WATCHER: get a signed callback when an indicator of compromise (IP or domain) changes malicious status across threat feeds.
WATCHER: get a signed callback when an indicator of compromise (IP or domain) changes malicious status across threat feeds. Arm once, pay once. Pass ioc (an IP address or domain). Fires when the malicious verdict flips; bounded by maxFires/expiry. The status at arm time is baselined. Signed (verify offline) + retried; recoverable via watchers.status. Returns a watcherId.
| Method | Endpoint | Price | Description |
|---|---|---|---|
POST | /v1/marketplace/api/watchers-ioc-reputation | $0.0575 | Invoke Watchers Ioc Reputation (Dns) and return the upstream response. |
Requests are paid per call over the x402 protocol. Call the endpoint, receive a 402 Payment Required quote, then repeat the request with the signed payment header. The SDKs do both steps for you.
# 1. Ask for a quote
curl -i -X POST https://api.jarvisclaw.ai/v1/marketplace/api/watchers-ioc-reputation \
-H 'Content-Type: application/json' \
-d '{}'
# 2. Pay it (the SDK signs and retries for you)
curl -X POST https://api.jarvisclaw.ai/v1/marketplace/api/watchers-ioc-reputation \
-H 'Content-Type: application/json' \
-H 'X-PAYMENT: <signed-payload>' \
-d '{}'
Open in the marketplace
Docs: Getting started · x402 payments · x402 discovery · All APIs