# Halowerk File Inspect

> Halowerk File Inspect is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-15).

Analyzes a file's binary signature to determine its true type, detects macros, embedded executables, archive path traversal, PDF JavaScript/launch actions, and extension-content mismatches — without executing or storing the file.

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/file/inspect
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-file-inspect-13956219
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_QhjrNY5WZun58hW3_44iN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-file-inspect-13956219 -d '<json body>'
```

Example prompt: Can you inspect this uploaded file and tell me its real file type, whether it has any macros or embedded executables, and if its extension matches what it actually is? I don't want it executed or saved anywhere.

## When to prefer this

Choose this endpoint when you need lightweight, fast static analysis of a file's binary signature and metadata without executing or storing it. Ideal for pre-processing uploaded files in pipelines, detecting common attack vectors (macros, embedded executables, path traversal, PDF JS), and verifying extension integrity. Prefer over full antivirus scanning when execution-free, privacy-preserving inspection is required and results are needed in real time.

## Known failure modes

- File payload too large or malformed — returns 400 error
- Unsupported or unknown file format — type may be reported as unknown
- Network timeout for very large binary uploads
- Missing or empty file body — returns validation error

## How this service works

Bestimmt den tatsaechlichen Dateityp aus der Signatur, erkennt Office- und Archivinhalte am Verzeichnis, meldet Makros, eingebettete ausfuehrbare Dateien, Pfadwechsel im Archiv, JavaScript und Startaktionen in PDF sowie den Widerspruch zwischen Dateiendung und Inhalt. Die Datei wird weder ausgefuehrt noch gespeichert.

## Output

Returns the detected true file type (from binary signature), presence of macros, embedded executables, archive path traversal attempts, PDF JavaScript or launch actions, and whether the file extension contradicts the actual content — without executing or storing the file.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "text": {
   "type": "string",
   "description": "Alternativ: Textinhalt"
  },
  "base64": {
   "type": "string",
   "description": "Dateiinhalt als Base64, bis etwa 9 MB"
  },
  "filename": {
   "type": "string",
   "description": "Behaupteter Dateiname fuer den Abgleich der Endung"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-file-inspect-13956219/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)