# Crest Systems Code Vulnerability Scanner

> Crest Systems Code Vulnerability Scanner is a paid API for AI agents from audit.crestsystems.ai, paid per call via x402, $0.500000/call, status down (last checked 2026-09-15).

Scans source code for security vulnerabilities and returns OWASP Top 10 classifications, CWE IDs, risk scores, and exact fix recommendations.

## Facts

- Endpoint: GET https://audit.crestsystems.ai/audit/code
- Price: $0.500000/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/audit-crestsystems-ai-8ab0be39
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_MXXiWGk6MrI0nFbL_hRF6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability audit-crestsystems-ai-8ab0be39
```

Example prompt: Can you scan this Python code snippet for security vulnerabilities and tell me the OWASP Top 10 classifications, any CWE IDs, the risk score, and exactly how to fix them? Here's the code: `def login(user, pw): query = f"SELECT * FROM users WHERE username='{user}' AND password='{pw}'" db.execute(query)`

## When to prefer this

Use this endpoint when you need a fast, structured security audit of a specific code snippet with actionable OWASP and CWE-mapped output and exact fix suggestions. Prefer this over generic linters or style checkers when security compliance and vulnerability classification are the primary concern.

## Known failure modes

- Empty or missing code parameter returns a 400 bad request
- Extremely large code inputs may exceed payload limits or time out
- Unsupported or ambiguous language may reduce detection accuracy
- Malformed or non-parseable code snippets may return incomplete results
- 402 Payment Required if USDC payment is not provided or fails

## How this service works

Code vulnerability scan. Returns OWASP Top 10 classification, CWE IDs, risk score, and exact fixes.

## Output

Returns a structured vulnerability report containing OWASP Top 10 category classifications, associated CWE IDs for each finding, an overall risk score, severity ratings, and exact code-level fix recommendations for each discovered vulnerability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "code": {
   "type": "string",
   "description": "Source code to scan"
  },
  "language": {
   "type": "string",
   "description": "Programming language (optional)"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/audit-crestsystems-ai-8ab0be39/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from audit.crestsystems.ai](https://www.zero.xyz/host/audit.crestsystems.ai/llms.txt)