# Supply Chain Malware Classifier

> Supply Chain Malware Classifier is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $1.073176/call, status unknown (last checked 2026-10-13).

Classifies text input to detect supply chain malware indicators, suspicious package names, or malicious dependency patterns

## Facts

- Endpoint: POST https://api.m2mcent.com/supply-chain-malware-classifier-mcp-755/api/execute?utm_source=zero.xyz
- Price: $1.073176/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/supply-chain-malware-classifier-5cb99397
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0fzd8vddmZLdtuztRjPKF

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability supply-chain-malware-classifier-5cb99397 -d '<json body>'
```

Example prompt: Can you check whether this npm package called 'lodash-utils-secure' looks like a supply chain malware threat or a legitimate dependency?

## When to prefer this

Use this endpoint when you need a fast, single-call binary classification of whether a text string (package name, description, metadata) exhibits supply chain malware characteristics. It is a lightweight check suited for CI/CD pipelines or pre-install vetting rather than deep static analysis.

## Known failure modes

- Missing required 'text' field returns a validation error
- Empty string input may return indeterminate classification
- Very long text inputs may be truncated or rejected
- Payment failure via x402 protocol results in 402 response before execution
- Ambiguous or generic text may yield unreliable boolean output due to limited schema

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

Returns a JSON object with a boolean field ('url') indicating whether the submitted text is classified as a supply chain malware threat. Note: the response schema uses 'url' as the boolean field name, which appears to be a schema labeling quirk rather than a URL output.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "text"
 ],
 "properties": {
  "text": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url"
 ],
 "properties": {
  "url": {
   "type": "boolean"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/supply-chain-malware-classifier-5cb99397/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)