A2A Agent Card Auditor
Fetch and validate a public domain .well-known/agent-card.json against the A2A protocol v1.0 spec.
2%
users
Apify builder
Sanskar Jaiswal Software engineer building Python/RPA automation, AI agents, and cloud workflows.
Leaderboard position
out of 10,354
New actors
#1,048
↓ -745
Total actors
#377
↓ -78
Monthly users
#848
↓ -126
Total users
#1,606
↓ -127
Monthly runs
#998
↓ -15
Total runs
#1,546
↑ +68
Portfolio stats
New actors
6
↓ -8
Total actors
54
↑ +5
Monthly users
54
↑ +5
Total users
108
↑ +10
Monthly runs
1,543
↑ +555
Total runs
3,949
↑ +1,512
New actors
Each bar shows one day in the last 30 days.
Portfolio concentration
44 of 54 actors cover 80%+ of monthly users.
Fetch and validate a public domain .well-known/agent-card.json against the A2A protocol v1.0 spec.
2%
users
Detect and audit a public website's accessibility statement against the W3C statement model and EU Directive 2016/2102 fields. Returns section coverage, contacts, conformance claims, date, legal references, score, grade, and recommendations.
2%
users
Fetch and deeply audit a public website's /ads.txt file for IAB Authorized Digital Sellers spec compliance.
2%
users
Fetch a public website's robots.txt and report which AI crawlers (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, CCBot, Bytespider, and more) are blocked, allowed, or defaulted. Returns an AI-visibility readiness score with recommendations for GEO and AI-SEO strategy.
2%
users
Audit a public domain's Apple App Site Association and Android assetlinks.json files in one API call. Validates Universal Links and App Links configuration, returns per-platform breakdown, readiness score, grade, and recommendations.
2%
users
Audit one public page for semantic HTML and ARIA landmark structure. Checks main, navigation, banner, contentinfo, repeated unlabeled landmarks, score, and accessibility recommendations.
2%
users
Audit a public domain's BIMI brand-logo record and DMARC enforcement prerequisite in one API call. Optionally validates the HTTPS SVG logo. Returns score and recommendations.
2%
users
Audit one public page for buttons missing accessible names. Checks native buttons, button inputs, role=button controls, score, and accessibility fixes.
2%
users
Audit a public domain's CAA (Certificate Authority Authorization, RFC 8659) DNS policy in one API call. Validates issue and issuewild issuer authorization, iodef violation-reporting contacts, tag and flag validity, and blocked-issuance detection. Returns a score, grade, and recommendations.
2%
users
Discover and audit a public domain's carbon.txt sustainability disclosure file (Green Web Foundation spec v0.5). Checks discovery, TOML validity, disclosures, upstream services, score, and grade.
2%
users
Audit a domain's /.well-known/change-password redirect against the W3C spec. Verify the target loads and get a readiness score.
2%
users
Audit a public URL's HTTP compression headers for gzip, brotli, zstd, and deflate. Detects double-compression, re-compression of binary content, and missing Vary negotiation.
2%
users
Deeply audit a public URL's Content-Security-Policy and Content-Security-Policy-Report-Only headers. Parses directives and sources, flags unsafe-inline, unsafe-eval, non-HTTPS sources, wildcards, missing default-src and frame-ancestors, nonces, hashes, and deprecated directives.
2%
users
Audit one public URL for Content-Type accuracy, X-Content-Type-Options nosniff, and MIME confusion risk via magic-byte sniffing.
2%
users
Audit Set-Cookie response headers for Secure, HttpOnly, SameSite, cookie prefixes, Partitioned (CHIPS), tracking cookies, and privacy posture.
2%
users
Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.
2%
users
Audits a did:web (W3C Decentralized Identifier) document against the did:web method spec. Validates URL construction (including path segments and percent-encoded ports), id match, verification methods, relationship arrays, and service entries. Returns a score, grade, and recommendations.
2%
users
Validate a domain's DNSSEC chain of trust: DS delegation, DNSKEY KSK/ZSK, RRSIG coverage, and AD bit support. Returns score, grade, and recommendations.
2%
users
Audit a domain's SPF, DMARC, and DKIM email authentication DNS records for deliverability and security readiness.
2%
users
Audit one public page for accessible labels on form controls. Checks inputs, selects, textareas, label coverage, missing names, score, and accessibility recommendations.
2%
users
Audit a public GitHub repository's .github/FUNDING.yml sponsorship configuration in one API call. Validates every platform key against GitHub's documented syntax, flags unknown keys and oversized lists, and returns a readiness score and grade.
2%
users
Enrich public GitHub repository URLs with stars, forks, topics, license, activity, owner metadata, release data, and lead-scoring signals. Built for B2B lead generation, devtools research, and competitive intelligence.
2%
users
Audit a public domain's Global Privacy Control support resource at /.well-known/gpc.json against the W3C GPC specification. Validates JSON structure, the required gpc boolean member, and the optional lastUpdate field.
2%
users
Audit a public page's hreflang alternate tags in one API call. Reports x-default, duplicate and invalid values, self-reference, score, and recommendations for international SEO QA.
2%
users
Audit a public HTTPS URL's HSTS header against hstspreload.org submission requirements. Returns max-age, includeSubDomains, preload eligibility, redirect verification, score, grade, and recommendations.
2%
users
Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.
2%
users
Audit a public page for IndieWeb endpoint discovery in one API call. Checks IndieAuth authorization/token endpoints, Micropub, Webmention, Microsub, and rel=me identity links.
2%
users
Audit a public page's JSON-LD structured data in one API call. Checks script count, parse errors, schema types, missing @type values, and SEO readiness.
2%
users
Audit one public page for anchor rel attributes, sponsored/nofollow/ugc usage, unsafe target blank links, and empty anchor text. Built for SEO, affiliate disclosure, and frontend QA workflows.
2%
users
Audit a website for /llms.txt and /llms-full.txt AI discovery readiness. Get a readiness score, markdown structure summary, and actionable recommendations. Built for GEO/AI-SEO consultants, documentation teams, and devrel.
2%
users
Deep audit of a Matrix homeserver's /.well-known/matrix/server and /.well-known/matrix/client discovery files. Validates m.server host:port syntax, optional federation port reachability, client base_url reachability, and CORS.
2%
users
Audit one public HTTPS page for insecure http:// mixed-content subresources (scripts, stylesheets, images, iframes, media). Returns active vs passive classification, per-resource details, score, and migration recommendations.
2%
users
Audit a domain's SMTP MTA-STS transport security policy and TLS-RPT reporting record. Checks DNS, HTTPS policy file, MX matching, and returns a readiness score.
2%
users
Audit a public URL's Network Error Logging (NEL) and Reporting API configuration in one API call.
2%
users
Audit a public OAuth 2.0 authorization server's RFC 8414 discovery metadata in one API call. Checks issuer match, required keys, endpoints, and PKCE support.
2%
users
Audits a public page's oEmbed discovery link and endpoint response against the oEmbed 1.0 spec. Validates link rel=alternate discovery, required type/version fields per declared type, and HTTPS.
2%
users
Audit a public OpenID Connect provider's /.well-known/openid-configuration discovery metadata. Check issuer match, required keys, https endpoints, signing algorithms, and PKCE. Returns a score and grade.
2%
users
Validate Open Graph and Twitter Card social preview images on one public page. Verify og:image and twitter:image URLs load with a valid image content type and reasonable size.
2%
users
Fetch one public URL and deeply audit its Permissions-Policy and legacy Feature-Policy headers. Parse feature directives, classify high-risk browser features, and get a readiness score.
2%
users
Audit a public URL's redirect chain in one API call. Reports hops, final status, HTTPS downgrades, temporary redirects, loops, score, and recommendations for SEO and migration QA.
2%
users
Fetch one public URL and deeply audit its Referrer-Policy HTTP header and meta referrer tag. Validates directives, detects deprecated values, flags conflicts, and returns a privacy posture score, grade, issues, and recommendations.
2%
users
Audit a public page for resource hints (preload, prefetch, preconnect, dns-prefetch, modulepreload, prerender). Returns per-hint analysis, crossorigin gaps, duplicates, score, grade, and Core Web Vitals recommendations.
2%
users
Audit a website's robots.txt directives and sitemap discovery in one fast API call. Detect blocked paths, missing sitemaps, and crawlability issues. Built for SEO agencies, technical SEO consultants, and site migration QA teams.
2%
users
Fetch and normalize public RSS 2.0, Atom 1.0, and RDF/RSS 1.0 feeds into consistent structured JSON. Handles mixed feed formats and returns a unified schema every time. Built for content aggregation, feed monitoring, and marketing automation pipelines.
2%
users
ActorHunt MCP
ActorHunt gives paid members MCP access to keyword data, actor evidence, and Store movement for deciding what to build next.