{"uid":"cap_-1Y78DAAyuEUOsgEaDa7c","slug":"scanpay-deep-scan-deterministic-code-security-scanner-d376638d","name":"ScanPay Deep Scan — Deterministic Code Security Scanner","description":"Pay-per-call x402 APIs for AI agents: OpenAI-compatible LLM chat, perp funding and arbitrage spreads, crypto prices, gas, FX, Solana SPL mint audit, token price by contract, x402 delivery-receipt verification, web search, clean page extraction, batch tools and deterministic code-security scanning. USDC on Base or Solana, no signup, no API key, from $0.0001 a call.","url":"https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/deep-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["source_code"],"properties":{"language":{"enum":["python","javascript","typescript","tsx"],"type":"string","default":"python"},"source_code":{"type":"string","description":"UTF-8 source code to scan (max 100 KB)"},"include_remediation":{"type":"boolean","default":true}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"charged":true,"product":"scanpay.deep","findings":[],"language":"python","price_usd":10,"risk_band":"clean","syntax_ok":true,"risk_score":100,"remediation":[],"generated_at":1793462400,"payment_mode":"x402-dual-rail","source_sha256":"9f56e761d79bfdb34304a012586cb04d16b435ef6130091a97702e559260a2f2","engine_version":"1.1.0","findings_count":0,"severity_counts":{"low":0,"high":0,"medium":0,"critical":0},"scan_duration_ms":0.5,"no_code_retention":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"10","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$10/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"10","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"10","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_uT7IEHM5CV31lEMzEewnR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"10","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs deterministic static security analysis on source code (Python, JS, TS, TSX), returning findings, severity counts, risk score, and optional remediation guidance — paid per-call via x402 USDC with no API key required.","exampleAgentPrompt":"Can you scan this Python script for security vulnerabilities and give me a risk score with remediation advice? Here's the source code: [paste code here]","exampleUseCases":[{"title":"Pre-deployment security gate for agent-generated code","prompt":"Before we deploy this TypeScript function our AI agent just wrote, can you run a security scan on it and flag anything critical or high severity? Here's the source code."},{"title":"Auditing user-submitted scripts in a marketplace","prompt":"A user just submitted this Python script to our marketplace — can you check it for security issues, give me a risk band, and list any findings with severity so I can decide whether to approve it?"},{"title":"CI pipeline security check for JavaScript module","prompt":"We're about to merge this JavaScript module into main — can you do a deterministic security scan on it, tell me if it's clean or risky, and include remediation steps for anything that comes up?"}],"resultDescription":"Returns a JSON object with: charged flag, product ID, findings array (with details per vulnerability), language detected, price in USD, risk band (e.g. 'clean'), syntax validity, risk score (0-100), remediation array, generation timestamp, payment mode, SHA-256 of source, engine version, findings count, severity counts broken down by low/medium/high/critical, scan duration in ms, and a no-code-retention confirmation.","failureModes":["Payment not received or x402 handshake failure — endpoint returns 402 Payment Required","Source code exceeds 100 KB limit — request rejected","Unsupported language value outside enum (python, javascript, typescript, tsx) — validation error","Malformed or missing source_code field — 400 Bad Request","Cloudflare Worker timeout for very large or complex code","Network error reaching the edge worker endpoint"],"whenToPreferThis":"Choose this endpoint when you need a fast, pay-per-call, no-signup static security scan for Python, JavaScript, TypeScript, or TSX code and want deterministic results with severity breakdowns and optional remediation. Ideal for AI agents that need to audit code snippets on demand without managing API keys or subscriptions. Prefer over heavier CI/CD SAST tools when lightweight, per-call pricing via USDC is preferred and no persistent account is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T18:33:16.734Z","isFirstParty":false,"canonicalSlug":"scanpay-deep-scan-deterministic-code-security-scanner-d376638d"}