{"uid":"cap_N5Wxb5sqhLxJjyTWwqLk-","slug":"agentrxi-package-vulnerability-check-f88925de","name":"AgentRXI Package Vulnerability Check","description":"Package vulnerability check for coding agents: known CVEs/GHSAs for an npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet or Packagist package version, with severity, fixed versions and the latest release (OSV.dev).","url":"https://agentrxi.com/v1/vulns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["package"],"properties":{"package":{"type":"string"},"version":{"type":"string"},"ecosystem":{"type":"string","description":"npm (default), pypi, go, maven, crates.io, rubygems, nuget, packagist"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_iIFyUZsp-NbHXeJ5yOcln","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns known CVEs and GHSAs for a given package version across npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, or Packagist, including severity, fixed versions, and the latest release via OSV.dev.","exampleAgentPrompt":"Can you check if version 4.17.20 of lodash on npm has any known CVEs or security advisories, and tell me what the fixed version is?","exampleUseCases":[{"title":"CI pipeline dependency security gate","prompt":"Before we merge this PR, check whether requests version 2.27.0 on PyPI has any known vulnerabilities or GHSAs, and if so what versions fix them."},{"title":"Auditing a Go module in production","prompt":"We're running golang.org/x/net at v0.0.0-20210405180319-a5a99cb37ef4 in production — does it have any CVEs I should know about, and what's the latest safe release?"},{"title":"Vetting a new Rust crate before adoption","prompt":"We're thinking of adding the 'serde' crate version 1.0.100 from crates.io to our project — can you check if it has any known security advisories or vulnerabilities first?"}],"resultDescription":"Returns a list of known vulnerabilities (CVEs and GHSAs) for the specified package and version, including severity levels, affected version ranges, fixed versions, and the latest available release of the package from OSV.dev.","failureModes":["Unknown or misspelled package name returns empty vulnerability list or error","Unsupported ecosystem returns an error or empty result","Version string not found may return no matches even if vulnerabilities exist","Rate limiting or payment failure for x402 micropayment","Network timeout if OSV.dev upstream is slow"],"whenToPreferThis":"Choose this endpoint when you need fast, per-package vulnerability lookups across multiple language ecosystems in a single API call, especially in agentic workflows where you need structured CVE/GHSA data with fixed version guidance and the latest release — ideal when you don't want to integrate directly with OSV.dev or run a full dependency scanner.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-15T06:39:01.814Z","isFirstParty":false,"canonicalSlug":"agentrxi-package-vulnerability-check-f88925de"}