{"name":"PkgGuard","description":"Dependency security scan for AI agents and CI: known vulnerabilities and confirmed-malicious packages for a manifest, lockfile or single package, from OSV.dev. Paid per call over x402; free preview and remote MCP.","paid":[{"methods":["POST"],"path":"/v1/scan","param":"manifest | packages","max":500,"price":"$0.003","network":"eip155:8453","asset":"USDC","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F","facilitator":"https://api.cdp.coinbase.com/platform/v2/x402","x402":["v2","v1"]},{"methods":["GET","POST"],"path":"/v1/package","param":"ecosystem, name, version","price":"$0.001","network":"eip155:8453","asset":"USDC","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F","facilitator":"https://api.cdp.coinbase.com/platform/v2/x402","x402":["v2","v1"]}],"free":["/health","/v1/preview","/mcp","/v1/ecosystems","/v1/stats","/openapi.json","/.well-known/x402"],"freeTier":{"preview":{"methods":["GET","POST"],"path":"/v1/preview","limit":"10 requests/min per IP, up to 25 packages","returns":"verdict (clean / vulnerable / malicious) and counts; no advisory ids, severities or fixed-in versions"},"mcp":{"method":"POST","path":"/mcp","transport":"streamable-http","tools":["scan_dependencies","check_package"],"limit":"10 tool calls/min per IP (preview tier)"}},"ecosystems":["npm","PyPI","Go","crates.io","Packagist","RubyGems","Maven","NuGet","Pub","Hex"],"manifests":["package.json","package-lock.json","requirements.txt","Pipfile.lock","poetry.lock","go.mod","Cargo.lock","composer.lock"],"data":{"source":"OSV.dev","source_url":"https://osv.dev","license":"CC-BY 4.0 (OSV.dev); per-advisory sources: GitHub Advisory Database, PyPA, Go, RustSec, OpenSSF Malicious Packages and others","freshness":"live query per call (advisory details edge-cached up to 6 h)","engine":"pkgguard-0.1.1"},"policy":{"storage":"inputs are not stored or logged","charging":"only HTTP 200 results are settled; invalid input and upstream outages are free","network":"package names and versions are sent to OSV.dev; nothing else leaves the Worker"},"disclaimer":"Informational: lists published advisories from OSV.dev for the versions given. Not a security audit; a clean result does not prove a package is safe.","source":"https://agentgate-source.pages.dev/x402-pkgguard/","allTools":"https://youraitools.co/built-by-us","npm":"https://www.npmjs.com/package/@agentgate-builder/pkgguard","endpoint":"https://api.youraitools.co/pkgguard","networks":[{"network":"eip155:8453","name":"Base","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","symbol":"USDC","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F"},{"network":"eip155:137","name":"Polygon","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","symbol":"USDC","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F"},{"network":"eip155:42161","name":"Arbitrum One","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","symbol":"USDC","payTo":"0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F"},{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","name":"Solana","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","symbol":"USDC","payTo":"FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte"}]}