{"uid":"cap_qRQKEp2lzbIYTqsGQms_P","slug":"code-security-scan-api-586c219f","name":"Code Security Scan API","description":"Pay-per-scan code security scanning (Semgrep, ESLint, Bandit, npm audit) via x402.","url":"https://scan-api-production-e73f.up.railway.app/scan/audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["code"],"properties":{"code":{"type":"string","description":"Source code to scan"},"language":{"enum":["javascript","python","typescript","html"],"type":"string","description":"Optional; auto-detected if omitted"},"packageJson":{"type":"object","description":"Optional package.json; enables dependency audit"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wIhRjC_eX9oM_NJ11kGNY","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans source code for security vulnerabilities using Semgrep, ESLint, Bandit, and npm audit, charged per scan via x402 micropayment.","exampleAgentPrompt":"Can you scan this JavaScript code for security vulnerabilities — here's the source and my package.json — and let me know what issues it finds?","exampleUseCases":[{"title":"Python script security review","prompt":"Can you run a security scan on this Python script I wrote? I want to catch any insecure patterns before I deploy it to production."},{"title":"npm dependency vulnerability audit","prompt":"Check my package.json for any known vulnerable dependencies — here it is, can you run an audit and tell me what CVEs or issues come up?"},{"title":"TypeScript app pre-deployment check","prompt":"Before I ship this TypeScript app, can you scan the source code for security issues? Here's the code — flag anything that looks dangerous."}],"resultDescription":"Returns a structured report of security findings, including vulnerability descriptions, severity levels, affected lines or packages, and tool-specific results from Semgrep, ESLint, Bandit, and/or npm audit depending on the detected or specified language.","failureModes":["Payment not received or x402 payment fails — scan not executed","Unsupported language detected or specified — scan may be skipped or return empty results","Malformed or missing 'code' field — validation error returned","Invalid package.json format — dependency audit skipped or error returned","Scan timeout for very large code inputs","Network or service unavailability on Railway deployment"],"whenToPreferThis":"Choose this endpoint when you need a quick, pay-per-use security scan of source code without committing to a subscription, especially when working with JavaScript, TypeScript, Python, or HTML. It is ideal for CI/CD pipelines, one-off code reviews, or agent workflows that need on-demand vulnerability detection across both static code analysis and dependency auditing in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T06:32:02.538Z","isFirstParty":false,"canonicalSlug":"code-security-scan-api-586c219f"}