{"uid":"cap_q3KJMB0l3Y_3dhYz4EZd8","slug":"k8s-manifest-audit-0ec6aa7e","name":"K8s Manifest Audit","description":"Audit a set of Kubernetes manifests against a contract the caller states. Reports an image with no tag or the latest tag, which changes under you; absent resource requests or limits; absent readiness or liveness probes; a missing required label; hostNetwork, hostPID, a hostPath volume or a privileged container; and a credential-shaped environment variable set to a literal, whose value is never echoed. YAML parsing surprises are reported rather than inherited.","url":"https://api.zfinia.com/x402/v1/kubernetes-manifest-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"contract":{"type":"object","properties":{"require_labels":{"type":"array","items":{"type":"string","maxLength":316},"maxItems":50,"minItems":1},"require_probes":{"type":"boolean"},"require_resource_limits":{"type":"boolean"},"require_security_context":{"type":"boolean"},"forbid_mutable_image_tags":{"type":"boolean"}},"additionalProperties":false},"manifests":{"type":"string","maxLength":262144}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.16","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.16/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.16","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.16","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JY8ppS3BHMG215LPy6LWu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.16","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits Kubernetes YAML manifests against a caller-defined contract, flagging image tag issues, missing resource limits, absent probes, security risks, and hardcoded credentials.","exampleAgentPrompt":"Audit these Kubernetes manifests for me — require the labels 'app' and 'team', enforce resource limits and both probes, and flag any mutable image tags or privileged containers.","exampleUseCases":[{"title":"Pre-deployment security gate","prompt":"Before I deploy to production, scan these Kubernetes manifests and flag anything dangerous — privileged containers, hostNetwork, hostPath volumes, or hardcoded credentials in env vars."},{"title":"Enforcing label and probe policy","prompt":"Check all these k8s YAML files against our team policy: every resource must have the labels 'app', 'team', and 'env', readiness and liveness probes are required, and no container should use the latest tag."},{"title":"CI pipeline manifest compliance check","prompt":"Run a compliance audit on these Kubernetes manifests — require resource requests and limits, forbid mutable image tags, and report any missing required labels or YAML parsing errors."}],"resultDescription":"Returns a structured audit report listing violations per manifest resource, including: image tag issues (untagged or 'latest'), missing resource requests/limits, absent readiness or liveness probes, missing required labels, security misconfigurations (hostNetwork, hostPID, hostPath, privileged containers), credential-shaped environment variables with literal values, and any YAML parsing errors encountered.","failureModes":["Invalid or malformed YAML that cannot be parsed — reported as parse errors rather than causing a crash","Manifests exceeding the 256KB character limit will be rejected","Missing required contract fields may cause incomplete validation","Non-Kubernetes YAML structures may produce unexpected or empty results","Network or payment authorization failures return HTTP 402 or 5xx errors"],"whenToPreferThis":"Choose this endpoint when you need a fast, policy-driven audit of Kubernetes manifests before deployment or in a CI/CD pipeline, especially when you want to enforce a custom contract (specific labels, probe requirements, image tag policies) rather than a generic linter. It is purpose-built for Kubernetes YAML and checks both security posture and operational hygiene in a single call, making it ideal for automated gatekeeping without standing up your own tooling.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T18:43:49.135Z","isFirstParty":false,"canonicalSlug":"k8s-manifest-audit-0ec6aa7e"}