🛡️ ScanPay

Deterministic security scan for the code your AI agent is about to execute.
45+ vulnerability classes across Python and JavaScript/TypeScript. No code execution, no AI inference — the same input always produces the same findings. Source is hashed and discarded.

$0.05 · basic scan
POST /api/v1/scan $10.00 · deep report
POST /api/v1/deep-scan $0.01 · quick verdict
POST /api/v1/quick $5.00 · 200-scan credit pack
POST /api/v1/credits

Utility APIs — the demand-driven catalogue

Same x402 rails, tiny prices, machine-first output. GET or POST, no free tier.

$0.002 · readclean — URL → clean markdown/text
GET /api/v1/readclean?url=… $0.005 · urlwatch — did the page change?
GET /api/v1/urlwatch?url=… $0.002 · token-balance — ERC-20 balanceOf
GET /api/v1/token-balance?address=…&token=… $0.01 · x402-check — audit a paid endpoint
GET /api/v1/x402-check?target=… $0.10 · agent-deep report
POST /api/v1/agent-deep $0.10 · 5-scan micro credits
POST /api/v1/credits-micro $0.001 · crypto spot price
GET /api/v1/crypto-price?symbols=BTC $0.001 · gas estimate
GET /api/v1/gas-estimate?network=base $0.002 · FX rate
GET /api/v1/fx-rate?base=USD&quote=EUR

MCP — for AI agents

ScanPay is also a remote MCP server (streamable HTTP) with tools scan_code and pricing: See a sample deep report ($10) →
MCP: https://scanpay-edge.alextaghiashvili.workers.dev/mcp · discovery file https://scanpay-edge.alextaghiashvili.workers.dev/.well-known/mcp.json. Listed on the open MCP directory mcpub.dev.

Pay how you want

x402 (machine payments) — USDC on Base (eip155:8453) or Solana (solana:5eyk…Kvdp). No signup.
Direct on-chain — pay USDC/SOL to the service wallet and submit the transaction hash: POST /api/v1/scan/manual, POST /api/v1/deep-scan/manual.

Examples

# clean a page ($0.002)
curl "https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/readclean?url=https://example.com/article"
# 402 → pay with any x402 client → retry with the payment header

# security scan ($0.05)
curl -X POST "https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/scan"   -H 'Content-Type: application/json'   -d '{"source_code":"import os
os.system(input())","language":"python"}'

# audit another x402 endpoint ($0.01)
curl "https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/x402-check?target=https://example.com/api/paid"

Why

Coding agents write and run code continuously; dangerous constructs are the common failure.
Deterministic rules — no hallucinated findings, no model cost per call.
Machine-payable; one call = one delivery; no code retained.

Engine 1.1.0 · x402 v2 · dual rail · GET /api/v1/health