# PayAI License Scan

> PayAI License Scan is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-14).

Scans a full dependency list or package manifest for SPDX license compliance, returning per-dependency verdicts and an aggregate worst-case copyleft contamination assessment.

## Facts

- Endpoint: POST https://payai.agentstools.dev/license/scan
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/payai-license-scan-05744d9d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DCHqgojOty_Mbfu2MFFEx

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability payai-license-scan-05744d9d -d '<json body>'
```

Example prompt: Scan these Python dependencies for license compliance: requests==2.31.0, flask==3.0.0, celery==5.3.4, sqlalchemy==2.0.20 — tell me if any have copyleft licenses and what the worst-case contamination is.

## When to prefer this

Use this endpoint when you need to scan an entire dependency manifest or list at once rather than checking packages one at a time. It is ideal for CI/CD pipeline compliance gates, pre-release audits, or M&A due diligence where you need a single aggregate worst-case copyleft verdict alongside per-package detail. Supports multiple ecosystem formats (npm, PyPI, Go modules) in a single call.

## Known failure modes

- Unknown or unlisted package versions may fail to resolve a license
- Malformed manifest input (e.g. invalid JSON in package.json) returns a parse error
- Private or internal package names not in public registries cannot be resolved
- SPDX identifier unavailable for a dependency returns an unresolved status
- Network or registry lookup timeouts may cause partial results

## How this service works

License-compliance verdict for a whole dependency list or parsed manifest in one call. Accepts name-at-version strings, a parsed package.json, a requirements.txt list or go.mod imports, resolves each declared SPDX license, and returns a per-dependency plus aggregate verdict with the worst copyleft contamination point. Automated indicators, not legal advice.

## Output

Returns a per-dependency breakdown of resolved SPDX license names and compliance verdicts, plus an aggregate verdict indicating the worst copyleft contamination point across all scanned packages. Results are automated indicators and not legal advice.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ecosystem": {
   "enum": [
    "npm",
    "pypi",
    "go",
    "maven",
    "cargo",
    "nuget"
   ],
   "type": "string",
   "description": "Default ecosystem for entries without one"
  },
  "dependencies": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Dependencies as name, name-at-version, or ecosystem-prefixed"
  },
  "distribution": {
   "enum": [
    "saas",
    "binary",
    "internal"
   ],
   "type": "string",
   "description": "How you ship it (default saas)"
  },
  "target_license": {
   "type": "string",
   "description": "Your project SPDX license"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/payai-license-scan-05744d9d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)