{"api":"v1","generated_at":"2026-09-15T22:37:32.914Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/api-agentstools-dev-iac-scan-b01645","pinned_page":"https://tollindex.com/e/api-agentstools-dev-iac-scan-b01645/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"api-agentstools-dev-iac-scan-b01645","canonical_url":"https://api.agentstools.dev/iac/scan","resource":"https://api.agentstools.dev/iac/scan","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Static misconfiguration scan of an infrastructure-as-code config: Terraform (plan JSON or HCL), Kubernetes / Helm, Dockerfile, docker-compose or CloudFormation. Detects public storage, open security groups, unencrypted data at rest, over-broad IAM, privileged / root containers, host mounts and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, resource, location and fix hint. Security indicators, not a guarantee.","service_name":"iac-scan","declared_category":null,"declared_tags":["iac","terraform","kubernetes","cloud","security"],"route_template":null,"registry_updated":"2026-08-17T09:55:38.680Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"iac scan","category":"storage","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"eip155:137","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"},{"registry":"cdp","ordinal":2,"network":"eip155:42161","asset":"0xaf88d065e77c8cc2239327c5edb3a432268e5831","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"},{"registry":"cdp","ordinal":3,"network":"eip155:480","asset":"0x79a02482a880bce3f13e09da970dc34db4cd24d1","asset_name":"USDC","symbol":null,"decimals":null,"amount_display":"20000 smallest units, decimals unknown","amount_units":null,"decimals_known":false,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"},{"registry":"cdp","ordinal":4,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-08-17T09:55:38.437Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:13:34.242Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:13:34.242Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:44:14.449Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:37:42.422Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:54:34.896Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T11:48:25.495Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","page":"https://tollindex.com/seller/0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","endpoints":344,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["iac","terraform","kubernetes","cloud","security"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"20000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},{"asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"20000","scheme":"exact","network":"eip155:137","maxTimeoutSeconds":300},{"asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"20000","scheme":"exact","network":"eip155:42161","maxTimeoutSeconds":300},{"asset":"0x79A02482A880bCe3F13E09da970dC34dB4cD24D1","extra":{"name":"USDC","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"20000","scheme":"exact","network":"eip155:480","maxTimeoutSeconds":300},{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"},"payTo":"AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u","amount":"20000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-08-17T09:55:38.437Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://api.agentstools.dev/iac/scan","extensions":{"bazaar":{"info":{"input":{"body":{"format":"kubernetes","content":"apiVersion: v1\nkind: Pod\nmetadata:\n  name: web\nspec:\n  containers:\n  - name: app\n    image: nginx:latest\n    securityContext:\n      privileged: true\n"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"format":"kubernetes","object":"config","verdict":"block","coverage":{"rules_total":52,"resources_scanned":1,"dimensions_flagged":["container_security"]},"findings":[{"path":"doc[0] Pod/web","reason":"Container runs in privileged mode (full host access).","rule_id":"k8s.privileged","evidence":"pod.containers.0.securityContext.privileged = True","fix_hint":"Set securityContext.privileged = false.","provider":"k8s","resource":"Pod.web","severity":"critical","dimension":"container_security"}],"disclaimer":"Automated security indicators, not a guarantee.","risk_score":40,"config_hash":"sha256:…","resource_count":1,"ruleset_version":"2026.07.16","counts_by_severity":{"critical":1}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["content"],"properties":{"format":{"enum":["auto","terraform","terraform-plan","kubernetes","dockerfile","docker-compose","cloudformation"],"type":"string","description":"Config format, or auto to detect from the content"},"content":{"type":"string","description":"The IaC config text to scan (one or many resources)"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"Static misconfiguration scan of an infrastructure-as-code config: Terraform (plan JSON or HCL), Kubernetes / Helm, Dockerfile, docker-compose or CloudFormation. Detects public storage, open security groups, unencrypted data at rest, over-broad IAM, privileged / root containers, host mounts and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, resource, location and fix hint. Security indicators, not a guarantee.","lastUpdated":"2026-08-17T09:55:38.68Z","serviceName":"iac-scan","x402Version":2}]}}