x402 census · api.agentstools.dev · 9cb02ee89339 · JSON

POST /code/scan

method-gated

Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, command injection, code and template injection, SSRF, path traversal, insecure deserialization, weak crypto, insecure randomness, open redirect and XXE across Python, JavaScript, TypeScript, Java and Go. Returns a go/no-go verdict with per-finding CWE, severity, file and line. Static indic…

Verdict: not verified by an unpaid GET. 405/400: the 402 sits behind the declared method. This says nothing about whether the route works when called as declared.

Facts from the catalogs

Field Value

URL https://api.agentstools.dev/code/scan

Method POST

Price $0.02 USDC = 20000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base)

payTo 0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493

Seller api.agentstools.dev

Catalogs cdp (row updated 2026-09-25)

Listed since (lower bound) 2026-09-25 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-09-25

CDP quality counters 7 calls and 3 unique payers in 30 days, last call 2026-09-25 (catalog-reported, not verified on chain)

Category (keyword rule) trading-signals

Templated path no

x402Version in catalog 2

Service name / tags code-scan · sast, security, code, cwe, pre-commit

Unpaid probe (census of 2026-09-30)

Field

Value

Probed at

2026-09-30T23:19:34.168Z

HEAD

405

GET

405

Verdict

method-gated 405/400: the 402 sits behind the declared method

402 carried in

n/a

x402Version in the 402

n/a

accepts[0]

none

Live amount equals catalog price

not comparable

Live payTo equals catalog payTo

not comparable

extensions.bazaar in the 402

PAYMENT-REQUIRED header

WWW-Authenticate offer

none

Content type / server / CORS

application/json / uvicorn / none

Latency

7,060 ms

Error

none

No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.

On-chain facts for the payTo (public address)

Field Value

Distinct payers 45

Payments 314

USDC volume $2.00

Median payment $0.003

First / last payment 2026-07-07 / 2026-09-30

Sampler-shaped share of payments 98.4%

Payers that are not samplers 1

Source forensics-2026-09-30

Address 0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493

Declared input and output (extensions.bazaar)

{
 "input": {
  "body": {
   "diff": "--- a/db.py\n+++ b/db.py\n@@ -1,2 +1,3 @@\n import sqlite3\n+def f(cur, uid):\n+    cur.execute(f\"SELECT * FROM users WHERE id = {uid}\")\n"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
 },
 "output": {
  "type": "json",
  "example_truncated": true,
  "chars": 624
 }
}

Try it (unpaid: shows the 402)

curl -si -X POST 'https://api.agentstools.dev/code/scan' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'

The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/9cb02ee89339/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"9cb02ee89339"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on api.agentstools.dev.