Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint · rollforge · bestiary · statline · matchpoint · retail · agentops · browserworkflow · modelrouter · compose
$ man homoglyph-check

/homoglyph-check

agentutility / web-probe / homoglyph-check
PRICE / CALL
$0.003
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
utilities
STATUS
live
NAME
homoglyph-check detects unicode lookalike characters that impersonate ascii latin letters, a common phishing-domain trick
SYNOPSIS
POST https://x402.agentutility.ai/homoglyph-check
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Detects Unicode lookalike characters that impersonate ASCII Latin letters, a common phishing-domain trick. Scans text (typically a domain, email, or username) for Cyrillic / Greek / fullwidth / mathematical lookalikes plus zero-width and RTL-override / bidi-control characters. Returns per-character findings (codepoint, block, impersonates), block counts, mixed-script flag, ASCII-folded normalized form, and a 0-100 risk score with bucket. Use it as a homoglyph detector, Unicode lookalike scanner, IDN spoof check, phishing-domain inspector, typosquat detector, mixed-script analyzer, or zero-width-char finder.

INPUTrequest schema
propertytypedescriptionreq?
textstringInput string to scan (domain, email, username, or arbitrary text). UTF-8, max ~10k chars.required
OUTPUTresponse shape
fieldtypedescription
textstringOriginal input string that was scanned for homoglyphs and invisible characters.
text_lengthnumberCharacter count of the input string.
homoglyph_findingsarrayArray of detected lookalike characters with position, script (Cyrillic/Greek/etc), and ASCII equivalent.
homoglyph_countnumberTotal number of homoglyph characters found in the input.
invisible_findingsarrayArray of zero-width, invisible, or RTL-override characters detected, with positions and codepoints.
invisible_countnumberTotal number of invisible or zero-width characters found.
block_countsobjectMap of Unicode block names to character counts (e.g. Latin, Cyrillic, Greek).
has_mixed_scriptsbooleanTrue if the input mixes multiple writing scripts, a common phishing signal.
ascii_onlybooleanTrue if every character is plain ASCII with no Unicode lookalikes possible.
normalizedstringASCII-folded form of the input with homoglyphs mapped back to their Latin equivalents.
is_suspiciousbooleanTrue if the input shows signs of a homoglyph or invisible-character attack.
risk_scorenumberPhishing risk score from 0 (safe) to 100 (highly suspicious) based on findings.
risk_levelstringCategorical risk bucket such as low, medium, high, or critical.
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/homoglyph-check \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the homoglyph-check tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
homoglyphunicodephishingsecuritydomainspoofing
methods
POST
cluster
webprobe
price
$0.003 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
crates-io-statsFetches the public crates.io API record for a Rust crate and returns description, license, repository, homepage, documentation, keywords,…$0.003
crypto-news-apiReturns recent cryptocurrency headline metadata and sentiment.$0.003
jwt-decodeDecodes a JWT and inspects its claims without needing the signing key.$0.003
npm-package-statsFetches the public npm registry record for a package and returns description, license, repository, latest version, total version count, r…$0.003
pypi-package-statsFetches the public PyPI JSON record for a Python package and returns summary, license, homepage, repository, documentation, issues URL, a…$0.003
url-metadata-extractExtracts page metadata from any URL: title, description, Open Graph and Twitter Card tags, canonical link, and favicon.$0.003
keyword-suggestKeyword and autocomplete suggestions for any seed query.$0.002
arxiv-bibtexTurns an arXiv paper into a BibTeX entry: pulls title, authors, year, abstract, and DOI from the arXiv API and generates a properly-forma…$0.005
SEE ALSO
agentutility · webprobe · x402 · mcp · llms.txt · registry.json · bazaar.x402.org