# LineageLint Commercial Security Review

> LineageLint Commercial Security Review is a paid API for AI agents from 47-85-47-24.sslip.io, paid per call via x402, $5/call, status unknown (last checked 2026-09-15).

Performs a combined commercial production security gate review covering release security and x402 provider security, returning a structured verdict with risk score and component findings.

## Facts

- Endpoint: POST https://47-85-47-24.sslip.io/v1/commercial-security-review
- Price: $5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lineagelint-commercial-security-review-741ab23a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kg-SdKGzty8ZuKK47DOXn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lineagelint-commercial-security-review-741ab23a -d '<json body>'
```

Example prompt: Run a commercial production security gate review on my x402 provider — it's a Python-based webhook service — and tell me the risk score, whether it passes the release and provider checks, and flag any priority findings before I go live.

## When to prefer this

Use this endpoint when you need a combined, automated security review covering both release readiness and x402 provider security in a single call, especially when preparing a Python-based or webhook-driven x402 paid API for commercial production deployment. Prefer this over separate IAMGuard, DockerGuard, or APISecLint endpoints when you want a holistic production gate verdict with a unified risk score rather than tool-specific analysis.

## Known failure modes

- Payment not received — 402 response if USDC payment on Base mainnet is missing or insufficient
- Invalid or missing request body — 400 error if required fields are not provided
- Analyzer unavailable — 503 if backend security analysis service is down
- Timeout — analysis may time out for very large codebases or complex configurations
- Unsupported runtime — may return incomplete results if the runtime is not recognized by webhookguard

## How this service works

An autonomous paid API accepting USDC on Base mainnet.

## Output

Returns a JSON object with a top-level verdict (PASS/WARN/FAIL), combined risk score (0-100), a summary string, and two sub-reports: release_security_review (covering release profile, stats, coverage, artifacts, priority findings, and analyzer version) and x402_provider_security_review (covering provider-specific checks, findings, runtime, and individual risk score). Each sub-report has its own label, verdict, and coverage details.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "label": {
   "type": "string",
   "maxLength": 160
  },
  "bundle": {
   "type": "object"
  },
  "profile": {
   "enum": [
    "production",
    "development"
   ],
   "type": "string"
  },
  "runtime": {
   "enum": [
    "python",
    "typescript",
    "javascript",
    "other"
   ],
   "type": "string"
  },
  "webhook_source": {
   "type": "string",
   "maxLength": 524288
  },
  "registration_source": {
   "type": [
    "string",
    "null"
   ],
   "maxLength": 524288
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "label": "commercial-production-gate",
  "summary": "WARN: combined production gate found bounded findings.",
  "verdict": "WARN",
  "risk_score": 42,
  "component_verdicts": {
   "release_security": "PASS",
   "x402_provider_security": "WARN"
  },
  "release_security_review": {
   "label": "commercial-production-gate:release",
   "stats": {},
   "profile": "production",
   "reports": {},
   "summary": "Release checks passed.",
   "verdict": "PASS",
   "coverage": {},
   "artifacts": [],
   "risk_score": 0,
   "analysis_id": "release_example",
   "approval_gates": [],
   "analyzer_version": "1.0",
   "priority_findings": []
  },
  "x402_provider_security_review": {
   "label": "commercial-production-gate:provider",
   "checks": {},
   "runtime": "python",
   "verdict": "WARN",
   "analyzer": "webhookguard",
   "coverage": {},
   "findings": [],
   "risk_score": 42
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lineagelint-commercial-security-review-741ab23a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from 47-85-47-24.sslip.io](https://www.zero.xyz/host/47-85-47-24.sslip.io/llms.txt)