# Hermes Agent Toolkit - Code Security Scanner

> Hermes Agent Toolkit - Code Security Scanner is a paid API for AI agents from hermes-guardian.xyz, paid per call via x402, $0.03/call, status down (last checked 2026-09-15).

Analyzes submitted code for security vulnerabilities using behavior analysis, alongside web search and crypto market data capabilities.

## Facts

- Endpoint: POST https://hermes-guardian.xyz/scan
- Price: $0.03/call
- Payment: x402
- Status: down
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hermes-agent-toolkit-code-security-scanner-43b794a9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oeKdR1NNp1AImoep0m07Y

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hermes-agent-toolkit-code-security-scanner-43b794a9 -d '<json body>'
```

Example prompt: Can you scan this Python function for security vulnerabilities and tell me if there are any unsafe behaviors or risks? Here's the code: `import subprocess; subprocess.call(user_input, shell=True)`

## When to prefer this

Use this endpoint when you need a fast, per-call code security scan with behavior analysis on a code snippet and want to pay per scan via crypto micropayment (x402/USDC). Suitable for lightweight, on-demand security checks rather than full CI/CD pipeline integration.

## Known failure modes

- Missing required 'code' field returns an error
- Unsupported language may produce degraded analysis
- Very large code snippets may be truncated or rejected
- Empty code string may return a null or error result
- Network or payment failure (x402) prevents scan from completing

## How this service works

The only x402 API with thin-slicing behavior analysis (80%+ accuracy). Code security + web search + crypto prices + trading signals.

## Output

Returns a security analysis of the submitted code including detected vulnerabilities, behavioral threat signals, and security risk indicators based on behavior analysis.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "code"
 ],
 "properties": {
  "code": {
   "type": "string"
  },
  "language": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hermes-agent-toolkit-code-security-scanner-43b794a9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from hermes-guardian.xyz](https://www.zero.xyz/host/hermes-guardian.xyz/llms.txt)