# ScanPay Deep Scan — Deterministic Code Security Scanner

> ScanPay Deep Scan — Deterministic Code Security Scanner is a paid API for AI agents from scanpay-edge.alextaghiashvili.workers.dev, paid per call via x402, $10/call, status unknown (last checked 2026-11-02).

Performs deterministic static security analysis on source code (Python, JS, TS, TSX), returning findings, severity counts, risk score, and optional remediation guidance — paid per-call via x402 USDC with no API key required.

## Facts

- Endpoint: POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/deep-scan?utm_source=zero.xyz
- Price: $10/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-02
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scanpay-deep-scan-deterministic-code-security-scanner-d376638d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-1Y78DAAyuEUOsgEaDa7c

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scanpay-deep-scan-deterministic-code-security-scanner-d376638d -d '<json body>'
```

Example prompt: Can you scan this Python script for security vulnerabilities and give me a risk score with remediation advice? Here's the source code: [paste code here]

## When to prefer this

Choose this endpoint when you need a fast, pay-per-call, no-signup static security scan for Python, JavaScript, TypeScript, or TSX code and want deterministic results with severity breakdowns and optional remediation. Ideal for AI agents that need to audit code snippets on demand without managing API keys or subscriptions. Prefer over heavier CI/CD SAST tools when lightweight, per-call pricing via USDC is preferred and no persistent account is required.

## Known failure modes

- Payment not received or x402 handshake failure — endpoint returns 402 Payment Required
- Source code exceeds 100 KB limit — request rejected
- Unsupported language value outside enum (python, javascript, typescript, tsx) — validation error
- Malformed or missing source_code field — 400 Bad Request
- Cloudflare Worker timeout for very large or complex code
- Network error reaching the edge worker endpoint

## How this service works

Pay-per-call x402 APIs for AI agents: OpenAI-compatible LLM chat, perp funding and arbitrage spreads, crypto prices, gas, FX, Solana SPL mint audit, token price by contract, x402 delivery-receipt verification, web search, clean page extraction, batch tools and deterministic code-security scanning. USDC on Base or Solana, no signup, no API key, from $0.0001 a call.

## Output

Returns a JSON object with: charged flag, product ID, findings array (with details per vulnerability), language detected, price in USD, risk band (e.g. 'clean'), syntax validity, risk score (0-100), remediation array, generation timestamp, payment mode, SHA-256 of source, engine version, findings count, severity counts broken down by low/medium/high/critical, scan duration in ms, and a no-code-retention confirmation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "source_code"
     ],
     "properties": {
      "language": {
       "enum": [
        "python",
        "javascript",
        "typescript",
        "tsx"
       ],
       "type": "string",
       "default": "python"
      },
      "source_code": {
       "type": "string",
       "description": "UTF-8 source code to scan (max 100 KB)"
      },
      "include_remediation": {
       "type": "boolean",
       "default": true
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "charged": true,
  "product": "scanpay.deep",
  "findings": [],
  "language": "python",
  "price_usd": 10,
  "risk_band": "clean",
  "syntax_ok": true,
  "risk_score": 100,
  "remediation": [],
  "generated_at": 1793462400,
  "payment_mode": "x402-dual-rail",
  "source_sha256": "9f56e761d79bfdb34304a012586cb04d16b435ef6130091a97702e559260a2f2",
  "engine_version": "1.1.0",
  "findings_count": 0,
  "severity_counts": {
   "low": 0,
   "high": 0,
   "medium": 0,
   "critical": 0
  },
  "scan_duration_ms": 0.5,
  "no_code_retention": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scanpay-deep-scan-deterministic-code-security-scanner-d376638d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scanpay-edge.alextaghiashvili.workers.dev](https://www.zero.xyz/host/scanpay-edge.alextaghiashvili.workers.dev/llms.txt)