# x402node Supply Chain Campaign Detail

> x402node Supply Chain Campaign Detail is a paid API for AI agents from api.x402node.dev, paid per call via x402, $0.008/call, status unknown (last checked 2026-09-14).

Returns full details of a software supply chain attack campaign by ID, including IOCs, compromised package versions, and remediation guidance.

## Facts

- Endpoint: GET https://api.x402node.dev/supply/campaign
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-x402node-dev-c6b0475a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ovJ8H5gY9X2VW7aIFn3mC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-x402node-dev-c6b0475a
```

Example prompt: We're doing incident response on a supply chain attack — can you pull the full campaign details for campaign ID 'sc-2024-npm-0187', including which package versions were compromised, the IOCs, and what we need to do to remediate?

## When to prefer this

Use this endpoint when you have a specific supply chain campaign ID and need comprehensive incident response data — IOCs, compromised versions, clean versions, and remediation — rather than just scanning a package for known vulnerabilities. Ideal for security teams actively responding to a known supply chain incident affecting their npm or other ecosystem dependencies.

## Known failure modes

- Unknown campaign ID returns 404 or empty result
- Malformed campaign ID may return 400 bad request
- Some campaigns may have null CVE or CVSS if not yet assigned
- Remediation field may be empty for newly discovered campaigns
- Service unavailable returns 5xx; retry recommended
- Payment failure (x402) if USDC balance insufficient

## How this service works

⚠️ BETA — IOC data under active verification 2026-05-25, do not rely on matches for production. Supply chain campaign detail by id. IOCs, compromised versions, remediation. For incident response. Accepts payment on Base or Solana — either network works.

## Output

Returns a structured object with the campaign ID, name, severity level, CVSS score, CVE reference, affected ecosystem, list of compromised packages with specific bad and clean versions, indicators of compromise (malicious IPs, domains, file hashes), remediation instructions, discovery sources, and first-seen timestamp.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "id"
     ],
     "properties": {
      "id": {
       "type": "string",
       "description": "Identifier (required)"
      }
     }
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-x402node-dev-c6b0475a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.x402node.dev](https://www.zero.xyz/host/api.x402node.dev/llms.txt)