One scan. 44 checks.
Fix before your users find out.
Paste your URL. Get a full compliance report in 30 seconds.
100% Free · 44 checks · Instant report · No account needed
- x402, agent.json, MCP, llms.txt & AI plugin discovery
- Security headers, CORS, rate limiting, DNSSEC, CAA & DMARC/SPF
- OpenAPI spec, robots.txt AI crawlers, auth maturity & Privacy / GDPR
- EU AI Act, FATF Travel Rule, A2A Protocol, ERC-8004 on-chain & wallet trust
- API versioning, human oversight (EU AI Act Art. 14), Terms of Service & Content-Type
AI Agent Compliance Monitoring — How It Works
Who is Probe for?
Built for anyone shipping AI agents that touch payments, identity, or onchain services.
Integrate into your pipeline
Block deploys that fail compliance. Show your score publicly.
curl -X POST getprobe.xyz/api/ci \
-d '{"url":"$API_URL",
"threshold":70}'
# Returns 200 if pass,
# 422 if below thresholdBefore & After Probe
See what changes when you add automated compliance monitoring.
- Manual, ad-hoc compliance checks
- Issues found by users in production
- No visibility into endpoint drift
- Scramble before audits & listings
- No proof of ongoing compliance
- Automated 44-check audits every 1–12h
- Alerts before issues become incidents
- Real-time drift detection & scoring
- Always listing-ready with live score
- Shareable reports & badge for README
⚠ EU AI Act enforcement starts August 2, 2026
The EU AI Act requires AI systems to declare human oversight mechanisms, risk levels, and transparency disclosures. MCP servers and AI agent APIs that operate in the EU must comply — or face fines up to €7.5M / 1% of global revenue for transparency violations (Article 50).
Probe checks the technical requirements now:
• Human oversight endpoint (Art. 14) & kill switch
• AI model disclosure & risk classification
• Privacy policy, DMARC, security headers
• Transparency & documentation endpoints
AI Agent API Compliance Leaderboard
Top-scoring APIs from public, opt-in audits.
x402 Audit Tool — Why Probe?
Purpose-built for AI agent compliance. Not another uptime monitor.
| Probe | DIY cron + scripts | Uptime monitors | |
|---|---|---|---|
| x402 / ERC-8004 checks | ✓ | — | — |
| Sanctions screening | Q3 2026 | Manual | — |
| 44 compliance checks (incl. Voice AI) | ✓ | Build yourself | HTTP only |
| Continuous monitoring | Every 1–12h | You maintain | ✓ |
| Shareable reports | ✓ | — | — |
| Score badge for README | ✓ | — | — |
| Time to first report | ~30 seconds | Days of engineering | N/A |
| Setup time | 0 — just paste URL | Hours / days | Minutes |
| Price | 100% Free | Dev time | $10–100/mo |
Security & Privacy
100% Free
No paid plans. No limits. No account needed. Everything included.
We're building the largest AI agent compliance dataset. That's why everything is free — we want maximum adoption.
Need enterprise features? Contact us
Frequently Asked Questions
What is AI agent API compliance monitoring?
It's automated, continuous checking of your AI agent's API endpoints against emerging standards like x402 (payment disclosure), ERC-8004 (agent identity), MCP (Model Context Protocol), Voice AI compliance (EU AI Act Article 50), and security best practices. Probe runs 44 checks and alerts you when anything drifts.
How is Probe different from uptime monitoring?
Uptime monitors only check if your server responds with HTTP 200. Probe checks compliance-specific things: x402 payment metadata, agent identity endpoints, MCP server, llms.txt, security headers, rate limiting, and more. It's purpose-built for AI agents, not generic web apps.
Is Probe free?
Yes — Probe is 100% free. Unlimited audits, all 44 checks including 10 Voice AI compliance checks. No account, no credit card, no limits. We're building the largest AI agent compliance dataset and want maximum adoption first.
Does Probe store my API data?
No. Probe only makes read-only GET/HEAD requests to public endpoints. We never store request bodies, response payloads, or API keys. Only audit metadata (score, check results) is persisted for your plan's retention period.
What is an x402 check?
x402 is an emerging standard for AI agent payment and trust disclosure. Probe checks if your API publishes a .well-known/x402.json file and whether its contents are valid — critical for agent directories and listing approvals.
Can I use Probe with any API?
Probe works with any publicly accessible HTTPS endpoint. It's optimized for AI agent APIs but can audit any API. Just paste your URL and get a report in 30 seconds.
Do you support MiCA compliance checks?
Probe's 44 checks cover the technical compliance foundations that MiCA-regulated services need (x402, identity, security, rate limiting, Voice AI). Dedicated MiCA checks including sanctions screening via Chainalysis oracle are on our roadmap for Q3 2026.
What does the "Zero-address block" check do?
This check verifies that your payment endpoint rejects the Ethereum zero address (0x0000...0000) as a recipient. Sending funds to the zero address permanently burns them. A compliant API should return an error when a client requests payment to 0x0. This is a critical safety check for any API that handles on-chain transfers.
What does "Auth maturity" mean?
Auth maturity evaluates how your API handles authentication. Probe checks for modern auth patterns: OAuth 2.0, API key rotation support, x402 payment gates, and proper 401/403 responses. A mature auth setup uses layered security rather than a single shared API key.