{"uid":"cap_bEwH6xR-CN2VziTLgp0rW","slug":"agentsvc-io-package-safety-check-7312bf65","name":"agentsvc.io Package Safety Check","description":"126 APIs for AI agents: web scraping and crawling to Markdown, AI summaries, data extraction and cited answers, checks before installing a package or citing a source, screenshots and PDF, PDF, OCR and document conversion and more, paid per call with USDC on Base, Solana, Polygon or Arbitrum via x402. No account, no API key, free sample on every service.","url":"https://agentsvc.io/api/v1/proxy/package-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"manifest":{"type":"string","maxLength":100000,"description":"Contents of a package.json or requirements.txt (alternative to packages)"},"packages":{"type":"array","items":{"anyOf":[{"type":"string","maxLength":300},{"type":"object","required":["name"],"properties":{"name":{"type":"string"},"version":{"type":"string","description":"Exact version or npm range; default latest"},"ecosystem":{"type":"string"}}}]},"maxItems":20,"minItems":1,"description":"Strings like \"express@4.17.1\", \"pypi:requests==2.31.0\", \"go:github.com/gin-gonic/gin\", \"maven:org.apache.logging.log4j:log4j-core:2.14.1\", or {name, ecosystem, version}"},"ecosystem":{"type":"string","description":"Default for entries without a prefix: npm, pypi, cargo, go, maven, nuget or rubygems. Default npm"}}},"responseSchema":{"type":"json","example":{"data":{},"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_egCawPSm3LxQ31w3fgcwI","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks one or more software packages (npm, PyPI, Go, Maven, etc.) for known vulnerabilities, malware, or other security issues before installation or citation","exampleAgentPrompt":"Before I install it, can you check whether the npm package 'lodash@4.17.20' has any known vulnerabilities or security issues?","exampleUseCases":[{"title":"Pre-install security scan for a single package","prompt":"I'm about to add 'axios@0.21.1' to my Node.js project — can you check if it has any known vulnerabilities before I install it?"},{"title":"Audit Python requirements file before deployment","prompt":"Here's my requirements.txt — can you scan all these Python packages for known security issues or CVEs before I deploy? requests==2.28.0\nflask==2.0.1\nnumpy==1.21.0"},{"title":"Verify legacy Java dependency safety","prompt":"We're using log4j-core version 2.14.1 as a Maven dependency — is it safe or does it have known exploits like Log4Shell?"}],"resultDescription":"Returns a JSON object with a success flag and a data field containing per-package security findings, including known vulnerabilities, CVEs, malware flags, and risk assessments for each checked package or dependency listed in the manifest.","failureModes":["Unknown package name returns empty or not-found result","Unsupported ecosystem prefix causes parsing error","Manifest file exceeds 100,000 character limit and is rejected","Invalid version range string fails validation","Packages array exceeds 20-item limit","Network or upstream vulnerability database unavailable returns error"],"whenToPreferThis":"Use this endpoint when an AI agent needs to programmatically check package safety across multiple ecosystems (npm, PyPI, Go, Maven, Cargo, NuGet, RubyGems) without setting up an account or API key. It is especially useful for automated CI-adjacent agents, dependency auditing workflows, or any agent that needs to verify a package before recommending or installing it. Prefer this over manual CVE lookups when you need structured, machine-readable output per call and want to pay only per use without a subscription.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-18T00:49:37.832Z","isFirstParty":false,"canonicalSlug":"agentsvc-io-package-safety-check-7312bf65"}