# PayAI CI/CD Single-Job Security Inspector

> PayAI CI/CD Single-Job Security Inspector is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.008/call, status unknown (last checked 2026-09-15).

Performs a static security scan of a single CI/CD job or step snippet (GitHub Actions, GitLab CI, or CircleCI) and returns a verdict, risk score, and detailed findings with fix hints.

## Facts

- Endpoint: POST https://payai.agentstools.dev/ci/inspect
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/payai-ci-cd-single-job-security-inspector-0569b8df
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_FueKOyvhpIMOi2hXhb43C

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability payai-ci-cd-single-job-security-inspector-0569b8df -d '<json body>'
```

Example prompt: Can you do a security inspection on this single GitHub Actions job snippet and tell me whether it passes, needs caution, or should be blocked — and list any findings with their severity and how to fix them?

## When to prefer this

Use this endpoint when you need a fast, lightweight security check on a single CI/CD job or step — as opposed to scanning an entire pipeline file. Ideal for per-object validation in PR review workflows, pre-commit hooks, or agent pipelines that process individual job definitions one at a time. Prefer this over /ci/scan when you only have one snippet to inspect and want lower latency and cost.

## Known failure modes

- Missing required 'resource' field returns a validation error
- Unsupported CI system type may cause misclassification or error
- Very large or malformed snippets may fail parsing
- Empty or whitespace-only snippets may return no findings or an error
- Non-CI content passed as snippet may yield unreliable results

## How this service works

Static security scan of a SINGLE CI/CD job or step snippet (GitHub Actions, GitLab CI or CircleCI). The lightweight per-object form of /ci/scan: returns a verdict (pass, caution, block), a risk score and findings with rule, severity, location and fix hint. Security indicators, not a guarantee.

## Output

Returns a verdict (pass, caution, or block), a numeric risk score, and a list of findings each containing the triggered rule name, severity level, location within the snippet, and a fix hint. Results are security indicators, not guarantees.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "kind": {
   "enum": [
    "auto",
    "github-actions",
    "gitlab-ci",
    "circleci"
   ],
   "type": "string",
   "description": "CI system of the snippet, or auto to detect"
  },
  "resource": {
   "type": "string",
   "description": "A single CI job or step snippet to inspect"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/payai-ci-cd-single-job-security-inspector-0569b8df/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)