description. Returns VERIFIED/FAILED with an evidence-backed violations list.","input":{"type":"http","method":"POST","bodyType":"json","body":{"skill_md":"# Markdown Formatter\nFormats markdown tables. No network access.","requested_permissions":["read:text"]}}},"schema":{"input":{"type":"object","properties":{"skill_md":{"type":"string"},"urls":{"type":"array","items":{"type":"string"}},"scripts":{"type":"array","items":{"type":"string"}},"requested_permissions":{"type":"array","items":{"type":"string"}}},"required":["skill_md"]},"output":{"type":"object","properties":{"verdict":{"type":"string"},"risk_score":{"type":"number"},"violations":{"type":"array"},"signals":{"type":"object"}}}}}}}]}}