{
  "x402Version": 2,
  "id": 32718,
  "slug": "32718",
  "resource": "https://agent.pocket.network/v1/taint-check",
  "description": "Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a raw lockfile or a components array and get per-dependency verdicts (malicious, vulnerable, suspicious, clean) from OSV.dev and the OpenSSF Malicious Packages feed, each with a summary and snapshot timestamp. Pay per request in USDC; no account, no API key.",
  "type": "http",
  "serviceName": "Pocket Network",
  "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1789841442/bazaar-icons/3cd57aad9bac9307.png",
  "resourceType": "Utilities",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xF732ea490c5766071785a2310523f7fA2CEbB829",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "5000",
      "amountUsd": 0.005,
      "maxTimeoutSeconds": 60
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "properties": {
          "data": {
            "description": "For POST /v1/scan, a JSON object with a `findings` array — each dependency's verdict (malicious, vulnerable, suspicious, clean), a summary, and a data_as_of timestamp. Findings vary by each supplier's snapshot freshness and converge as mirrors sync. The exact shape is the service's own and is not pinned here; errors return a JSON object with an `error` field, and the GET routes return their own small JSON documents.",
            "type": "object"
          },
          "portal": {
            "properties": {
              "provenance": {
                "const": "third-party-supplier"
              },
              "schemaCheck": {
                "enum": [
                  "passed",
                  "undeclared",
                  "unchecked"
                ]
              },
              "serviceId": {
                "const": "taint-check"
              }
            },
            "required": [
              "provenance",
              "serviceId",
              "schemaCheck"
            ],
            "type": "object"
          }
        },
        "required": [
          "portal",
          "data"
        ],
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "components": [
              {
                "ecosystem": "npm",
                "name": "minimist",
                "version": "1.2.0"
              }
            ],
            "options": {
              "heuristics": false
            }
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "data": {},
            "portal": {
              "provenance": "third-party-supplier",
              "schemaCheck": "passed",
              "serviceId": "taint-check"
            }
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "description": "Provide either a raw lockfile or a pre-parsed components array; body size and component limits come from GET /v1/capabilities.",
                "properties": {
                  "components": {
                    "description": "Pre-parsed dependencies.",
                    "items": {
                      "properties": {
                        "ecosystem": {
                          "description": "e.g. npm, pypi, go, cargo.",
                          "type": "string"
                        },
                        "name": {
                          "description": "Package name.",
                          "type": "string"
                        },
                        "version": {
                          "description": "Package version.",
                          "type": "string"
                        }
                      },
                      "type": "object"
                    },
                    "type": "array"
                  },
                  "lockfile": {
                    "description": "A raw lockfile.",
                    "properties": {
                      "content": {
                        "description": "Raw lockfile content.",
                        "type": "string"
                      },
                      "format": {
                        "description": "Lockfile format.",
                        "enum": [
                          "package-lock.json",
                          "pnpm-lock.yaml",
                          "yarn.lock",
                          "requirements.txt",
                          "poetry.lock",
                          "uv.lock",
                          "Pipfile.lock",
                          "Cargo.lock",
                          "go.sum"
                        ],
                        "type": "string"
                      }
                    },
                    "type": "object"
                  },
                  "options": {
                    "description": "Scan options.",
                    "properties": {
                      "heuristics": {
                        "description": "Add typosquat, install-script and dormancy signals.",
                        "type": "boolean"
                      },
                      "since": {
                        "description": "Only advisories newer than this timestamp (monitor mode).",
                        "type": "string"
                      }
                    },
                    "type": "object"
                  }
                },
                "required": [],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "properties": {
                  "data": {
                    "description": "For POST /v1/scan, a JSON object with a `findings` array — each dependency's verdict (malicious, vulnerable, suspicious, clean), a summary, and a data_as_of timestamp. Findings vary by each supplier's snapshot freshness and converge as mirrors sync. The exact shape is the service's own and is not pinned here; errors return a JSON object with an `error` field, and the GET routes return their own small JSON documents.",
                    "type": "object"
                  },
                  "portal": {
                    "properties": {
                      "provenance": {
                        "const": "third-party-supplier"
                      },
                      "schemaCheck": {
                        "enum": [
                          "passed",
                          "undeclared",
                          "unchecked"
                        ]
                      },
                      "serviceId": {
                        "const": "taint-check"
                      }
                    },
                    "required": [
                      "provenance",
                      "serviceId",
                      "schemaCheck"
                    ],
                    "type": "object"
                  }
                },
                "required": [
                  "portal",
                  "data"
                ],
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "security",
    "taint-check",
    "rest",
    "bazaar"
  ],
  "sourceHost": "agent.pocket.network",
  "lastUpdated": "2026-10-13T13:14:37.68Z",
  "quality": {
    "calls30d": 65,
    "uniquePayers30d": 4,
    "lastCalledAt": "2026-10-13T13:14:37.478Z"
  },
  "metadata": {
    "serviceName": "Pocket Network",
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1789841442/bazaar-icons/3cd57aad9bac9307.png",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "components": [
                {
                  "ecosystem": "npm",
                  "name": "minimist",
                  "version": "1.2.0"
                }
              ],
              "options": {
                "heuristics": false
              }
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "data": {},
              "portal": {
                "provenance": "third-party-supplier",
                "schemaCheck": "passed",
                "serviceId": "taint-check"
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "description": "Provide either a raw lockfile or a pre-parsed components array; body size and component limits come from GET /v1/capabilities.",
                  "properties": {
                    "components": {
                      "description": "Pre-parsed dependencies.",
                      "items": {
                        "properties": {
                          "ecosystem": {
                            "description": "e.g. npm, pypi, go, cargo.",
                            "type": "string"
                          },
                          "name": {
                            "description": "Package name.",
                            "type": "string"
                          },
                          "version": {
                            "description": "Package version.",
                            "type": "string"
                          }
                        },
                        "type": "object"
                      },
                      "type": "array"
                    },
                    "lockfile": {
                      "description": "A raw lockfile.",
                      "properties": {
                        "content": {
                          "description": "Raw lockfile content.",
                          "type": "string"
                        },
                        "format": {
                          "description": "Lockfile format.",
                          "enum": [
                            "package-lock.json",
                            "pnpm-lock.yaml",
                            "yarn.lock",
                            "requirements.txt",
                            "poetry.lock",
                            "uv.lock",
                            "Pipfile.lock",
                            "Cargo.lock",
                            "go.sum"
                          ],
                          "type": "string"
                        }
                      },
                      "type": "object"
                    },
                    "options": {
                      "description": "Scan options.",
                      "properties": {
                        "heuristics": {
                          "description": "Add typosquat, install-script and dormancy signals.",
                          "type": "boolean"
                        },
                        "since": {
                          "description": "Only advisories newer than this timestamp (monitor mode).",
                          "type": "string"
                        }
                      },
                      "type": "object"
                    }
                  },
                  "required": [],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "data": {
                      "description": "For POST /v1/scan, a JSON object with a `findings` array — each dependency's verdict (malicious, vulnerable, suspicious, clean), a summary, and a data_as_of timestamp. Findings vary by each supplier's snapshot freshness and converge as mirrors sync. The exact shape is the service's own and is not pinned here; errors return a JSON object with an `error` field, and the GET routes return their own small JSON documents.",
                      "type": "object"
                    },
                    "portal": {
                      "properties": {
                        "provenance": {
                          "const": "third-party-supplier"
                        },
                        "schemaCheck": {
                          "enum": [
                            "passed",
                            "undeclared",
                            "unchecked"
                          ]
                        },
                        "serviceId": {
                          "const": "taint-check"
                        }
                      },
                      "required": [
                        "provenance",
                        "serviceId",
                        "schemaCheck"
                      ],
                      "type": "object"
                    }
                  },
                  "required": [
                    "portal",
                    "data"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "agent.pocket.network",
    "manifest_name": "agent.pocket.network",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "example": {
      "data": {},
      "portal": {
        "provenance": null,
        "schemaCheck": "passed",
        "serviceId": null
      }
    },
    "type": "string"
  }
}