Start using ScanPay in 60 seconds

Deterministic pre-execution security scanning for agent-generated Python/JS/TS. Paid per call in USDC over x402 v2 on Base or Solana. No signup, no API key.

1. MCP (streamable HTTP)

{"mcpServers": {"scanpay": {"type": "http", "url": "https://scanpay-edge.alextaghiashvili.workers.dev/mcp"}}}

Tools: scan_code (returns live x402 payment requirements; no free tier) and pricing. Discovery file: https://scanpay-edge.alextaghiashvili.workers.dev/.well-known/mcp.json.

2. HTTP + x402

# unpaid call returns 402 with PAYMENT-REQUIRED (Base or Solana accepts)
curl -s -X POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/quick   -H 'Content-Type: application/json'   -d '{"source_code":"import os
os.system(input())","language":"python"}'

# an x402 client (Python/JS SDK) signs and retries with PAYMENT-SIGNATURE
# Python: x402ClientSync + EthAccountSigner + wrapRequestsWithPayment

Prices: $0.01 quick · $0.05 scan · $0.10 agent-deep · $10 deep report · micro utilities from $0.001. Full list: /pricing. Machine-readable: OpenAPI, x402 manifest.

3. A2A

Agent card: https://scanpay-edge.alextaghiashvili.workers.dev/.well-known/agent-card.json · JSON-RPC endpoint: https://scanpay-edge.alextaghiashvili.workers.dev/a2a.

4. Framework snippets

/integrations has an ElizaOS action and a LangChain tool using prepaid credits (X-API-Key) or x402.

5. Check another endpoint before listing it

POST https://scanpay-edge.alextaghiashvili.workers.dev/api/v1/x402-check ($0.01) audits a public x402 endpoint's 402 challenge and returns a scored checklist. See observations and case study.