{"uid":"cap_bIXIy_1ftNO-CGKdIrqGI","slug":"code-security-scan-api-306485f2","name":"Code Security Scan API","description":"Pay-per-scan code security scanning (Semgrep, ESLint, Bandit, npm audit) via x402.","url":"https://scan-api-production-e73f.up.railway.app/scan/deep?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["code"],"properties":{"code":{"type":"string","description":"Source code to scan"},"language":{"enum":["javascript","python","typescript","html"],"type":"string","description":"Optional; auto-detected if omitted"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.25","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.25/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_dTdhyPAZGCBbFZAwF504V","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.25","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs pay-per-scan static security analysis on source code using Semgrep, ESLint, Bandit, and npm audit, returning vulnerability findings.","exampleAgentPrompt":"Can you scan this Python script for security vulnerabilities? Here's the code: `import os; password = 'hardcoded123'; os.system('rm -rf ' + user_input)`","exampleUseCases":[{"title":"Pre-deployment security gate for web app","prompt":"Before I push this JavaScript file to production, can you run a security scan on it and tell me if there are any vulnerabilities I should fix? Here's the code: [paste JS code]"},{"title":"Audit Python data pipeline for CVEs","prompt":"I just wrote a Python ETL script that handles user data — can you run a security scan on it to catch things like SQL injection risks, insecure deserialization, or dangerous function calls?"},{"title":"Scan TypeScript backend for auth flaws","prompt":"Can you check this TypeScript Express API code for security issues, especially around authentication and input validation? I want to know severity levels for anything you find."}],"resultDescription":"Returns a structured object containing security scan results, including identified vulnerabilities, their severity levels, affected lines or patterns, the tool(s) that flagged each issue (Semgrep, ESLint, Bandit, or npm audit), and remediation guidance where available.","failureModes":["Code field is empty or missing — returns validation error","Language not auto-detectable and not specified — may produce incomplete results","Unsupported language submitted — returns error or empty findings","Code too large — may time out or be rejected","Payment not processed via x402 — returns 402 Payment Required"],"whenToPreferThis":"Choose this endpoint when you need on-demand, pay-per-use static security analysis across multiple languages (JavaScript, TypeScript, Python, HTML) without committing to a subscription. It's ideal for CI/CD pipelines, code review automation, or one-off security audits where you want results from multiple tools (Semgrep + ESLint + Bandit + npm audit) aggregated in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T06:38:40.869Z","isFirstParty":false,"canonicalSlug":"code-security-scan-api-586c219f"}