# Tokenguard Dev Package Info API

> Tokenguard Dev Package Info API is a paid API for AI agents from eltociear-tokenguard.hf.space, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-29).

Fetches package metadata (version, license, dependencies, download stats) for a named software package from a registry like npm.

## Facts

- Endpoint: POST https://eltociear-tokenguard.hf.space/dev/package?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tokenguard-dev-package-info-api-ed7a4840
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_r-Jsd03PZqbpeXLw90ZPf

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tokenguard-dev-package-info-api-ed7a4840 -d '<json body>'
```

Example prompt: Can you look up the package info for 'express' on npm — I need the latest version, its license type, and how many downloads it got last week?

## When to prefer this

Use this endpoint when you need quick package metadata — version, license, dependencies, and download stats — for a known npm package name. Prefer this over scraping npm directly or using heavier registry APIs when low-cost, per-call micropayment billing is acceptable and the use case is lightweight package info lookup.

## Known failure modes

- Package not found — returns error if the package name doesn't exist in the registry
- Registry not supported — returns error if the specified registry is not available
- Invalid request body — returns 400 if required fields like package name are missing
- Service downtime — Hugging Face Space may be unavailable or cold-starting
- Payment failure — x402 micropayment on Base not completed, request rejected

## How this service works

Package intelligence across npm, PyPI and crates.io in one call: latest version, license, repository, dependencies and download counts

## Output

Returns a JSON object with the package name, current version, license type, registry source, list of dependencies, and weekly download count for the queried package.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "name": {
   "type": "string",
   "description": "Package name"
  },
  "registry": {
   "enum": [
    "npm",
    "pypi",
    "crates"
   ],
   "type": "string",
   "description": "Registry (default npm)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "express",
  "license": "MIT",
  "version": "5.1.0",
  "registry": "npm",
  "dependencies": [
   "body-parser"
  ],
  "downloads_last_week": 31000000
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tokenguard-dev-package-info-api-ed7a4840/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from eltociear-tokenguard.hf.space](https://www.zero.xyz/host/eltociear-tokenguard.hf.space/llms.txt)