passlisted in Coinbase#23 by calls of 141 on this host
0.01 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 2
- Unique payers, trailing 30 days
- 2
- Last called
- 2026-09-28 02:24 UTC
- First observed by TOLLderived
- 2026-09-10
- Pricederived
- 0.01 USDC
- Networks
- 1
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 2 times across 64 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
threat ioc shares api.agentstools.dev with 140 other listed endpoints and is tied 23rd by calls with 22 others.
Callers of threat ioc supply the query parameter indicator.
The declared response carries tags, type, reasons, sources, verdict, citations and 2 others.
threat ioc drew 2 calls from 2 unique payers in the trailing 30 days, every call from a different payer.
threat ioc was last called on the day of the snapshot.
On Base, threat ioc asks 0.01 USDC per call.
threat ioc, a GET endpoint on api.agentstools.dev, appears in the Coinbase registry; TOLL's taxonomy puts it in inference.
threat ioc answered the sweep of 2026-09-23 with a valid 402, as at every sweep since 2026-09-11.
Closest in price to threat ioc within inference: chat completions at x402.aispace.bot and profiler perp pnl summary at api.nansen.ai.
threat ioc is priced above 35% of comparable listings in inference.
354 listed endpoints across 2 hosts pay to the same wallet.
The seller's tags on threat ioc are threat-intelligence, ioc, soc and dfir.
threat ioc dropped out of the registry at the pull of 2026-09-16 and was listed again on 2026-09-19.
The price of threat ioc is declared by 892 other listings in inference too.
the payment options, as of 2026-09-28 13:51 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.01 USDC | exact | 0xF22e55…DFf493 |
the checks, as of 2026-09-23 07:58 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-09-23 07:58 UTC | pass | 0 | daily-2026-09-23 |
| 2026-09-22 08:12 UTC | pass | 0 | daily-2026-09-22 |
| 2026-09-21 08:34 UTC | pass | 0 | daily-2026-09-21 |
| 2026-09-16 06:22 UTC | pass | 0 | daily-2026-09-16 |
| 2026-09-15 06:38 UTC | pass | 0 | daily-2026-09-15 |
| 2026-09-14 06:07 UTC | pass | 0 | daily-2026-09-14 |
| 2026-09-13 05:58 UTC | pass | 0 | daily-2026-09-13 |
| 2026-09-12 08:15 UTC | pass | 0 | daily-2026-09-12 |
| 2026-09-11 12:50 UTC | pass | 0 | daily-2026-09-11 |
Presence in a registry, not liveness of the service (method). Newest first.
- back in Coinbase
- absence from Coinbase confirmed, rule v1
- absent from Coinbase at this pull
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-09-28 02:24 UTC · method · live
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"indicator": "8.8.8.8"
}
},
"output": {
"type": "json",
"example": {
"tags": [],
"type": "ipv4",
"reasons": [
"No positive reputation signal from the available sources."
],
"sources": [
"fraud_ip"
],
"verdict": "unknown",
"citations": [
{
"source": "IP reputation",
"attribution": "iptoasn + Spamhaus DROP"
}
],
"indicator": "8.8.8.8",
"confidence": 0.25,
"disclaimer": "Reputation indicators, not a guarantee.",
"is_malicious": null,
"source_count": 1,
"malware_family": []
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-09-28 13:51 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "threat ioc on api.agentstools.dev", snapshot of 2026-09-28 13:51 UTC. https://tollindex.com/e/api-agentstools-dev-threat-ioc-d2de6c/at/2026-09-28T13-51Z. Accessed [access date].
BibTeX
@misc{toll-e-api-agentstools-dev-threat-ioc-d2de6c-2026-09-28T13-51Z,
author = {TOLL},
title = {threat ioc on api.agentstools.dev},
howpublished = {\url{https://tollindex.com/e/api-agentstools-dev-threat-ioc-d2de6c/at/2026-09-28T13-51Z}},
year = {2026},
month = {9},
note = {Pinned view of the snapshot of 2026-09-28 13:51 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.