code scan derived

api.agentstools.devRandomness derived

POST https://api.agentstools.dev/code/scan

passlisted in Coinbase#7 by calls of 342 on this host

0.02 USDC

per call, as the listing declares it on eip155:8453

Compare with another Every figure as JSON Cite this page

the price, as of 2026-09-15 16:57 UTC · method · pinnable

Validation state: pass; as of 2026-09-15 05:23 UTC · method · pinnable · sweep daily-2026-09-15
Uptime, 7 / 30 / 90 days: 100% / 100% / 100%; as of 2026-09-15 05:23 UTC · method · pinnable · 5 of 5 in 7d, 5 of 5 in 30d, 5 of 5 in 90d
Calls, trailing 30 days: 8; as of 2026-09-15 16:57 UTC · method · pinnable
Unique payers, trailing 30 days: 4; as of 2026-09-15 16:57 UTC · method · pinnable
Last called: 2026-09-08 23:29 UTC; as of 2026-09-15 16:57 UTC · method · pinnable
First observed by TOLLderived: 2026-09-10; as of 2026-09-10 19:08 UTC · method · pinnable · observation began 10 September 2026; listings that predate it show that date
Pricederived: 0.02 USDC; as of 2026-09-15 16:57 UTC · method · pinnable · on eip155:8453
Networks: 1; as of 2026-09-15 16:57 UTC · method · pinnable

Counters

28 observations, 1 of them a change, fewer than the 3 a trace needs

How big is this endpoint among the ones like it?

Calls counted in the trailing thirty days across the 174 endpoints in Randomness that carry counters, binned on a logarithmic scale because the range runs over five orders of magnitude. The marked bin is this endpoint, at 8: 11 in the category are counted higher and 162 lower.

No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 28 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.

In words

api.agentstools.dev lists 342 endpoints; code scan is tied 7th by calls with 1 other.

Callers of code scan supply a json body with the field diff.

A response from code scan, as declared, includes object, verdict, coverage, findings, disclaimer, risk_score and 2 others.

Over 30 days: 8 calls, 4 payers.

code scan was last called 7 days before the snapshot.

It is priced at 0.02 USDC on Base.

code scan takes 1% of the calls counted across api.agentstools.dev.

At api.agentstools.dev, code scan takes POST requests, is listed in the Coinbase registry, and falls under randomness by TOLL's rules.

code scan answered the sweep of 2026-09-15 with a valid 402, as at every sweep since 2026-09-11.

Closest in price to code scan within randomness: solidity scan at agent402.tools and data password strength at intel.rallylive.ca.

code scan is near the top of prices in randomness; 90% of comparable listings are cheaper.

code scan out-counts 93% of the 174 endpoints in randomness that carry counters.

The wallet paid by code scan is the payee of 344 endpoints across 2 hosts.

The seller's own tags are sast, security, code and cwe.

Payment options as declared

the payment options, as of 2026-09-15 16:57 UTC · method · pinnable

Every payment option declared on this listing
registry	network	asset	amount	scheme	pay to
Coinbase	eip155:8453	USDC	0.02 USDC	exact	0xF22e55…DFf493

Preflight checks at the last sweep

the checks, as of 2026-09-15 05:23 UTC · method · pinnableendpoint answered HTTP 402

No named check failed.

Validation history, 90 days

Every sweep that observed this endpoint, newest first.

Validation observations over the last 90 days
observed, UTC	state	sweep
2026-09-15 05:23 UTC	pass	daily-2026-09-15
2026-09-14 04:58 UTC	pass	daily-2026-09-14
2026-09-13 04:55 UTC	pass	daily-2026-09-13
2026-09-12 07:11 UTC	pass	daily-2026-09-12
2026-09-11 10:51 UTC	pass	daily-2026-09-11

Registry presence

Presence in a registry, not liveness of the service (method). Newest first.

2026-09-10 19:08 UTClisted in Coinbase

Declared input and output, as listed

From the registry record, not validated by TOLL.the declared schema, as of 2026-09-08 23:29 UTC · method · live

The input and output block

{
  "input": {
    "body": {
      "diff": "--- a/db.py\n+++ b/db.py\n@@ -1,2 +1,3 @@\n import sqlite3\n+def f(cur, uid):\n+    cur.execute(f\"SELECT * FROM users WHERE id = {uid}\")\n"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "object": "code_scan",
      "verdict": "block",
      "coverage": {
        "cwe_total": 12,
        "cwe_flagged": [
          "CWE-89"
        ],
        "languages_scanned": [
          "python"
        ]
      },
      "findings": [
        {
          "cwe": "CWE-89",
          "file": "db.py",
          "line": 3,
          "name": "SQL Injection",
          "reason": "User-controlled data appears to be interpolated into a SQL query.",
          "evidence": "cur.execute(f\"SELECT * FROM users WHERE id = {uid}\")",
          "severity": "high",
          "dimension": "injection",
          "confidence": "high"
        }
      ],
      "disclaimer": "Automated static security indicators, not a guarantee.",
      "risk_score": 30,
      "files_scanned": 1,
      "findings_by_cwe": {
        "CWE-89": 1
      },
      "ruleset_version": "2026.07.16",
      "added_lines_scanned": 2
    }
  }
}

What the listing says

Static application-security scan of source code or a git-diff for CWE Top-25 logic bugs: SQL injection, XSS, command injection, code and template injection, SSRF, path traversal, insecure deserialization, weak crypto, insecure randomness, open redirect and XXE across Python, JavaScript, TypeScript, Java and Go. Returns a go/no-go verdict with per-finding CWE, severity, file and line. Static indicators, not a guarantee.

the record, 2026-09-08 23:29 UTC · method · pinnable

As declared

POST
eip155:8453
USDC
exact

Every tag is a field on the listing, not a keyword TOLL assigned.

Who is paid

0xF22e55…DFf493

Takes payment for 344 endpoints on 2 hosts.

Among Randomness

counted above93%

of 174 that carry counters

cheaper than90%

of 174 with a comparable price

174 endpoints are in this category. 1 declare exactly this price.

the comparison, 2026-09-15 16:57 UTC · method · live

Nearest on price

dicerng.sociologic.ai0.02 USDCpass
search randomgifu-server.onrender.com0.03 USDClegacy v1
generate Passwordx402.outpimp.com0.01 USDCpass
solidity scanagent402.tools0.01 USDCpass
data password strengthintel.rallylive.ca0.01 USDCpass

Same category, nearest declared price, one per payee wallet (method). the list, 2026-09-15 16:57 UTC · method · live

Elsewhere in the record

Cite this page

The pinned URL below renders this page from the snapshot of 2026-09-15 16:57 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).

Plain text

TOLL, "code scan on api.agentstools.dev", snapshot of 2026-09-15 16:57 UTC. https://tollindex.com/e/api-agentstools-dev-code-scan-6ae9a1/at/2026-09-15T16-57Z. Accessed [access date].

BibTeX

@misc{toll-e-api-agentstools-dev-code-scan-6ae9a1-2026-09-15T16-57Z,
  author = {TOLL},
  title = {code scan on api.agentstools.dev},
  howpublished = {\url{https://tollindex.com/e/api-agentstools-dev-code-scan-6ae9a1/at/2026-09-15T16-57Z}},
  year = {2026},
  month = {9},
  note = {Pinned view of the snapshot of 2026-09-15 16:57 UTC. Accessed [access date].}
}

Reports and replies about this endpoint

None yet. Anything submitted through the form below is published here with its outcome.

Report an error about code scan, or reply as the named seller