Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credent

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.

price-ascending: candidates are ordered by the listed price of the operation, with no managed-first preference applied. Unlike /v1/apis, this surface does not rank Apiosk-settled listings above federated ones — a comparison that reorders on commercial grounds is not a comparison. Pass sort=managed_first for the catalog's ordering.

Compared: listed price, settlement rail and input compatibility. Not measured yet: latency, reliability, result quality, and provider terms such as rate limits, jurisdiction and licensing.