{"uid":"cap_0jsR5qB2pfboZfbkd7s6J","slug":"scanpay-code-security-scanner-6f67efb5","name":"ScanPay Code Security Scanner","description":"Pay-per-call x402 APIs for AI agents: OpenAI-compatible LLM chat, perp funding and arbitrage spreads, crypto prices, gas, FX, Solana SPL mint audit, token price by contract, x402 delivery-receipt verification, web search, clean page extraction, batch tools and deterministic code-security scanning. USDC on Base or Solana, no signup, no API key, from $0.0001 a call.","url":"https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["source_code"],"properties":{"language":{"enum":["python","javascript","typescript","tsx"],"type":"string","default":"python"},"source_code":{"type":"string","description":"UTF-8 source code to scan (max 100 KB)"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"charged":true,"findings":[],"language":"python","syntax_ok":true,"max_severity":null,"payment_mode":"x402-dual-rail","source_sha256":"9f56e761d79bfdb34304a012586cb04d16b435ef6130091a97702e559260a2f2","engine_version":"1.1.0","findings_count":0,"scan_duration_ms":0.5}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6rMkPXIVROrSZzMgRlNAK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Statically scans AI-generated Python, JavaScript, or TypeScript source code using 45 deterministic AST rules and returns structured security findings with severity, line ranges, and remediation guidance in ~100ms.","exampleAgentPrompt":"Before you run that Python script you just generated, scan it for security vulnerabilities using the deterministic AST scanner — I need to see any high-severity findings, the affected line ranges, and what to fix before we execute anything.","exampleUseCases":[{"title":"Pre-execution gate in AI coding agent","prompt":"I have an AI agent that generates and runs Python code automatically. Before each execution, scan the generated script for dangerous patterns like shell injection, file system abuse, or network exfiltration and block it if any high-severity issues are found."},{"title":"CI security check for LLM-written JavaScript","prompt":"My team uses an LLM to generate JavaScript utility functions. Can you scan this JS snippet for security vulnerabilities and return the rule IDs and line numbers of anything flagged as high or critical severity before we merge it?"},{"title":"Safe code sandbox entry guard","prompt":"I'm building a sandbox that executes TypeScript submitted by users. Before allowing any code to run, scan it with the AST security rules and tell me if it's safe to proceed or if it should be blocked, along with the specific findings."}],"resultDescription":"Returns structured security findings per rule triggered: each finding includes a rule_id, severity level (e.g. low/medium/high/critical), the affected line ranges in the source file, and a remediation suggestion. An overall PASS/WARN/BLOCK verdict is also returned. Response arrives in approximately 100ms with no code executed and no data retained.","failureModes":["Unsupported language submitted — only Python, JavaScript, and TypeScript are analyzed","Code payload too large or malformed request body","Payment not included or insufficient — endpoint requires $0.05 USDC per call via x402 protocol","Network timeout if Cloudflare Worker is cold-starting","False negatives: obfuscated or dynamically constructed malicious code may evade AST-level rules","False positives: legitimate patterns that match security rule heuristics flagged incorrectly"],"whenToPreferThis":"Choose this endpoint when you need a fast, deterministic, zero-data-retention pre-execution security gate for AI-generated or user-submitted Python/JS/TS code in an agent loop. It is ideal when you cannot afford to execute code speculatively, when LLM-based review would be too slow or unreliable, or when you need structured, rule-referenced findings rather than natural language analysis. Prefer it over LLM-based code review when consistency, auditability, and sub-200ms latency are required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-01T06:56:16.425Z","isFirstParty":false,"canonicalSlug":"scanpay-code-security-scanner-6f67efb5"}