# agentsvc.io Package Safety Check

> agentsvc.io Package Safety Check is a paid API for AI agents from agentsvc.io, paid per call via x402, $0.004/call, status unknown (last checked 2026-10-18).

Checks one or more software packages (npm, PyPI, Go, Maven, etc.) for known vulnerabilities, malware, or other security issues before installation or citation

## Facts

- Endpoint: POST https://agentsvc.io/api/v1/proxy/package-check?utm_source=zero.xyz
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-18
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentsvc-io-package-safety-check-7312bf65
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_bEwH6xR-CN2VziTLgp0rW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentsvc-io-package-safety-check-7312bf65 -d '<json body>'
```

Example prompt: Before I install it, can you check whether the npm package 'lodash@4.17.20' has any known vulnerabilities or security issues?

## When to prefer this

Use this endpoint when an AI agent needs to programmatically check package safety across multiple ecosystems (npm, PyPI, Go, Maven, Cargo, NuGet, RubyGems) without setting up an account or API key. It is especially useful for automated CI-adjacent agents, dependency auditing workflows, or any agent that needs to verify a package before recommending or installing it. Prefer this over manual CVE lookups when you need structured, machine-readable output per call and want to pay only per use without a subscription.

## Known failure modes

- Unknown package name returns empty or not-found result
- Unsupported ecosystem prefix causes parsing error
- Manifest file exceeds 100,000 character limit and is rejected
- Invalid version range string fails validation
- Packages array exceeds 20-item limit
- Network or upstream vulnerability database unavailable returns error

## How this service works

126 APIs for AI agents: web scraping and crawling to Markdown, AI summaries, data extraction and cited answers, checks before installing a package or citing a source, screenshots and PDF, PDF, OCR and document conversion and more, paid per call with USDC on Base, Solana, Polygon or Arbitrum via x402. No account, no API key, free sample on every service.

## Output

Returns a JSON object with a success flag and a data field containing per-package security findings, including known vulnerabilities, CVEs, malware flags, and risk assessments for each checked package or dependency listed in the manifest.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "manifest": {
   "type": "string",
   "maxLength": 100000,
   "description": "Contents of a package.json or requirements.txt (alternative to packages)"
  },
  "packages": {
   "type": "array",
   "items": {
    "anyOf": [
     {
      "type": "string",
      "maxLength": 300
     },
     {
      "type": "object",
      "required": [
       "name"
      ],
      "properties": {
       "name": {
        "type": "string"
       },
       "version": {
        "type": "string",
        "description": "Exact version or npm range; default latest"
       },
       "ecosystem": {
        "type": "string"
       }
      }
     }
    ]
   },
   "maxItems": 20,
   "minItems": 1,
   "description": "Strings like \"express@4.17.1\", \"pypi:requests==2.31.0\", \"go:github.com/gin-gonic/gin\", \"maven:org.apache.logging.log4j:log4j-core:2.14.1\", or {name, ecosystem, version}"
  },
  "ecosystem": {
   "type": "string",
   "description": "Default for entries without a prefix: npm, pypi, cargo, go, maven, nuget or rubygems. Default npm"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {},
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentsvc-io-package-safety-check-7312bf65/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentsvc.io](https://www.zero.xyz/host/agentsvc.io/llms.txt)