Validex

Startup health and validation API providing automated security, trust, web presence, and engineering analysis, individually or as a comprehensive report with AI interpretation.

What it does

Submit a startup domain (e.g. stripe.com) to any validation endpoint. Validex resolves the entity, runs the relevant validators in parallel, scores each signal category on a 0-100 scale, computes a weighted overall score and letter grade (A+ to F), and returns a structured JSON report. AI-enabled tiers (ai, quick, full) additionally call an LLM to generate an executive summary, risk flags, category narrative, and actionable suggestions.

The compare endpoint evaluates 2-5 domains in parallel and returns a ranked leaderboard alongside individual reports for each target.

Validator categories and weights

Scoring

Endpoints and pricing

Every write endpoint below requires a payment via the x402 protocol (Algorand, USDC). Read endpoints are free.

EndpointPriceCategoriesWhat it checks
POST /v1/validate/security $0.05 security TLS certificate, security headers (HSTS, CSP, X-Frame, etc.), SPF, DMARC
POST /v1/validate/trust $0.05 trust HTTPS enforcement, domain age (WHOIS/RDAP), MX records
POST /v1/validate/web $0.06 product + growth Pricing page, documentation, blog, about, contact, careers, changelog
POST /v1/validate/engineering $0.08 engineering GitHub repo presence, commit activity, contributors, release cadence, issue/PR health, star count
POST /v1/validate/ai $0.15 all (security, trust, engineering, product, growth, website) + AI All six categories + AI executive summary, insights, risk flags, and recommendations
POST /v1/validate/compare $0.15 all (security, trust, engineering, product, growth, website) All six categories across 2-5 domains; ranked by overall score
POST /v1/validate/quick $0.20 security + trust + AI Security + trust combined with an AI summary
POST /v1/validate/full $0.35 all (security, trust, engineering, product, growth, website) + AI All six categories with full evidence, sources, and AI interpretation

Read endpoints (free, no payment required)

Request format

Single-target endpoints (all except compare):

POST /v1/validate/<tier>
Content-Type: application/json
PAYMENT-SIGNATURE: <x402-signature>

{ "target": "stripe.com", "refresh": false }

The target field accepts a bare domain or a full URL. refresh (optional, default false) bypasses the validator result cache.

Compare endpoint:

POST /v1/validate/compare
Content-Type: application/json
PAYMENT-SIGNATURE: <x402-signature>

{ "targets": ["stripe.com", "github.com"], "refresh": false }

targets accepts 2-5 domain strings.

Payment flow (x402, Algorand USDC)

  1. Call any paid endpoint with no PAYMENT-SIGNATURE header.
  2. Receive 402 Payment Required with a PAYMENT-REQUIRED response header and a JSON body describing the price, asset, network, and payTo address.
  3. Sign a payment against those requirements using an x402-compatible library (e.g. @x402/axios).
  4. Retry the same request with the signature on the PAYMENT-SIGNATURE header.
  5. On success, the response body is the analysis report. A PAYMENT-RESPONSE header confirms settlement.

Unconditional pricing (no round trip): /.well-known/x402

Discovery resources