# Package Supply-Chain Preflight Batch Checker

> Package Supply-Chain Preflight Batch Checker is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-15).

Analyzes a batch of package names for supply-chain safety signals (typosquats, malicious indicators, existence) and returns safe/caution/block verdicts with reasons.

## Facts

- Endpoint: POST https://payai.agentstools.dev/pkg/preflight/batch
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/package-supply-chain-preflight-batch-checker-ca7f87a9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UuZxFLgegVIb7VwFb-Hlp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability package-supply-chain-preflight-batch-checker-ca7f87a9 -d '<json body>'
```

Example prompt: Before I install these packages, can you scan them for supply-chain risks — check if any of these are typosquats, malicious, or don't even exist: requests, reqeusts, numpy, colourama, flask, flaask.

## When to prefer this

Use this endpoint when you need to vet multiple package names at once for supply-chain safety before installation or CI/CD pipeline execution, especially when you suspect typosquatting or want a quick batch risk classification rather than a single-package check.

## Known failure modes

- Batch too large — endpoint may reject or truncate if too many package names are submitted at once
- Unknown registry — if the registry is not supported, packages may return inconclusive results
- Network timeout — upstream registry lookups may time out for large batches
- False negatives — newly malicious or unknown packages may receive a safe verdict if not yet flagged
- Payment failure — x402 payment of $0.15 USDC not completed, request rejected

## How this service works

Batch install-safety preflight for a whole dependency list or parsed manifest (up to 100 packages). Returns a verdict per package plus a blocked / caution / safe summary. Supply-chain indicators, not a guarantee.

## Output

Returns per-package verdicts of safe, caution, or block, along with reasons explaining each verdict — such as typosquat similarity to a popular package, known malicious indicators, or non-existence in the registry.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "packages": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Package names; an entry may be 'name' or 'npm:name' / 'pypi:name', or an object with name + ecosystem"
  },
  "ecosystem": {
   "enum": [
    "npm",
    "pypi"
   ],
   "type": "string",
   "description": "Default ecosystem for entries that do not set one"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/package-supply-chain-preflight-batch-checker-ca7f87a9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)