{"openapi": "3.1.0", "info": {"title": "RelayShield API", "version": "1.0", "summary": "Threat intelligence and identity-compromise APIs for developers and AI agents.", "description": "RelayShield exposes breach, infostealer, SIM-swap, domain-lookalike, LLM credential exposure and MCP registry risk checks over a metered REST API. The same corpus is available as a STIX/TAXII 2.1 feed and a MISP-compatible REST surface for SIEM ingestion. Get a key at https://api.relayshield.net/developers", "contact": {"name": "RelayShield", "email": "support@relayshield.net", "url": "https://api.relayshield.net/developers"}}, "servers": [{"url": "https://api.relayshield.net"}], "components": {"securitySchemes": {"ApiKeyAuth": {"type": "apiKey", "in": "header", "name": "X-RS-API-KEY"}}}, "paths": {"/v1/metered/breach": {"post": {"operationId": "metered_breach", "summary": "Breach", "description": "Check whether an email address appears in known data breaches. Returns breach count, source names, dates, and exposed data types (passwords, emails, etc). Call before trusting a new user identity or granting elevated access. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/breach": {"post": {"operationId": "payg_breach", "summary": "Breach (x402 pay-per-call)", "description": "Check whether an email address appears in known data breaches. Returns breach count, source names, dates, and exposed data types (passwords, emails, etc). Call before trusting a new user identity or granting elevated access. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/bulk-identity-risk": {"post": {"operationId": "metered_bulk_identity_risk", "summary": "Bulk Identity Risk", "description": "Score up to 10 organizational domains, each with up to 5 associated agent/employee emails, for combined breach/infostealer/session/CVE risk in one call. Built for enterprise AI-governance platforms scoring many identities per customer in one pass \u2014 the recommended entry point for agent-governance and identity-posture integrations. Price: $2.00 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/bulk-identity-risk": {"post": {"operationId": "payg_bulk_identity_risk", "summary": "Bulk Identity Risk (x402 pay-per-call)", "description": "Score up to 10 organizational domains, each with up to 5 associated agent/employee emails, for combined breach/infostealer/session/CVE risk in one call. Built for enterprise AI-governance platforms scoring many identities per customer in one pass \u2014 the recommended entry point for agent-governance and identity-posture integrations. Price: $2.00 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/cert-expiry": {"post": {"operationId": "metered_cert_expiry", "summary": "Cert Expiry", "description": "Check how many days remain before a domain's TLS certificate expires, via Certificate Transparency logs. Call to catch a lapsing certificate before it causes an outage \u2014 especially relevant as CA/Browser Forum rules shrink standard certificate lifespans toward 47 days by 2029. Price: $0.05 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/cert-expiry": {"post": {"operationId": "payg_cert_expiry", "summary": "Cert Expiry (x402 pay-per-call)", "description": "Check how many days remain before a domain's TLS certificate expires, via Certificate Transparency logs. Call to catch a lapsing certificate before it causes an outage \u2014 especially relevant as CA/Browser Forum rules shrink standard certificate lifespans toward 47 days by 2029. Price: $0.05 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/domain": {"post": {"operationId": "metered_domain", "summary": "Domain", "description": "Scan a domain for phishing lookalikes \u2014 typosquats, homoglyphs, and common phishing registration patterns. Returns matched lookalike domains found in the wild. Call to detect brand-impersonation phishing campaigns targeting a company before they're reported elsewhere. Price: $0.50 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/domain": {"post": {"operationId": "payg_domain", "summary": "Domain (x402 pay-per-call)", "description": "Scan a domain for phishing lookalikes \u2014 typosquats, homoglyphs, and common phishing registration patterns. Returns matched lookalike domains found in the wild. Call to detect brand-impersonation phishing campaigns targeting a company before they're reported elsewhere. Price: $0.50 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/identity-graph": {"post": {"operationId": "metered_identity_graph", "summary": "Identity Graph", "description": "Correlate an email address against the criminal breach/stealer corpus to surface linked phone numbers, secondary domains, and other identifiers tied to the same compromised identity. Call to map the blast radius of a known compromise across an organization. Price: $0.35 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/identity-graph": {"post": {"operationId": "payg_identity_graph", "summary": "Identity Graph (x402 pay-per-call)", "description": "Correlate an email address against the criminal breach/stealer corpus to surface linked phone numbers, secondary domains, and other identifiers tied to the same compromised identity. Call to map the blast radius of a known compromise across an organization. Price: $0.35 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/identity-risk-score": {"post": {"operationId": "metered_identity_risk_score", "summary": "Identity Risk Score", "description": "Return a 0-100 domain security score across 6 identity-risk dimensions (breach exposure, infostealer density, ransomware exposure, session exposure, CVE exposure, threat-actor targeting) with a letter grade and plain-English risk factors. Call as a single-number identity health check before onboarding, financing, or partnering with a domain. Price: $0.35 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/identity-risk-score": {"post": {"operationId": "payg_identity_risk_score", "summary": "Identity Risk Score (x402 pay-per-call)", "description": "Return a 0-100 domain security score across 6 identity-risk dimensions (breach exposure, infostealer density, ransomware exposure, session exposure, CVE exposure, threat-actor targeting) with a letter grade and plain-English risk factors. Call as a single-number identity health check before onboarding, financing, or partnering with a domain. Price: $0.35 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/infostealer": {"post": {"operationId": "metered_infostealer", "summary": "Infostealer", "description": "Check whether an email address's credentials were harvested by infostealer malware and appear in a criminal stealer-log marketplace \u2014 detected 24-72 hours ahead of public breach databases. Call to catch device-level compromise before stolen session cookies or saved passwords are used for account takeover. Price: $0.15 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/infostealer": {"post": {"operationId": "payg_infostealer", "summary": "Infostealer (x402 pay-per-call)", "description": "Check whether an email address's credentials were harvested by infostealer malware and appear in a criminal stealer-log marketplace \u2014 detected 24-72 hours ahead of public breach databases. Call to catch device-level compromise before stolen session cookies or saved passwords are used for account takeover. Price: $0.15 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/ip-intel": {"post": {"operationId": "metered_ip_intel", "summary": "Ip Intel", "description": "Look up passive DNS resolution history and reputation for a domain or IP address. For a domain: which IPs it has resolved to over time. For an IP: which hostnames have resolved to it, plus malicious/suspicious vendor detection counts. Call to pivot from an indicator to its infrastructure history during an investigation. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/ip-intel": {"post": {"operationId": "payg_ip_intel", "summary": "Ip Intel (x402 pay-per-call)", "description": "Look up passive DNS resolution history and reputation for a domain or IP address. For a domain: which IPs it has resolved to over time. For an IP: which hostnames have resolved to it, plus malicious/suspicious vendor detection counts. Call to pivot from an indicator to its infrastructure history during an investigation. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/llm-credential-exposure": {"post": {"operationId": "metered_llm_credential_exposure", "summary": "Llm Credential Exposure", "description": "Check whether a domain's LLM/AI provider API keys (OpenAI, Anthropic, Google, Groq, xAI, Replicate) appear exposed in criminal stealer logs \u2014 LLMjacking, a fast-growing threat where a leaked key becomes a live, uncapped billing liability rather than just a data exposure. Call to catch an exposed key before the drain, not after the invoice. Price: $0.40 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/llm-credential-exposure": {"post": {"operationId": "payg_llm_credential_exposure", "summary": "Llm Credential Exposure (x402 pay-per-call)", "description": "Check whether a domain's LLM/AI provider API keys (OpenAI, Anthropic, Google, Groq, xAI, Replicate) appear exposed in criminal stealer logs \u2014 LLMjacking, a fast-growing threat where a leaked key becomes a live, uncapped billing liability rather than just a data exposure. Call to catch an exposed key before the drain, not after the invoice. Price: $0.40 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/nft-security": {"post": {"operationId": "metered_nft_security", "summary": "Nft Security", "description": "Screen an NFT contract for known scam, wash-trading, or malicious-approval risk signals before your agent buys, bids on, or approves it. Returns risk level and risk flags plus basic collection metadata. Call before an autonomous agent interacts with an unfamiliar NFT contract. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/nft-security": {"post": {"operationId": "payg_nft_security", "summary": "Nft Security (x402 pay-per-call)", "description": "Screen an NFT contract for known scam, wash-trading, or malicious-approval risk signals before your agent buys, bids on, or approves it. Returns risk level and risk flags plus basic collection metadata. Call before an autonomous agent interacts with an unfamiliar NFT contract. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/nhi-exposure": {"post": {"operationId": "metered_nhi_exposure", "summary": "Nhi Exposure", "description": "Check whether API keys or tokens tied to a domain \u2014 used by non-human identities like AI agents, service accounts, or CI/CD \u2014 appear exposed in criminal stealer logs. Call to audit whether the credentials an autonomous agent relies on have already been compromised upstream. Price: $0.40 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/nhi-exposure": {"post": {"operationId": "payg_nhi_exposure", "summary": "Nhi Exposure (x402 pay-per-call)", "description": "Check whether API keys or tokens tied to a domain \u2014 used by non-human identities like AI agents, service accounts, or CI/CD \u2014 appear exposed in criminal stealer logs. Call to audit whether the credentials an autonomous agent relies on have already been compromised upstream. Price: $0.40 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/oauth-watchlist": {"post": {"operationId": "metered_oauth_watchlist", "summary": "Oauth Watchlist", "description": "Check whether an email address has OAuth-connected app credentials exposed in a known SaaS breach (GitHub, Slack, Notion, Zapier, and 30+ other high-risk OAuth-capable apps). Returns matched apps and direct revoke-access links. Call to detect supply-chain credential exposure via connected apps. Price: $0.30 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/oauth-watchlist": {"post": {"operationId": "payg_oauth_watchlist", "summary": "Oauth Watchlist (x402 pay-per-call)", "description": "Check whether an email address has OAuth-connected app credentials exposed in a known SaaS breach (GitHub, Slack, Notion, Zapier, and 30+ other high-risk OAuth-capable apps). Returns matched apps and direct revoke-access links. Call to detect supply-chain credential exposure via connected apps. Price: $0.30 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/ransomware-risk": {"post": {"operationId": "metered_ransomware_risk", "summary": "Ransomware Risk", "description": "Check whether a domain appears on a known ransomware group's victim/leak-site list, and whether pre-ransomware credential harvesting was detected beforehand. Call to assess active ransomware exposure for a domain, not just historical breach history. Price: $0.40 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/ransomware-risk": {"post": {"operationId": "payg_ransomware_risk", "summary": "Ransomware Risk (x402 pay-per-call)", "description": "Check whether a domain appears on a known ransomware group's victim/leak-site list, and whether pre-ransomware credential harvesting was detected beforehand. Call to assess active ransomware exposure for a domain, not just historical breach history. Price: $0.40 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/scan-file": {"post": {"operationId": "metered_scan_file", "summary": "Scan File", "description": "Scan a file (via its public download URL) for malware using VirusTotal's multi-engine analysis. Returns an async analysis ID to poll. Call before an agent downloads, opens, or executes a file attachment from an untrusted source. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/scan-file": {"post": {"operationId": "payg_scan_file", "summary": "Scan File (x402 pay-per-call)", "description": "Scan a file (via its public download URL) for malware using VirusTotal's multi-engine analysis. Returns an async analysis ID to poll. Call before an agent downloads, opens, or executes a file attachment from an untrusted source. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/scan-url": {"post": {"operationId": "metered_scan_url", "summary": "Scan Url", "description": "Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis. Returns an async analysis ID to poll. Call before an agent clicks, fetches, or shares a link from an untrusted source. Price: $0.05 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/scan-url": {"post": {"operationId": "payg_scan_url", "summary": "Scan Url (x402 pay-per-call)", "description": "Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis. Returns an async analysis ID to poll. Call before an agent clicks, fetches, or shares a link from an untrusted source. Price: $0.05 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/scan-wallet": {"post": {"operationId": "metered_scan_wallet", "summary": "Scan Wallet", "description": "Screen an EVM wallet address for known scam, exploit, or sanctions-list association before your agent transacts with it. Returns a risk level and specific risk flags. Call before an autonomous agent sends funds to or interacts with an unfamiliar wallet. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/scan-wallet": {"post": {"operationId": "payg_scan_wallet", "summary": "Scan Wallet (x402 pay-per-call)", "description": "Screen an EVM wallet address for known scam, exploit, or sanctions-list association before your agent transacts with it. Returns a risk level and specific risk flags. Call before an autonomous agent sends funds to or interacts with an unfamiliar wallet. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/secret-scan": {"post": {"operationId": "metered_secret_scan", "summary": "Secret Scan", "description": "Scan public GitHub repositories, npm and PyPI packages, Docker Hub images and Hugging Face models and Spaces for API keys, tokens and credentials already published against a domain. Repo-only scanners miss credentials shipped inside released packages and images. Every hit is verified against the credential pattern before it is reported. Price: $0.35 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/secret-scan": {"post": {"operationId": "payg_secret_scan", "summary": "Secret Scan (x402 pay-per-call)", "description": "Scan public GitHub repositories, npm and PyPI packages, Docker Hub images and Hugging Face models and Spaces for API keys, tokens and credentials already published against a domain. Repo-only scanners miss credentials shipped inside released packages and images. Every hit is verified against the credential pattern before it is reported. Price: $0.35 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/session-risk": {"post": {"operationId": "metered_session_risk", "summary": "Session Risk", "description": "Check whether an email address has an active stolen session cookie circulating in a criminal archive \u2014 a signal of account takeover that bypasses password resets and 2FA entirely. Call to detect AiTM/session-hijack attacks before an authenticated agent session is trusted. Price: $0.30 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/session-risk": {"post": {"operationId": "payg_session_risk", "summary": "Session Risk (x402 pay-per-call)", "description": "Check whether an email address has an active stolen session cookie circulating in a criminal archive \u2014 a signal of account takeover that bypasses password resets and 2FA entirely. Call to detect AiTM/session-hijack attacks before an authenticated agent session is trusted. Price: $0.30 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/sim-swap": {"post": {"operationId": "metered_sim_swap", "summary": "Sim Swap", "description": "Check whether a phone number has had a SIM swap or carrier port in the last 24 hours via real-time carrier lookup. A recent swap is a strong signal of an active account-takeover attempt targeting SMS-based 2FA. Call before trusting an SMS OTP from this number. Price: $0.25 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/sim-swap": {"post": {"operationId": "payg_sim_swap", "summary": "Sim Swap (x402 pay-per-call)", "description": "Check whether a phone number has had a SIM swap or carrier port in the last 24 hours via real-time carrier lookup. A recent swap is a strong signal of an active account-takeover attempt targeting SMS-based 2FA. Call before trusting an SMS OTP from this number. Price: $0.25 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/supply-chain": {"post": {"operationId": "metered_supply_chain", "summary": "Supply Chain", "description": "Check up to 10 vendor domains for combined breach, infostealer, and dark-web risk exposure in one call. Returns a composite risk score per vendor. Call to assess third-party API/vendor risk before an agent integrates with or continues calling an external service. Price: $0.10 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/supply-chain": {"post": {"operationId": "payg_supply_chain", "summary": "Supply Chain (x402 pay-per-call)", "description": "Check up to 10 vendor domains for combined breach, infostealer, and dark-web risk exposure in one call. Returns a composite risk score per vendor. Call to assess third-party API/vendor risk before an agent integrates with or continues calling an external service. Price: $0.10 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/target-risk": {"post": {"operationId": "metered_target_risk", "summary": "Target Risk", "description": "Score a domain's probability of being an active or upcoming cyberattack target using a 6-signal correlation model (breach, infostealer, ransomware, session, CVE, and threat-actor targeting history). Call for proactive risk triage, not just after-the-fact breach checking. Price: $0.50 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/target-risk": {"post": {"operationId": "payg_target_risk", "summary": "Target Risk (x402 pay-per-call)", "description": "Score a domain's probability of being an active or upcoming cyberattack target using a 6-signal correlation model (breach, infostealer, ransomware, session, CVE, and threat-actor targeting history). Call for proactive risk triage, not just after-the-fact breach checking. Price: $0.50 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/tech-stack-cve": {"post": {"operationId": "metered_tech_stack_cve", "summary": "Tech Stack Cve", "description": "Check a declared technology stack (e.g. nginx, WordPress, Cisco IOS) against actively-exploited CVEs (CISA KEV) and high-EPSS-score vulnerabilities. Call before deploying or continuing to run a given technology stack in production. Price: $0.20 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/tech-stack-cve": {"post": {"operationId": "payg_tech_stack_cve", "summary": "Tech Stack Cve (x402 pay-per-call)", "description": "Check a declared technology stack (e.g. nginx, WordPress, Cisco IOS) against actively-exploited CVEs (CISA KEV) and high-EPSS-score vulnerabilities. Call before deploying or continuing to run a given technology stack in production. Price: $0.20 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/token-security": {"post": {"operationId": "metered_token_security", "summary": "Token Security", "description": "Screen an ERC-20/BEP-20 token contract for honeypot, mintable-supply, hidden-owner, and other rug-pull risk signals before your agent trades it. Returns risk level, specific critical/warning flags, and basic token metadata. Call before an autonomous trading agent buys or approves spending on an unfamiliar token. Price: $0.05 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/token-security": {"post": {"operationId": "payg_token_security", "summary": "Token Security (x402 pay-per-call)", "description": "Screen an ERC-20/BEP-20 token contract for honeypot, mintable-supply, hidden-owner, and other rug-pull risk signals before your agent trades it. Returns risk level, specific critical/warning flags, and basic token metadata. Call before an autonomous trading agent buys or approves spending on an unfamiliar token. Price: $0.05 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/wallet-risk": {"post": {"operationId": "metered_wallet_risk", "summary": "Wallet Risk", "description": "Screen a wallet address across EVM, Solana, TON, or Bitcoin for known scam, exploit, drainer, or sanctions-list association before your agent transacts with it. Returns a risk level and specific risk flags. The recommended first call for any autonomous trading or DeFi agent before interacting with a new counterparty wallet. Price: $0.05 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/wallet-risk": {"post": {"operationId": "payg_wallet_risk", "summary": "Wallet Risk (x402 pay-per-call)", "description": "Screen a wallet address across EVM, Solana, TON, or Bitcoin for known scam, exploit, drainer, or sanctions-list association before your agent transacts with it. Returns a risk level and specific risk flags. The recommended first call for any autonomous trading or DeFi agent before interacting with a new counterparty wallet. Price: $0.05 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}, "/v1/metered/wallet-screen-batch": {"post": {"operationId": "metered_wallet_screen_batch", "summary": "Wallet Screen Batch", "description": "Screen up to 10 wallet addresses (any chain: EVM, Solana, TON, Bitcoin) for known scam or exploit association in a single call. Returns per-address risk level and flags. Use for bulk counterparty screening in trading or portfolio-monitoring agent workflows. Price: $0.50 per call.", "security": [{"ApiKeyAuth": []}], "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "401": {"description": "Missing or invalid API key."}, "402": {"description": "Payment required: no active subscription or credits."}}}}, "/v1/payg/wallet-screen-batch": {"post": {"operationId": "payg_wallet_screen_batch", "summary": "Wallet Screen Batch (x402 pay-per-call)", "description": "Screen up to 10 wallet addresses (any chain: EVM, Solana, TON, Bitcoin) for known scam or exploit association in a single call. Returns per-address risk level and flags. Use for bulk counterparty screening in trading or portfolio-monitoring agent workflows. Price: $0.50 per call. No API key required; responds 402 with x402 payment requirements, payable in USDC on Base or Solana.", "requestBody": {"required": true, "content": {"application/json": {"schema": {"type": "object", "additionalProperties": true, "description": "Endpoint-specific parameters. See the description and https://api.relayshield.net/developers for the fields each endpoint takes."}}}}, "responses": {"200": {"description": "Success", "content": {"application/json": {"schema": {"type": "object", "properties": {"ok": {"type": "boolean"}, "data": {"type": "object", "additionalProperties": true}}}}}}, "402": {"description": "x402 payment required. Retry with an X-PAYMENT header."}}}}}}