# TensorFeed AI Package Security Radar

> TensorFeed AI Package Security Radar is a paid API for AI agents from tensorfeed.ai, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-13).

Returns per-package security risk scores and classifications for AI/ML PyPI and npm packages based on daily OSV vulnerability snapshots, with notable movers and risk band categorization.

## Facts

- Endpoint: GET https://tensorfeed.ai/api/premium/ai-safety/packages/security/radar
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tensorfeed-ai-c3ea63e2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Mg2PrgIPi6DiM7GxnxJLO

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tensorfeed-ai-c3ea63e2
```

Example prompt: Pull up the AI package security radar and show me which PyPI and npm AI/ML libraries are in the critical or hot risk bands right now, including the top notable movers by risk score and any packages with new advisories in the last 7 days.

## When to prefer this

Use this endpoint when you need a pre-aggregated, scored, and classified security overview of the entire AI/ML package ecosystem in one call, rather than querying individual CVE feeds or OSV directly. Ideal for daily security digests, CI/CD security gates, or agent-driven dependency audits where you want ranked risk rather than raw advisories.

## Known failure modes

- Payment not provided or invalid x402 token — returns 402 Payment Required
- Upstream OSV snapshot not yet refreshed — may return stale data with a staleness flag
- Rate limit exceeded — returns 429 Too Many Requests
- Service temporarily unavailable — returns 503 with retry-after header

## How this service works

AI-package security radar. Per-package risk_score (0-100) over the daily OSV snapshot of curated AI/ML PyPI + npm packages: critical_count_30d * 25 + high_30d * 12 + critical_90d * 6 + high_90d * 3 + min(open_count, 20) + 5 if any advisory in last 7d, saturated to 100. Risk_band classifications (calm <10 / watch 10-25 / hot 25-50 / critical 50+) plus notable_movers (top-5 by_critical_30d, by_risk_score, new_in_last_7d). The "which AI deps should I be worried about right now" call.

## Output

A list of AI/ML PyPI and npm packages each with a risk_score (0-100), risk_band label (calm/watch/hot/critical), component vulnerability counts (critical_count_30d, high_30d, critical_90d, high_90d, open_count), a flag if any advisory appeared in the last 7 days, and three top-5 notable_movers lists: by_critical_30d, by_risk_score, and new_in_last_7d.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "package": {
       "type": "string",
       "description": "Case-insensitive substring match against package name."
      },
      "category": {
       "type": "string",
       "description": "Case-insensitive substring match against curated category (llm-sdk, agent-framework, rag, ...)."
      },
      "ecosystem": {
       "enum": [
        "PyPI",
        "npm"
       ],
       "type": "string"
      },
      "min_risk_score": {
       "type": "number",
       "maximum": 100,
       "minimum": 0,
       "description": "Minimum risk_score to include in the headline rows array. Default 10."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tensorfeed-ai-c3ea63e2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tensorfeed.ai](https://www.zero.xyz/host/tensorfeed.ai/llms.txt)