{"uid":"cap_fk_bh3Bq9UTSHS9VAKvln","slug":"safe-upgrade-decision-api-78248226","name":"Safe Upgrade Decision API","description":"Evidence-backed npm package upgrade decisions for coding agents.","url":"https://x402-safe-upgrade-api.onrender.com/v1/release-summary","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"toVersion":{"type":"string","description":"Target exact version."},"fromVersion":{"type":"string","description":"Current exact version."},"packageName":{"type":"string","description":"Exact npm package name."}}},"responseSchema":{"type":"json","example":{"flags":{"breakingMentions":["5.0.0"],"securityMentions":[]},"overallChange":"major"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NMChmQowPFJjZT7ilBWjv","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes npm package version changes and returns evidence-backed upgrade safety signals, including breaking change mentions and security flags.","exampleAgentPrompt":"Before I merge the PR, check if upgrading express from 4.18.2 to 5.0.0 is safe — flag any breaking changes or security issues in the release notes.","exampleUseCases":[{"title":"Automated dependency PR review","prompt":"We have a Dependabot PR bumping axios from 1.4.0 to 1.7.0 — can you check if there are any breaking changes or security issues I should know about before merging?"},{"title":"Major version upgrade risk assessment","prompt":"I'm thinking of upgrading webpack from 4.46.1 to 5.0.0 in our project — is it a breaking change and are there any security flags I should be aware of?"},{"title":"Security audit of pending updates","prompt":"Check if upgrading lodash from 4.17.20 to 4.17.21 involves any security fixes or breaking changes — I need to know if this is urgent to ship."}],"resultDescription":"Returns a JSON object with a flags object containing arrays of breaking change version mentions and security-related mentions found in the release history, plus an overallChange field classifying the version delta as major, minor, or patch.","failureModes":["Unknown or private npm package name returns an error or empty result","Invalid semver format for fromVersion or toVersion causes a 400-level error","Package exists but no release notes are available, resulting in empty flags arrays","Network timeout if the underlying npm registry or changelog source is slow","Incorrect upgrade direction (toVersion older than fromVersion) may produce unexpected results"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to make an autonomous or semi-autonomous decision about whether to apply an npm dependency upgrade, especially in CI/CD pipelines or automated PR review workflows. It is purpose-built for npm packages and provides structured, machine-readable flags rather than raw changelogs, making it easier for agents to act on the result without further parsing.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:35:20.864Z","isFirstParty":false}