{"uid":"cap_J5qCTCsS1e8fXbJEQwNmv","slug":"token-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-9ed3e6df","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/go-module-cve)","url":"https://token-intel.agentdiet.dev/v1/go-module-cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zXTQ-MnqJlNdKZ-sEakKE","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories for any PyPI, npm, Go, or Rust package, returning active vulnerabilities and patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any known CVEs or GHSA security advisories right now, and tell me which versions are patched?","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before we ship this release, check if PyPI:cryptography has any active CVEs or GHSA advisories, and let me know what the latest patched version is."},{"title":"Scan npm library for supply chain risk","prompt":"Does the npm package lodash have any known security vulnerabilities on OSV.dev right now? I need CVE IDs and which version fixes them."},{"title":"Go module security check in CI","prompt":"We're using golang.org/x/net in our Go service — can you look it up on the vulnerability scanner and tell me if there are any open advisories or CVEs we need to patch?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, vulnerability descriptions, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev database — returns empty or null vulnerability list","Invalid ecosystem prefix causes malformed query — returns error indicating bad package format","Package has no known vulnerabilities — returns empty advisories list (not an error)","OSV.dev upstream timeout or unavailability — returns 503 or gateway error","Payment failure via x402 — returns 402 Payment Required before query is executed"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data sourced directly from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. It is ideal for CI/CD pipeline security checks, dependency auditing before releases, or any agent workflow that must verify current CVE and GHSA status without relying on stale cached data. Prefer it over static SCA tools when freshness of advisory data matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:32.590Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-5396da3b"}