# ScanPay Quick Code Security Scanner

> ScanPay Quick Code Security Scanner is a paid API for AI agents from scanpay-edge.alextaghiashvili.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-11-01).

Scans AI-generated Python, JavaScript, or TypeScript source code and returns a deterministic PASS/WARN/BLOCK verdict using AST-based static analysis rules, without executing the code or using an LLM.

## Facts

- Endpoint: POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/quick?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-01
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scanpay-quick-code-security-scanner-430af992
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_mMOXvcBiQ3QqiKdmDIq7_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scanpay-quick-code-security-scanner-430af992 -d '<json body>'
```

Example prompt: Before running this AI-generated Python script, scan it for security issues and tell me if it's safe to execute — give me a PASS, WARN, or BLOCK verdict.

## When to prefer this

Choose this endpoint when you need a fast, deterministic, no-execution security gate for AI-generated code in Python, JavaScript, or TypeScript. It is ideal for agentic pipelines where code is generated by LLMs and must be checked before execution, without the risk of running the code or sending it to another LLM. Prefer this over LLM-based code review when you need consistent, rule-based verdicts with no retention and low latency.

## Known failure modes

- Code exceeds 100 KB limit — request rejected
- Unsupported language submitted (non-Python/JS/TS) — may return error or undefined behavior
- Malformed or unparseable source code — AST parsing failure
- Network timeout on Cloudflare Workers edge
- Payment not included or invalid x402 payment — 402 response returned

## How this service works

Pay-per-call x402 APIs for AI agents: OpenAI-compatible LLM chat, perp funding and arbitrage spreads, crypto prices, gas, FX, Solana SPL mint audit, token price by contract, x402 delivery-receipt verification, web search, clean page extraction, batch tools and deterministic code-security scanning. USDC on Base or Solana, no signup, no API key, from $0.0001 a call.

## Output

Returns a deterministic verdict of PASS, WARN, or BLOCK, along with the specific AST rule matches and risk findings that triggered the verdict. No code is executed during analysis, no LLM is used, and no code is retained after scanning. Max input size is 100 KB.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "source_code"
     ],
     "properties": {
      "language": {
       "enum": [
        "python",
        "javascript",
        "typescript",
        "tsx"
       ],
       "type": "string",
       "default": "python"
      },
      "source_code": {
       "type": "string",
       "description": "UTF-8 source code to scan (max 100 KB)"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "product": "scanpay.quick",
  "verdict": "PASS",
  "findings": [],
  "language": "python",
  "price_usd": 0.005,
  "max_severity": null,
  "source_sha256": "9f56e761d79bfdb34304a012586cb04d16b435ef6130091a97702e559260a2f2",
  "findings_count": 0
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scanpay-quick-code-security-scanner-430af992/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scanpay-edge.alextaghiashvili.workers.dev](https://www.zero.xyz/host/scanpay-edge.alextaghiashvili.workers.dev/llms.txt)