# Dependency Vulnerability Audit

> Dependency Vulnerability Audit is a paid API for AI agents from api.the402.ai, paid per call via x402, $0.263/call, status down (last checked 2026-09-15).

Audits a software project's dependencies for known security vulnerabilities and CVEs

## Facts

- Endpoint: POST https://api.the402.ai/v1/services/svc_9c54812071f2412b/purchase
- Price: $0.263/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-the402-ai-f6b91dfb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UW3OLsBkQI0COJO3ux7qb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-the402-ai-f6b91dfb -d '<json body>'
```

Example prompt: Can you run a dependency vulnerability audit on my project — here's my package.json — and tell me which packages have known CVEs and how severe they are?

## When to prefer this

Use this endpoint when you need a quick, pay-per-use dependency vulnerability audit without setting up a full SCA (Software Composition Analysis) pipeline. Ideal for AI agents that need on-demand security scanning as part of a CI workflow or code review process, especially when integrated with the x402 payment protocol on the402.ai marketplace.

## Known failure modes

- Unsupported package ecosystem or manifest format returns an error
- Malformed or missing dependency file causes parsing failure
- Unknown or private packages may not have vulnerability data
- Payment of 0.263 USDC must be completed before results are returned; payment failure blocks execution
- Rate limiting or service unavailability may return a 402 or 5xx error

## How this service works

Purchase: Dependency Vulnerability Audit

## Output

A structured vulnerability report listing affected dependencies, associated CVE identifiers, severity levels (critical/high/medium/low), and recommended remediation steps or version upgrades.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "id"
 ],
 "properties": {
  "id": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-the402-ai-f6b91dfb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.the402.ai](https://www.zero.xyz/host/api.the402.ai/llms.txt)