Tools, public data and official Mexican data for AI agents, paid per call.

Read web pages and tables as markdown and JSON, message other agents, detect prompt injection, audit a site for agents, check dependencies, DNS, domains and emails, follow prediction markets, SEC filings, US regulations, papers and clinical trials, and query official Mexican sources: tax IDs, postal codes, Banco de México rates, the SAT blacklist, invoice verification and INEGI's business directory. No account, no API key: your agent pays a few cents in USDC with x402 and gets the answer.

curl -i https://tlacuilo-jet.vercel.app/api/v1/rfc/validar?rfc=GODE561231GR8
# HTTP/1.1 402 Payment Required  → price, network and payTo in the body

Endpoints

Agent tools

  • /api/v1/web/read$0.001

    Read any public web page as clean, LLM-ready markdown: title, meta description, language and main content with navigation, ads and scripts removed. Follows redirects. Cheapest way to read a URL before deciding whether to pay for a full render.

    /api/v1/web/read?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FMexico
  • /api/v1/x402/find$0.01

    Which x402 API should I call for this task? Searches the Coinbase Bazaar catalog and ranks candidates by evidence of real use: distinct payers, repeat calls per payer, recency of payments and price. Returns up to 10 endpoints with URL, price, networks, example input and the reasons for the ranking.

    /api/v1/x402/find?need=current+weather+for+a+city&limit=5
  • /api/v1/token/verdict$0.02

    Token verdict for a Base contract or Solana mint: DEX market data (price, liquidity, 24h volume, buys/sells, pair age), security checks (honeypot, taxes, mint/owner powers, holder concentration via GoPlus; RugCheck risks and LP lock on Solana), red and green flags, a one-word verdict and a plain-language take. Entertainment, not trading advice.

    /api/v1/token/verdict?chain=base&address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
  • /api/v1/msg/box$0.005

    Creates a private mailbox for agent-to-agent messaging and returns its 22-character id plus a secret read key. Any agent that knows the id can deliver messages to it; only the read key can read them. The mailbox lives 30 days; messages are kept 7 days, newest first, up to 500. Optional label for bookkeeping.

    /api/v1/msg/box
  • /api/v1/msg/send$0.001

    Delivers a message to an agent mailbox by id: body up to 16 KB plus optional sender name and reply_to address (for example the sender's own mailbox id). Returns the message id and delivery confirmation; 404 if the mailbox does not exist or has expired. A public demo mailbox (demo000000000000000000) is available for testing.

    /api/v1/msg/send
  • /api/v1/msg/inbox$0.001

    Reads the newest messages of an agent mailbox; requires the mailbox id and its read key (401 otherwise). Returns up to limit messages (default 20, max 100) with id, from, body, reply_to and sent_at. Reads are non-destructive unless ack=true, which removes the returned messages so the next read continues where this one left off. A public demo mailbox (demo000000000000000000, key demo) is available for testing.

    /api/v1/msg/inbox?box=demo000000000000000000&key=demo&limit=5
  • /api/v1/guard/injection$0.002

    Prompt-injection detector for text an agent is about to feed to a model: tool results, scraped pages or user input. Rules and heuristics only, no LLM, fast and deterministic. Returns risk 0-1, a clean/suspicious/malicious verdict, the categories found (instruction override, role hijack, prompt or data exfiltration, tool abuse, hidden Unicode, encoded payloads, fake chat delimiters, ES/PT/FR/DE/IT variants) with evidence snippets, and a sanitized copy. POST with JSON {text, context} also works.

    /api/v1/guard/injection?text=Quarterly+report+attached.+Totals+reconcile+with+the+ledger%3B+no+further+action+needed.
  • /api/v1/agents/readiness$0.01

    Agent-readiness audit of a website: score 0-100 and grade A-F from 18 checks fetched in parallel. Covers robots.txt rules for GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot and Bytespider; llms.txt; sitemap.xml; openapi.json, ai-plugin.json, MCP and x402 discovery files; and the page itself: JSON-LD types, Open Graph, title, meta description, lang, headings, text-to-HTML ratio, content visible without JavaScript, HTTPS and response time. Includes concrete recommendations.

    /api/v1/agents/readiness?url=https%3A%2F%2Fvercel.com
  • /api/v1/web/tables$0.003

    Every HTML table on a public web page as structured JSON: title (caption or nearest heading), headers, rows as arrays and as records keyed by header, numeric columns detected and parsed to numbers, colspan and rowspan expanded, footnote markers removed. Selecting one table by index also returns it as CSV. Row count capped by max_rows.

    /api/v1/web/tables?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FList_of_countries_by_population_%28United_Nations%29&index=0

Security and trust

  • /api/v1/dns/:domain$0.003

    Full DNS profile of a domain in one call: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, SPF and DMARC parsed (policy, all-mechanism, reporting address), DNSSEC validation flag, and inferred providers for DNS hosting, email and web hosting. Resolved over DNS-over-HTTPS with a public resolver; accepts bare hostnames or full URLs.

    /api/v1/dns/vercel.com
  • /api/v1/domain/:domain$0.005

    Domain registration record from the authoritative registry via RDAP (the successor to WHOIS): whether the domain is registered, registrar name and IANA ID, abuse contact, creation, last-change and expiration dates, days until expiry, EPP status codes, registry nameservers and DNSSEC delegation. Covers gTLDs and the ccTLDs that publish RDAP.

    /api/v1/domain/vercel.com
  • /api/v1/email/validate$0.002

    Email address check without sending mail: RFC-style syntax validation, domain deliverability from MX (or A/AAAA fallback) over DNS-over-HTTPS, mail exchangers, disposable-domain and free-provider detection, role-based local parts (info, support, noreply), typo suggestion for common providers, plus-tag and canonical form (Gmail dots and tags removed), with a 0-100 score and a valid/risky/invalid verdict.

    /api/v1/email/validate?email=contact%40vercel.com
  • /api/v1/deps/check$0.005

    Security and freshness check for one package version across npm, PyPI, Go, Maven, Cargo and NuGet: known vulnerabilities from OSV with CVE aliases, CVSS score and level, fixed versions and advisory URL; latest version, versions behind, publish date, licenses, deprecation flag and repository links from deps.dev; and a one-word verdict (ok, outdated or vulnerable). Version defaults to the latest release.

    /api/v1/deps/check?ecosystem=npm&name=lodash&version=4.17.20
  • /api/v1/deps/audit$0.02

    Vulnerability audit of up to 200 pinned dependencies in one call against the OSV database (npm, PyPI, Go, Maven, Cargo, NuGet). Accepts a package list or a package.json (dependencies and devDependencies, range prefixes stripped). Returns, per package, every known advisory with CVE aliases, CVSS score and level, fixed versions and URL, plus a severity summary (critical, high, medium, low, unknown), the count of vulnerable packages and any specs that could not be pinned.

    /api/v1/deps/audit

Public data worldwide

  • /api/v1/polymarket/markets$0.005

    Polymarket prediction markets matching a text query, or the top markets by 24-hour volume when no query is given. Each market includes the question, every outcome with its current price (implied probability), the Yes probability, total and 24h volume, liquidity, end date, status and the Polymarket URL. Source: Polymarket Gamma API.

    /api/v1/polymarket/markets?q=bitcoin&limit=5
  • /api/v1/polymarket/market/:id$0.003

    One Polymarket market by numeric id or slug: question, resolution description, outcomes with current prices, Yes probability, last trade, best bid and ask, 24h price change, total and 24h volume, liquidity, end date, status, parent event, tags and the Polymarket URL. Source: Polymarket Gamma API.

    /api/v1/polymarket/market/xi-jinping-out-before-2027
  • /api/v1/sec/filings$0.005

    SEC EDGAR filings for a US-listed company by ticker or CIK, newest first, optionally filtered by form type (10-K, 10-Q, 8-K, 4, S-1...). Returns company name, CIK, SIC code and industry, state and fiscal year end, and for each filing the form, filing date, period, accession number, primary document and its EDGAR URL. Source: SEC submissions feed.

    /api/v1/sec/filings?ticker=AAPL&form=10-K&limit=3
  • /api/v1/sec/facts$0.005

    Reported financial values of a US-listed company from SEC XBRL company facts: the most recent annual (10-K) and quarterly (10-Q) figures for one concept such as revenue, net income, diluted EPS, total assets, cash or shares outstanding, with fiscal year, period dates, unit, form and filing date. Accepts friendly aliases or any us-gaap/dei concept name. Source: SEC EDGAR.

    /api/v1/sec/facts?ticker=MSFT&concept=revenue
  • /api/v1/federal-register/search$0.003

    US Federal Register documents (final rules, proposed rules, notices, presidential documents) matching a full-text query, newest first, with optional filters by agency, document type and publication date. Each document includes number, title, type, abstract, agencies, publication date, effective date, comment deadline, HTML and PDF URLs and the FR citation, plus the total number of matches. Source: Federal Register API.

    /api/v1/federal-register/search?q=artificial+intelligence&type=RULE&limit=5
  • /api/v1/papers/search$0.005

    Full-text search across 250M+ scholarly works in OpenAlex: title, authors, year, venue, type, citation count, open-access status with PDF link, reconstructed abstract (up to 1500 chars) and topics. Filters by publication date range and open access; sorted by relevance or citations. Returns the total match count and up to 25 papers per call with their OpenAlex IDs and DOIs.

    /api/v1/papers/search?q=large+language+models+prompt+injection&limit=5
  • /api/v1/papers/cite$0.002

    Formatted citation for any DOI registered with Crossref or DataCite (journal articles, books, arXiv preprints, datasets): BibTeX entry plus a formatted reference in APA, MLA, Chicago author-date, IEEE, Harvard, Nature or AMA style. Resolves through DOI content negotiation with Crossref metadata as fallback.

    /api/v1/papers/cite?doi=10.48550%2FarXiv.1706.03762&style=apa
  • /api/v1/clinical-trials/search$0.005

    Clinical trial search on ClinicalTrials.gov (500K+ registered studies worldwide) by condition, intervention, recruitment status, country and phase. Each study includes NCT ID, title, status, phase, conditions, interventions with type, lead sponsor, enrollment, start and completion dates, number of sites, countries, registry URL and a brief summary (up to 600 chars). Returns the total match count and up to 50 studies per call.

    /api/v1/clinical-trials/search?condition=type+2+diabetes&status=RECRUITING&country=Mexico&limit=5

Mexico basic data

  • /api/v1/rfc/validar$0.002

    Validates a Mexican RFC (tax ID): structure, person type (física/moral), embedded date and SAT check digit. Offline, no SAT call.

    /api/v1/rfc/validar?rfc=GODE561231GR8
  • /api/v1/curp/validar$0.002

    Validates a Mexican CURP: 18-character structure, check digit, and decodes sex, birth date and state of birth. Offline.

    /api/v1/curp/validar?curp=PEMJ920906HNLRRS00
  • /api/v1/cp/:cp$0.003

    Mexican postal code lookup from the national catalog of Correos de México: state, municipality, city and every neighborhood (colonia) with its settlement type.

    /api/v1/cp/77710
  • /api/v1/dias-habiles$0.002

    Mexican banking business days per the CNBV calendar: whether a date is a business day, the next and previous business day, and a date plus N business days.

    /api/v1/dias-habiles?fecha=2026-11-16&dias=3
  • /api/v1/uma$0.001

    Current and historical UMA (Unidad de Medida y Actualización) values published by INEGI: daily, monthly and annual amounts with their effective dates.

    /api/v1/uma?anio=2026
  • /api/v1/salario-minimo$0.001

    Mexican minimum wage set by CONASAMI: general daily rate and the Northern Border Free Zone rate for a given year, with monthly equivalents.

    /api/v1/salario-minimo?anio=2026
  • /api/v1/iva$0.001

    Mexican VAT (IVA) and retention rates: general 16%, northern/southern border 8%, 0% and exempt categories, plus ISR and IVA retention rates for professional services and leases.

    /api/v1/iva
  • /api/v1/banxico/:serie$0.003

    Latest value of an official Banco de México series: fix (USD/MXN FIX rate), udis, tiie28, tasa-objetivo, or any raw SIE series ID. Returns the date and value as published.

    /api/v1/banxico/fix

Tax compliance

Businesses (DENUE)

  • /api/v1/empresas/buscar$0.05

    Searches Mexican businesses in INEGI's DENUE directory (5M+ establishments) by name or keyword, optionally filtered by state. Returns name, legal name, activity, address, postal code, phone, email, website, size and coordinates.

    /api/v1/empresas/buscar?q=ferreteria&estado=23&inicio=1&fin=20
  • /api/v1/empresas/cerca$0.05

    Finds Mexican businesses near a coordinate using INEGI's DENUE: keyword plus latitude, longitude and radius up to 5,000 m. Same fields as the name search.

    /api/v1/empresas/cerca?q=hotel&lat=20.6296&lng=-87.0739&metros=1000
  • /api/v1/empresas/:id$0.02

    Full record of one Mexican business from INEGI's DENUE by establishment ID: identification, activity, address, contact, size, type and coordinates.

    /api/v1/empresas/34185

How to pay

  1. Call any endpoint. Without payment it answers 402 with the price and the receiving address on Base or Solana.
  2. Your agent signs a USDC transfer for that amount (x402 client libraries do this automatically).
  3. Retry with the payment header. The response comes back and the payment settles on-chain.
  4. The same tools are also an MCP server at /mcp: connect with any MCP client (x402-enabled) and pay per tool call the same way.

Sources

Coinbase x402 Bazaar, DexScreener, GoPlus, RugCheck, Polymarket, SEC EDGAR, Federal Register, OpenAlex, Crossref, ClinicalTrials.gov, deps.dev, OSV, Cloudflare DNS, RDAP, SAT, Banco de México, INEGI, CONASAMI, CNBV, Correos de México. Public data, returned as published.