{"uid":"cap_4-5kLOSqlhGZTt8iWEKsJ","slug":"token-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-6a7c9094","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/vuln-scanner)","url":"https://token-intel.agentdiet.dev/v1/vuln-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Hqshl_yJUPP60QXLbpLq8","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real-time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories, and tell me which versions have been patched?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before we ship, can you scan the PyPI package 'Pillow' for any known CVEs or GHSA vulnerabilities and let me know what the latest patched version is?"},{"title":"Check npm package in CI pipeline","prompt":"Does the npm package 'axios' have any active security advisories right now? I want to know the CVE IDs and whether there's a safe version I should upgrade to."},{"title":"Vet Rust crate for security issues","prompt":"Can you check the Rust crate 'serde' on crates.io for any known vulnerabilities or GHSA advisories before I add it to our project?"}],"resultDescription":"Returns a list of active vulnerabilities for the queried package including CVE identifiers, GHSA advisory IDs, severity information, affected version ranges, and recommended patched versions sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns no results or an error","Ecosystem prefix omitted may cause ambiguous resolution or incorrect ecosystem matching","Package with no known vulnerabilities returns an empty advisory list (not an error)","Rate limiting or upstream OSV.dev unavailability may cause timeouts","Invalid package format (missing colon separator) may return a validation error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from OSV.dev for a specific open-source package across PyPI, npm, Go modules, or Rust crates. It is ideal for automated dependency auditing, CI/CD security gates, or on-demand CVE lookups where up-to-date GHSA and CVE coverage is required. Prefer it over static databases or cached sources when freshness matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:17.105Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-5396da3b"}