{"api":"v1","generated_at":"2026-11-01T19:46:30.261Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/api-agentstools-dev-code-scan-6ae9a1","pinned_page":"https://tollindex.com/e/api-agentstools-dev-code-scan-6ae9a1/at/2026-11-01T13-19Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-11-01T13:19:08.063Z","snapshot_stamp":"2026-11-01T13-19Z","endpoint":{"slug":"api-agentstools-dev-code-scan-6ae9a1","canonical_url":"https://api.agentstools.dev/code/scan","resource":"https://api.agentstools.dev/code/scan","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, command injection, code and template injection, SSRF, path traversal, insecure deserialization, weak crypto, insecure randomness, open redirect and XXE across Python, JavaScript, TypeScript, Java and Go. Returns a go/no-go verdict with per-finding CWE, severity, file and line. Static indicators, not a guarantee.","service_name":"code-scan","declared_category":null,"declared_tags":["sast","security","code","cwe","pre-commit"],"route_template":null,"registry_updated":"2026-10-18T07:26:58.906Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"code scan","category":"randomness","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-11-01T13:19:08.062Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"}],"counters":{"observed_at":"2026-11-01T13:19:08.063Z","calls_30d":2,"unique_payers_30d":2,"last_called_at":"2026-10-18T07:26:58.381Z"},"validation":{"latest":{"observed_at":"2026-10-30T08:46:35.618Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-10-30"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":25,"passed":25,"ratio":1},{"days":90,"observed":43,"passed":43,"ratio":1}],"history_90d":[{"observed_at":"2026-10-30T08:46:35.618Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-30","state_changed":false},{"observed_at":"2026-10-29T08:27:09.040Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-29","state_changed":false},{"observed_at":"2026-10-28T08:49:51.119Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-28","state_changed":false},{"observed_at":"2026-10-27T08:34:55.819Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-27","state_changed":false},{"observed_at":"2026-10-26T13:53:13.789Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-26","state_changed":false},{"observed_at":"2026-10-23T08:41:51.489Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-23","state_changed":false},{"observed_at":"2026-10-21T11:15:35.059Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-21","state_changed":false},{"observed_at":"2026-10-20T10:51:29.389Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-20","state_changed":false},{"observed_at":"2026-10-19T08:26:27.241Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-19","state_changed":false},{"observed_at":"2026-10-18T10:26:07.700Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-18","state_changed":false},{"observed_at":"2026-10-17T20:42:19.174Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-17","state_changed":false},{"observed_at":"2026-10-16T06:37:12.261Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-16","state_changed":false},{"observed_at":"2026-10-15T08:22:36.189Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-15","state_changed":false},{"observed_at":"2026-10-14T06:27:46.625Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-14","state_changed":false},{"observed_at":"2026-10-13T11:09:38.635Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-13","state_changed":false},{"observed_at":"2026-10-12T08:31:59.189Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-12","state_changed":false},{"observed_at":"2026-10-11T07:16:23.120Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-11","state_changed":false},{"observed_at":"2026-10-10T15:19:15.155Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-10","state_changed":false},{"observed_at":"2026-10-09T07:53:19.809Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-09","state_changed":false},{"observed_at":"2026-10-08T09:22:27.382Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-08","state_changed":false},{"observed_at":"2026-10-07T08:41:11.190Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-07","state_changed":false},{"observed_at":"2026-10-06T09:34:04.693Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-06","state_changed":false},{"observed_at":"2026-10-05T08:34:45.315Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-05","state_changed":false},{"observed_at":"2026-10-04T10:58:22.651Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-04","state_changed":false},{"observed_at":"2026-10-03T05:48:05.534Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-03","state_changed":false},{"observed_at":"2026-10-02T15:01:02.250Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-02","state_changed":false},{"observed_at":"2026-10-01T07:54:35.600Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-01","state_changed":false},{"observed_at":"2026-09-30T07:14:12.545Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-30","state_changed":false},{"observed_at":"2026-09-29T19:31:07.360Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-29","state_changed":false},{"observed_at":"2026-09-28T06:17:58.518Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-28","state_changed":false},{"observed_at":"2026-09-25T21:02:01.602Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-25","state_changed":false},{"observed_at":"2026-09-23T06:37:14.283Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-23","state_changed":false},{"observed_at":"2026-09-22T06:48:41.908Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-22","state_changed":false},{"observed_at":"2026-09-21T07:11:16.673Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-21","state_changed":false},{"observed_at":"2026-09-19T05:12:17.006Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-19","state_changed":false},{"observed_at":"2026-09-18T12:28:00.748Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-18","state_changed":false},{"observed_at":"2026-09-17T05:07:40.005Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-17","state_changed":false},{"observed_at":"2026-09-16T05:07:41.139Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-16","state_changed":false},{"observed_at":"2026-09-15T05:23:55.685Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T04:58:53.074Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T04:55:41.185Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:11:45.455Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T10:51:25.459Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","page":"https://tollindex.com/seller/0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","endpoints":364,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["sast","security","code","cwe","pre-commit"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"20000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-10-18T07:26:58.381Z","l30DaysTotalCalls":2,"l30DaysUniquePayers":2},"resource":"https://api.agentstools.dev/code/scan","extensions":{"bazaar":{"info":{"input":{"body":{"diff":"--- a/db.py\n+++ b/db.py\n@@ -1,2 +1,3 @@\n import sqlite3\n+def f(cur, uid):\n+    cur.execute(f\"SELECT * FROM users WHERE id = {uid}\")\n"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"object":"code_scan","verdict":"block","coverage":{"cwe_total":12,"cwe_flagged":["CWE-89"],"languages_scanned":["python"]},"findings":[{"cwe":"CWE-89","file":"db.py","line":3,"name":"SQL Injection","reason":"User-controlled data appears to be interpolated into a SQL query.","evidence":"cur.execute(f\"SELECT * FROM users WHERE id = {uid}\")","severity":"high","dimension":"injection","confidence":"high"}],"disclaimer":"Automated static security indicators, not a guarantee.","risk_score":30,"files_scanned":1,"findings_by_cwe":{"CWE-89":1},"ruleset_version":"2026.07.16","added_lines_scanned":2}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"properties":{"diff":{"type":"string","description":"A unified git-diff; only added lines are scanned"},"files":{"type":"array","items":{"type":"object"},"description":"Alternatively a batch of objects, each with path, content and optional language"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, command injection, code and template injection, SSRF, path traversal, insecure deserialization, weak crypto, insecure randomness, open redirect and XXE across Python, JavaScript, TypeScript, Java and Go. Returns a go/no-go verdict with per-finding CWE, severity, file and line. Static indicators, not a guarantee.","lastUpdated":"2026-10-18T07:26:58.906Z","serviceName":"code-scan","x402Version":2}]}}