Electronic Signature & Document Trust API

Document TrustElectronic SignaturePDFCertificatesx402

Locally verify PDF signature structure, certificate chains, timestamps, tamper evidence, coverage, revocation lists, multi-signer audits, and evidence bundles—while distinguishing technical verification from legal enforceability.

API Documentation
POST/api/v1/document-trust/pdf-digital-signature-verify$0.05 USDC

Inspect PDF /Sig dictionaries and optional detached signatures locally. Technical verification is not legal enforceability.

POST/api/v1/document-trust/signature-certificate-chain-validate$0.04 USDC

Parse supplied X.509 certificates and check validity windows and issuer links locally. Not a legal trust determination.

POST/api/v1/document-trust/signature-timestamp-validate$0.03 USDC

Check PDF /M timestamps and caller-supplied signer signedAt values against asOf and optional certificate windows.

POST/api/v1/document-trust/signed-tamper-detect$0.04 USDC

Compare current PDF hashes and ByteRange digests to caller-supplied expectations. Missing expectations are not invented.

POST/api/v1/document-trust/signature-coverage-check$0.03 USDC

Measure ByteRange coverage over supplied PDF bytes for each signature field found locally.

POST/api/v1/document-trust/signature-revocation-status-check$0.03 USDC

Compare certificate serials to caller-supplied revocation entries only. Live commercial OCSP/CRL networks are not queried.

POST/api/v1/document-trust/contract-signed-version-match$0.04 USDC

Compare sha256 digests and version labels across supplied signed PDF copies. Differing hashes are reported, not invented.

POST/api/v1/document-trust/multi-signer-audit$0.04 USDC

List PDF signature dictionaries and caller-supplied signers per document. Technical listing is not legal enforceability.

POST/api/v1/document-trust/evidence-bundle-build$0.07 USDC

Bundle local signature, certificate, timestamp, tamper, coverage, and revocation checks with an explicit technical-vs-legal distinction.

POST/api/v1/document-trust/electronic-trust-report$0.08 USDC

Aggregate local signature, chain, timestamp, tamper, coverage, revocation, version, and multi-signer findings. Distinguishes technical verification from legal enforceability.

Other products in this area. Open one for its resources and price.

CVE & Dependency Security API

Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard.

SecurityVulnerabilitiesCVEDependencyx402

Software Supply Chain Security API

Independent SBOM and dependency checks for exact package versions: OSV advisory ranges, CISA KEV exposure, open-source licence policy, and publicly documented malicious-package advisories.

SecuritySBOMDependenciesLicencesx402

Malware & File Threat Intelligence API

Extract behaviour indicators, cluster artifacts, analyze executable metadata, detect macro/document risk, extension mismatches, suspicious script patterns, archive payload risks, and IoCs—using local static parsing of caller-supplied files and analysis reports only.

MalwareFile SecurityIoCStatic AnalysisArchivesx402

Threat Intelligence & Public Signals API

Aggregate verified key-free public threat feeds, enrich IoCs, analyze domain history, cluster certificate and phishing infrastructure, detect typosquats, review exposed-service inventory, and score indicator confidence—without API keys, paid providers, or intrusive scanning.

Threat IntelligenceIoCPhishingCertificatesDNSx402

Cybersecurity Configuration Intelligence API

Read security headers, TLS, cookies, CORS, and CSP from a public URL or from configuration supplied by the caller. Listed paths are the only extra resources requested.

SecurityHeadersTLSx402