# Validex

Startup health and validation API providing automated security, trust, web presence, and engineering analysis, individually or as a comprehensive report with AI interpretation.

## Payment

Every endpoint below is paid per call via the x402 protocol (Algorand, USDC). Call it without a PAYMENT-SIGNATURE header to receive a 402 with payment requirements (also available unconditionally at https://api.validex.space/.well-known/x402), sign a payment against them, then retry with the signature on the PAYMENT-SIGNATURE header.

## Endpoints

### POST https://api.validex.space/v1/validate/security - $0.05

Audits SSL and TLS certificates, HTTP security headers such as HSTS and CSP, SPF, DMARC, MX email records, and DNS configuration.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/trust - $0.05

Evaluates HTTPS enforcement, domain registration age, WHOIS records, privacy policy, and terms of service documentation.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/web - $0.06

Inspects online presence including pricing transparency, developer documentation, engineering blog, careers page, and contact channels.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/engineering - $0.08

Analyzes public GitHub repository activity, commit frequency, contributor diversity, release cadence, and OSV known vulnerabilities.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/ai - $0.15

Executes full multi-category validation with an AI-generated startup health verdict, risk factor analysis, and integration recommendations.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/compare - $0.15

Performs comparative analysis and health ranking across 2 to 5 startup domains with relative scoring across all categories.

Request body: { "targets": ["example.com", "other.com"] } (2-5 domains)

### POST https://api.validex.space/v1/validate/quick - $0.20

Performs fast-path network connectivity, TLS certificate, security header, and domain trust validation combined with an AI summary.

Request body: { "target": "example.com" }

### POST https://api.validex.space/v1/validate/full - $0.35

Conducts a deep audit across all six signal categories including security, trust, web, and engineering with full evidence and AI interpretation.

Request body: { "target": "example.com" }

## Other resources

- https://api.validex.space/.well-known/x402 - machine-readable pricing manifest
- https://api.validex.space/.well-known/agent-card.json - A2A agent card
- https://api.validex.space/.well-known/agent.json - generic agent manifest
- https://api.validex.space/.well-known/ai-plugin.json - plugin manifest
- https://api.validex.space/.well-known/mcp.json - MCP tool manifest
- https://api.validex.space/openapi.json - OpenAPI spec for the endpoints above
- https://api.validex.space/agents.md - operating instructions for autonomous agents