{"api":"v1","generated_at":"2026-09-25T00:30:08.809Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/agent-pocket-network-v1-taint-check-603752","pinned_page":"https://tollindex.com/e/agent-pocket-network-v1-taint-check-603752/at/2026-09-24T21-29Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-24T21:29:59.629Z","snapshot_stamp":"2026-09-24T21-29Z","endpoint":{"slug":"agent-pocket-network-v1-taint-check-603752","canonical_url":"https://agent.pocket.network/v1/taint-check","resource":"https://agent.pocket.network/v1/taint-check","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a raw lockfile or a components array and get per-dependency verdicts (malicious, vulnerable, suspicious, clean) from OSV.dev and the OpenSSF Malicious Packages feed, each with a summary and snapshot timestamp. Pay per request in USDC; no account, no API key.","service_name":"Pocket Network","declared_category":null,"declared_tags":["security","taint-check","rest"],"route_template":null,"registry_updated":"2026-09-24T04:30:26.430Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"taint check","category":"inference","first_observed_by_toll":"2026-09-21T21:57:55.208Z","last_observed_by_toll":"2026-09-24T21:29:59.628Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-21T21:57:55.209Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.005 USDC","amount_units":0.005,"decimals_known":true,"pay_to":"0xF732ea490c5766071785a2310523f7fA2CEbB829","scheme":"exact"}],"counters":{"observed_at":"2026-09-24T21:29:59.629Z","calls_30d":7,"unique_payers_30d":3,"last_called_at":"2026-09-24T04:30:25.832Z"},"validation":{"latest":{"observed_at":"2026-09-23T06:28:14.188Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-23"},"uptime":[{"days":7,"observed":3,"passed":3,"ratio":1},{"days":30,"observed":3,"passed":3,"ratio":1},{"days":90,"observed":3,"passed":3,"ratio":1}],"history_90d":[{"observed_at":"2026-09-23T06:28:14.188Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-23","state_changed":false},{"observed_at":"2026-09-22T06:39:07.039Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-22","state_changed":false},{"observed_at":"2026-09-22T05:20:31.490Z","state":"pass","failed_checks":[],"run_id":"new-after-daily-2026-09-21","state_changed":true}]},"seller":{"wallet":"0xF732ea490c5766071785a2310523f7fA2CEbB829","page":"https://tollindex.com/seller/0xF732ea490c5766071785a2310523f7fA2CEbB829","endpoints":93,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["security","taint-check","rest"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF732ea490c5766071785a2310523f7fA2CEbB829","amount":"5000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":60}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1789841442/bazaar-icons/3cd57aad9bac9307.png","quality":{"lastCalledAt":"2026-09-24T04:30:25.832Z","l30DaysTotalCalls":7,"l30DaysUniquePayers":3},"resource":"https://agent.pocket.network/v1/taint-check","extensions":{"bazaar":{"info":{"input":{"body":{"options":{"heuristics":false},"components":[{"name":"minimist","version":"1.2.0","ecosystem":"npm"}]},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"data":{},"portal":{"serviceId":"taint-check","provenance":"third-party-supplier","schemaCheck":"passed"}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":[],"properties":{"options":{"type":"object","properties":{"since":{"type":"string","description":"Only advisories newer than this timestamp (monitor mode)."},"heuristics":{"type":"boolean","description":"Add typosquat, install-script and dormancy signals."}},"description":"Scan options."},"lockfile":{"type":"object","properties":{"format":{"enum":["package-lock.json","pnpm-lock.yaml","yarn.lock","requirements.txt","poetry.lock","uv.lock","Pipfile.lock","Cargo.lock","go.sum"],"type":"string","description":"Lockfile format."},"content":{"type":"string","description":"Raw lockfile content."}},"description":"A raw lockfile."},"components":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","description":"Package name."},"version":{"type":"string","description":"Package version."},"ecosystem":{"type":"string","description":"e.g. npm, pypi, go, cargo."}}},"description":"Pre-parsed dependencies."}},"description":"Provide either a raw lockfile or a pre-parsed components array; body size and component limits come from GET /v1/capabilities."},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["portal","data"],"properties":{"data":{"type":"object","description":"For POST /v1/scan, a JSON object with a `findings` array — each dependency's verdict (malicious, vulnerable, suspicious, clean), a summary, and a data_as_of timestamp. Findings vary by each supplier's snapshot freshness and converge as mirrors sync. The exact shape is the service's own and is not pinned here; errors return a JSON object with an `error` field, and the GET routes return their own small JSON documents."},"portal":{"type":"object","required":["provenance","serviceId","schemaCheck"],"properties":{"serviceId":{"const":"taint-check"},"provenance":{"const":"third-party-supplier"},"schemaCheck":{"enum":["passed","undeclared","unchecked"]}}}}}}}}}}},"description":"Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a raw lockfile or a components array and get per-dependency verdicts (malicious, vulnerable, suspicious, clean) from OSV.dev and the OpenSSF Malicious Packages feed, each with a summary and snapshot timestamp. Pay per request in USDC; no account, no API key.","lastUpdated":"2026-09-24T04:30:26.43Z","serviceName":"Pocket Network","x402Version":2}]}}