{"uid":"cap_InUvEuF_uv3Bq9Malj8zT","slug":"shield-vainplex-dev-515ef930","name":"ShieldAPI Supply Chain Pre-Flight Check","description":"ShieldAPI - x402 security preflight before agents install or run npm/PyPI dependencies","url":"https://shield.vainplex.dev/api/cdp/check-package","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ecosystem","name","version"],"properties":{"name":{"type":"string","description":"Package name"},"version":{"type":"string","description":"Package version"},"ecosystem":{"type":"string","description":"Package ecosystem (e.g., npm, pypi)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"name":"express","version":"4.18.2","ecosystem":"npm"}}},"response":{"flags":[],"score":100,"status":"ALLOW"}},"exampleRequest":{"name":"express","version":"4.18.2","ecosystem":"npm"},"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kCj_QUr18G11tReEcvyh5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a software package against supply chain security signals and returns a risk score and allow/block recommendation","exampleAgentPrompt":"Can you run a supply chain pre-flight check on the npm package lodash version 4.17.21 to make sure it's safe to install?","exampleUseCases":null,"resultDescription":"Returns a JSON object with a numeric risk score (0-100, higher is safer), a status field ('ALLOW' or 'BLOCK'), and an array of flags describing any detected security issues. A score of 100 with empty flags and status ALLOW means the package passed all checks.","failureModes":["Unknown package name or version returns low score or error","Unsupported ecosystem value returns validation error","Missing required query params (ecosystem, name, version) returns 400 Bad Request","Payment not included or rejected returns 402 Payment Required","Network timeout on upstream security data sources returns 503"],"whenToPreferThis":"Use this endpoint when you need a quick, automated go/no-go decision on a specific package version before installation or CI/CD pipeline execution. Ideal for agent-driven dependency audits, automated PR checks, or pre-deployment gates. Prefer this over full-scan endpoints when you only need package supply chain signals rather than a combined multi-vector security assessment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T06:40:13.401Z","isFirstParty":false}