# RelayShield Scan File Check

> RelayShield Scan File Check is a paid API for AI agents from atq6wtkp6k.execute-api.us-east-1.amazonaws.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-14).

Submits a file URL for asynchronous security scanning and returns an analysis ID to poll for results

## Facts

- Endpoint: POST https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/scan-file
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-scan-file-check-77916d34
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TgNJtrezuiJf4HHaSH-th

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-scan-file-check-77916d34 -d '<json body>'
```

Example prompt: Can you run a RelayShield security scan on this file before I open it — it's at https://cdn.example.com/invoice.pdf and the filename is invoice.pdf?

## When to prefer this

Use this endpoint when you need to asynchronously scan a file hosted at a URL for security threats such as malware or malicious content, especially PDFs, documents, or other downloadable assets. Prefer this over URL-only scanning when the input is a concrete file rather than a web page, and when you can tolerate a polling-based async workflow.

## Known failure modes

- Invalid or unreachable file URL returns an error
- Unsupported file type may result in failed analysis
- Network timeout if the file is too large or slow to fetch
- Missing required fields (target URL or filename) returns validation error
- Payment failure (x402) if USDC balance is insufficient

## How this service works

Scan a file (via its public download URL) for malware using VirusTotal's multi-engine analysis. Returns an async analysis ID to poll. Call before an agent downloads, opens, or executes a file attachment from an untrusted source.

## Output

Returns a pending status with an analysis_id and a poll_endpoint path (e.g. /v1/result/f-abc123def456) that the agent should poll every 5 seconds until the scan status changes to completed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "file_url": {
   "type": "string",
   "description": "Publicly accessible download URL"
  },
  "filename": {
   "type": "string",
   "description": "Optional filename hint for AV engines"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-scan-file-check-77916d34/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from atq6wtkp6k.execute-api.us-east-1.amazonaws.com](https://www.zero.xyz/host/atq6wtkp6k.execute-api.us-east-1.amazonaws.com/llms.txt)