passlisted in Coinbase#62 by calls of 342 on this host
0.008 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 1
- Unique payers, trailing 30 days
- 1
- Last called
- 2026-08-17 09:50 UTC
- First observed by TOLLderived
- 2026-09-10
- Pricederived
- 0.008 USDC
- Networks
- 5
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 29 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
With 342 endpoints listed on api.agentstools.dev, threat hash is tied 62nd by calls with 280 others.
The request to threat hash is the query parameter hash.
threat hash returns json; the example shows algo, hash, reasons, sources, verdict, confidence and 2 others.
threat hash drew a single call from a single payer in the trailing 30 days.
The last call to threat hash came 29 days before the snapshot, 2026-08-17.
Each call is priced at 0.008 USDC, payable on Base.
For threat hash the listing declares 5 accepts on Base, Polygon, Arbitrum, World Chain and 1 other, to 2 different wallets.
threat hash, a GET endpoint on api.agentstools.dev, appears in the Coinbase registry; TOLL's taxonomy puts it in identity.
threat hash answered the sweep of 2026-09-15 with a valid 402, as at every sweep since 2026-09-11.
Closest in price to threat hash within identity: attested screening at rubric-protocol.com and items at spawnxchange-api-485602182462.europe-west4.run.app.
Among comparable prices in identity, threat hash sits above 30% of them.
For 1 of the options on threat hash, TOLL has no verified decimals and shows the raw amount.
The wallet paid by threat hash is the payee of 344 endpoints across 2 hosts.
The seller's own tags are threat-intelligence, hash, malware and file-reputation.
the payment options, as of 2026-09-15 21:20 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.008 USDC | exact | 0xF22e55…DFf493 |
| Coinbase | eip155: | USDC | 0.008 USDC | exact | 0xF22e55…DFf493 |
| Coinbase | eip155: | USDC | 0.008 USDC | exact | 0xF22e55…DFf493 |
| Coinbase | eip155: | USDC | 8000 smallest units, decimals unknown | exact | 0xF22e55…DFf493 |
| Coinbase | solana: | USDC | 0.008 USDC | exact | AytHnvc6…cZ8R1u |
the checks, as of 2026-09-15 06:39 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-09-15 06:39 UTC | pass | 0 | daily-2026-09-15 |
| 2026-09-14 06:07 UTC | pass | 0 | daily-2026-09-14 |
| 2026-09-13 05:59 UTC | pass | 0 | daily-2026-09-13 |
| 2026-09-12 08:16 UTC | pass | 0 | daily-2026-09-12 |
| 2026-09-11 12:57 UTC | pass | 0 | daily-2026-09-11 |
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-08-17 09:50 UTC · method · live
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"hash": "d41d8cd98f00b204e9800998ecf8427e"
}
},
"output": {
"type": "json",
"example": {
"algo": "md5",
"hash": "d41d8cd98f00b204e9800998ecf8427e",
"reasons": [
"Hash is a KNOWN file in CIRCL hashlookup with high trust."
],
"sources": [
"circl_hashlookup"
],
"verdict": "benign_known",
"confidence": 0.75,
"disclaimer": "Automated reputation/threat indicators, not a guarantee; for triage.",
"known_file": true,
"is_malicious": false,
"malware_family": [],
"hashlookup_trust": 100
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-09-15 21:20 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "threat hash on api.agentstools.dev", snapshot of 2026-09-15 21:20 UTC. https://tollindex.com/e/api-agentstools-dev-threat-hash-d45c51/at/2026-09-15T21-20Z. Accessed [access date].
BibTeX
@misc{toll-e-api-agentstools-dev-threat-hash-d45c51-2026-09-15T21-20Z,
author = {TOLL},
title = {threat hash on api.agentstools.dev},
howpublished = {\url{https://tollindex.com/e/api-agentstools-dev-threat-hash-d45c51/at/2026-09-15T21-20Z}},
year = {2026},
month = {9},
note = {Pinned view of the snapshot of 2026-09-15 21:20 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.