{"api":"v1","generated_at":"2026-09-15T21:46:48.663Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/api-agentstools-dev-pr-verdict-b72ccf","pinned_page":"https://tollindex.com/e/api-agentstools-dev-pr-verdict-b72ccf/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"api-agentstools-dev-pr-verdict-b72ccf","canonical_url":"https://api.agentstools.dev/pr/verdict","resource":"https://api.agentstools.dev/pr/verdict","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and findings with severity, file, line and a fix hint. One call instead of slicing the diff into several. Security indicators, not a guarantee.","service_name":"pr-verdict","declared_category":null,"declared_tags":["github","pull-request","code-review","security","merge"],"route_template":null,"registry_updated":"2026-09-10T15:39:47.510Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"pr verdict","category":"market-data","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.03 USDC","amount_units":0.03,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-09-10T15:39:45.284Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:19:02.183Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:19:02.183Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:49:10.666Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:42:15.603Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:59:10.977Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T11:54:25.679Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","page":"https://tollindex.com/seller/0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","endpoints":344,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["github","pull-request","code-review","security","merge"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"30000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-09-10T15:39:45.284Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://api.agentstools.dev/pr/verdict","extensions":{"bazaar":{"info":{"input":{"body":{"pr_url":"https://github.com/gitpython-developers/GitPython/pull/1901"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"pr":{"repo":"widget","owner":"acme","title":"Add uploader","number":42,"head_sha":"d34db33f…"},"object":"pr_verdict","verdict":"block","coverage":{"source":"diff","truncated":false,"files_total":6,"files_scanned":6,"skipped_files":[],"dimensions_run":["code","secret","ci"],"graph_rules_ran":true,"dimensions_partial":[]},"findings":[{"line":12,"path":"src/upload.py","reason":"A hardcoded AWS access key appears in an added line.","rule_id":"aws.akia","evidence":"AWS_KEY = \"AKIA…4E7Q\"","fix_hint":"Remove the hardcoded AWS credential, rotate it, and load it from a secret manager / environment variable.","provider":"secretscan","severity":"high","dimension":"secret"},{"line":null,"path":".github/workflows/ci.yml","reason":"Third-party action pinned to a mutable tag, not a commit SHA.","rule_id":"gha.unpinned_uses","evidence":"uses: actions/checkout@v4","fix_hint":"Pin to the full 40-char commit SHA.","provider":"cicdscan","severity":"high","dimension":"ci"}],"disclaimer":"Automated merge-risk indicators — security signals, not a guarantee.","risk_score":80,"ruleset_versions":{"ci":"2026.07.24","code":"2026.07.16","secret":"2026.07.16"},"counts_by_severity":{"high":2,"medium":1},"findings_truncated":false,"counts_by_dimension":{"ci":1,"code":1,"secret":1}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["pr_url"],"properties":{"pr_url":{"type":"string","description":"Public GitHub pull-request URL (github.com/owner/repo/pull/N)"},"max_files":{"type":"integer","description":"Optional cap on files scanned for a large PR"},"dimensions":{"type":"array","items":{"type":"string"},"description":"Optional subset of code, secret, ci, deps (default: all)"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and findings with severity, file, line and a fix hint. One call instead of slicing the diff into several. Security indicators, not a guarantee.","lastUpdated":"2026-09-10T15:39:47.51Z","serviceName":"pr-verdict","x402Version":2}]}}