# ScanPay Agent Deep Security Report

> ScanPay Agent Deep Security Report is a paid API for AI agents from scanpay-edge.alextaghiashvili.workers.dev, paid per call via x402, $0.1/call, status unknown (last checked 2026-11-01).

Performs a deep deterministic security analysis on a code snippet (up to 20 KB) and returns findings, severity counts, a risk score, and remediation guidance for $0.10 USDC per call.

## Facts

- Endpoint: POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/agent-deep?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-01
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scanpay-agent-deep-security-report-1843d698
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_3rhZHcu18RGe0zC0CifRy

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scanpay-agent-deep-security-report-1843d698 -d '<json body>'
```

Example prompt: Can you run a deep security scan on this Python snippet I'm about to deploy — I need the full findings list, severity breakdown, risk score, and how to fix any issues: [paste code here]?

## When to prefer this

Choose this endpoint when you need a comprehensive, detailed security report with full findings, severity counts, risk score, and remediation — not just a quick pass/fail verdict. It is ideal for pre-deployment audits of AI-generated or human-written Python, JavaScript, or TypeScript code where you need actionable remediation guidance. Prefer the fast verdict sibling endpoint if you only need a PASS/WARN/BLOCK decision without the full report.

## Known failure modes

- Input exceeds 20 KB limit — request rejected
- Unsupported language or unparseable code — analysis cannot proceed
- Payment not provided or insufficient — 402 Payment Required
- Empty code snippet submitted — no findings generated
- Malformed request body — 400 Bad Request

## How this service works

Pay-per-call x402 APIs for AI agents: OpenAI-compatible LLM chat, perp funding and arbitrage spreads, crypto prices, gas, FX, Solana SPL mint audit, token price by contract, x402 delivery-receipt verification, web search, clean page extraction, batch tools and deterministic code-security scanning. USDC on Base or Solana, no signup, no API key, from $0.0001 a call.

## Output

Returns a structured deep security report including: a list of specific findings with descriptions, severity classifications (e.g. critical, high, medium, low), aggregate severity counts, an overall risk score, and concrete remediation recommendations — all derived from deterministic AST-based static analysis of the submitted code snippet.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "source_code"
     ],
     "properties": {
      "language": {
       "enum": [
        "python",
        "javascript",
        "typescript",
        "tsx"
       ],
       "type": "string",
       "default": "python"
      },
      "source_code": {
       "type": "string",
       "description": "UTF-8 source code to scan (max 100 KB)"
      },
      "include_remediation": {
       "type": "boolean",
       "default": true
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "charged": true,
  "product": "scanpay.agent_deep",
  "findings": [],
  "language": "python",
  "price_usd": 0.1,
  "risk_band": "clean",
  "syntax_ok": true,
  "risk_score": 100,
  "source_sha256": "9f56e761d79bfdb34304a012586cb04d16b435ef6130091a97702e559260a2f2",
  "engine_version": "1.1.0",
  "findings_count": 0,
  "severity_counts": {
   "low": 0,
   "high": 0,
   "medium": 0,
   "critical": 0
  },
  "scan_duration_ms": 0.5,
  "no_code_retention": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scanpay-agent-deep-security-report-1843d698/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scanpay-edge.alextaghiashvili.workers.dev](https://www.zero.xyz/host/scanpay-edge.alextaghiashvili.workers.dev/llms.txt)