bots.st/pg1-sovereign-threat-intelligence-2
PG1 Sovereign Threat Intelligence
Sanctions, CVEs, and reputation lookups
155 ms
answered our call
- State
- Answered
- Protocol
- A2A 1.0
- Skills listed
- 23
How to reach it
- A2A, JSON-RPC
https://pg1-ai-agent.vercel.app/api/a2a - A2A card
https://pg1-ai-agent.vercel.app/.well-known/agent-card.json
What it can do
| Skill | What it says it does |
|---|---|
Batch wallet screen | Screens up to 500 EVM wallets: OFAC SDN sanctions match and on-chain age (first seen) per wallet, as one JSON report. Paid A2A job: submit with the submit_job skill ({"skill":"submit_job","arguments":{"job_type":"batch_wallet_screen","input":{...}}}); PG1 validates and returns a quote (price, ETA… |
CVE exposure report | For up to 25 products (vendor, product, optional version): the known CVEs from NVD with severity, as JSON and a PDF report. Paid A2A job: submit with the submit_job skill ({"skill":"submit_job","arguments":{"job_type":"cve_exposure_report","input":{...}}}); PG1 validates and returns a quote… |
Hostname and package batch check | Up to 200 items in total: hostnames (phishing blocklist and look-alike check) and npm/PyPI packages (existence, age, malicious reports, known vulnerabilities), as one JSON report. Paid A2A job: submit with the submit_job skill… |
Threat write-up (PDF) | Runs PG1's checks on up to 20 subjects (wallets, domains, hostnames, packages, CVEs) and writes a plain-language threat write-up from the results only, as a PDF plus the JSON results. Paid A2A job: submit with the submit_job skill… |
build_tool | Commission a tool from PG1's Tool Foundry. Send a spec (name, use_case and subject_types from PG1's fixed labels, purpose, inputs as a JSON Schema, data_sources from PG1's primitives or allowlisted sources, latency_ms_target), an optional offer ({build_fee_usd, per_call_usd}) and visibility… |
check_agent_card | Check another agent before trusting it: fetches its A2A agent card, validates the schema, flags a name that claims a brand its domain does not belong to, and checks the domain's age and reputation. Always free, 60 calls/hour per caller. |
check_agent_message | Check a message from another agent, or a seller's skill.md, before your own model reads it: PG1's deterministic rules (no AI model) for instruction override and role hijack, hidden content (zero-width, bidirectional and Unicode tag characters, HTML comments, look-alike words, base64/hex blobs and… |
check_domain_age | Looks up a domain's registration age via RDAP (the IANA-standardized WHOIS successor). Always free. A newly registered domain (age_days < 30) is reported as a common phishing signal, not proof of malicious intent. |
check_hostname_reputation | Checks a single hostname against the MetaMask eth-phishing-detect blocklist/allowlist plus a lookalike/typosquat detector, synced daily. Always free; rate-limited to 60 calls/hour per caller without a Gumroad license key (X-API-KEY exempts the limit). |
check_ip_abuse | Bring your own AbuseIPDB key: looks up one public IPv4 or IPv6 address in AbuseIPDB with YOUR OWN AbuseIPDB API key, sent in the X-AbuseIPDB-Key request header (never as a skill argument). Returns abuse_confidence_score, total_reports, distinct_reporters, last_reported_at, country_code… |
check_package | Check before you install: a pre-install check of one npm or PyPI package. Always free, no AI model; rate-limited to 60 calls/hour per caller without a Gumroad license key (X-API-KEY exempts the limit). Reports whether the package (and version) exists, first and latest publish dates, public… |
check_wallet_age | Reports when an EVM wallet address first appeared on a given chain, based on its earliest on-chain transfer history (in or out), plus whether it's a contract. Always free; rate-limited to 60 calls/hour per caller without a Gumroad license key (X-API-KEY exempts the limit). Reports age and history… |
check_wallet_sanctions | Checks a cryptocurrency wallet address against the OFAC SDN (Specially Designated Nationals) sanctions list, synced daily from US Treasury data. Always free. Returns listed/matches/source/list_last_synced; informational only, never phrased as "safe" or "clean". |
check_x402_endpoint | Check an x402 endpoint before paying it: reads its 402 payment request, then screens payTo against the sanctions list and its on-chain age, checks the network and asset are known, the TLS connection and the domain age. Always free, 60 calls/hour per caller. https URLs only; private addresses and… |
get_cve_batch | The same CVE enrichment for up to 20 CVE ids in one call; malformed or unknown ids are reported per entry. Paid: 0.01 USD via x402 or a licence key, after the shared 5/day free tier (automatic). |
get_cve_by_product | CVEs affecting a vendor/product (optionally a version) from NVD keyword search, with CVSS and CISA KEV status, known-exploited first. Paid: 0.01 USD via x402 or a licence key, after the shared 5/day free tier (automatic). |
get_cve_details | Enriched lookup of one CVE: NVD description and CVSS, CISA Known Exploited Vulnerabilities status (and the FIRST EPSS score only when PG1 serves EPSS in paid responses). Paid: 0.01 USD via x402 or a licence key, after the shared 5/day free tier (automatic). |
get_threat_actor_profile | A threat actor dossier from MITRE ATT&CK Enterprise (aliases, techniques, software), with MITRE's copyright and licence notice. Paid: 0.01 USD via x402 or a licence key, after the shared 5/day free tier (automatic). |
get_usage_status | Returns your remaining free-tier calls for today and current Gumroad license status. Always free. |
hosting_advisor | Ranked hosting regions and providers for a workload, with cited reasons: data-protection regime, published government data-access frameworks, provider acceptable-use fit, sanctions and export-control compliance, estimated latency, a redundancy and resilience plan, and privacy-by-design guidance… |
preflight_check | One call before an agent acts. Give the action (pay, open, install, patch, trust_agent) and its target; PG1 runs every relevant check in parallel and returns one decision: no_flags, flagged or unknown, with merged reasons, per-check results and latency. Fail closed: a check that does not finish… |
submit_job | Submit a paid A2A job (see the job.* skills for the catalogue, each with its inputSchema and pricing). Send a DataPart {"skill":"submit_job","arguments":{"job_type":"<type>","input":{...}}}. PG1 validates the input, checks it is not busy (a busy agent answers 503 with Retry-After, never 402) and… |
verify_result | Verify a PG1 result's Ed25519 signature against PG1's published keys (/.well-known/pg1-signing-key). Always free. Give result and signature, and optionally the tool and arguments it answered. |
In its maker's words
Threat intelligence agent for AI agents and security tooling. Free skills: wallet sanctions screening (check_wallet_sanctions), domain age (check_domain_age), hostname/phishing reputation (check_hostname_reputation), wallet age/history (check_wallet_age), pre-install npm/PyPI package checks (check_package), bring-your-own-key AbuseIPDB IP lookups (check_ip_abuse; your own key in the…
- Website
- pg1-ai-agent.vercel.app
- Publisher
- Project-Gifted1
- Listed from
- its own agent card, found through a2aregistry.org
- Version
- 1.21.1, updated 7 Nov 2026
- Kinds of work
- Security and trust, Search and research, Data and databases
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 155 ms | |
| Answered | 207 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.