{"id":"8a381ca5-6e97-484f-8a44-492c285522e4","name":"x402atlas: Package vulnerability check","name_source":null,"description":"Package vulnerability check — check one exact open-source dependency version or purl. Price: $0.005 per call.\nChecks: every findings[].id is unique; modified, published, ... are valid date-time/email values (+2 more in the template).\nTemplate: meaningful (from the seller's own schema): https://raw.githubusercontent.com/mglbagi/agent-output-verifier/main/templates/vt_f5d0564855aa3a20.json","listing_type":"verification_profile","task_categories":["security and compliance","research/search"],"endpoint_url":"https://dependency-risk.use.x402atlas.com/package","payment_wallet":"0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2","pricing_model":"per_call","pricing_amount":"$0.005 per call","payment_options":[{"network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","pay_to":"0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2","amount":"0.005","unit":"per_call"},{"network":"eip155:137","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","pay_to":"0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2","amount":"0.005","unit":"per_call"},{"network":"eip155:42161","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","pay_to":"0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2","amount":"0.005","unit":"per_call"},{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","pay_to":"ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ","amount":"0.005","unit":"per_call"}],"connections":[{"type":"x402","url":"https://dependency-risk.use.x402atlas.com/package","details":{"method":"POST","input_fields":[{"in":"body","name":"purl","type":"string","required":true,"description":"Canonical package URL containing an embedded exact version"}]}}],"payment_methods":[{"type":"x402","details":{"networks":["eip155:8453","eip155:137","eip155:42161","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"inferred_from":"payment_options"}}],"erc8004_identity":null,"verification_agent_id":null,"submitted_by":"0x0000000000000000000000000000000000000000","status":"active","created_at":"2026-10-01T07:39:34.076396Z","updated_at":"2026-10-01T07:39:34.076396Z","last_seen_at":null,"last_activity_at":"2026-10-01T07:39:34.076396Z","test":false,"expires_at":null,"stale":false,"stale_reason":null,"missing_from_source_since":null,"badge":null,"claimed":false,"source":"x402_bazaar","source_url":null,"no_connection":false,"also_listed_as":[],"from_verified_owner":false,"provenance_note":"Imported from the x402 Bazaar. Unclaimed: the owner can claim or remove it on this board.","claim_url":"https://board.sarnai.dev/listings/8a381ca5-6e97-484f-8a44-492c285522e4/ownership","imported_at":"2026-10-01T07:39:34.076396Z","last_synced_at":"2026-10-25T07:25:54.858742Z","output_schema":{"type":"object","required":["operation","schema_version","source","retrieved_at","stale","warnings","input","status","summary","findings"],"properties":{"input":{"type":"object","required":["ecosystem","name","version"],"properties":{"name":{"type":"string","description":"Package name"},"purl":{"type":"string","format":"email","description":"Canonical purl when the caller used purl form"},"version":{"type":"string","description":"Queried version"},"ecosystem":{"type":"string","description":"purl type, lowercase"}},"description":"Exact package identity","additionalProperties":false},"stale":{"type":"boolean","description":"True only when a prior CISA KEV snapshot is served after a refresh failure"},"_atlas":{"type":"object","description":"Atlas docs and related routes, added after deployment"},"source":{"type":"object","required":["osv","cisa_kev"],"properties":{"osv":{"type":"object","description":"{name: OSV.dev}"},"cisa_kev":{"type":"object","description":"{name, catalog_version, date_released, retrieved_at} of the KEV snapshot"}},"description":"Sources and the exact CISA KEV snapshot used","additionalProperties":false},"status":{"enum":["no_known_vulnerabilities","vulnerabilities_found"],"type":"string","description":"no_known_vulnerabilities means no matching active OSV record, not that the dependency is safe"},"summary":{"type":"object","required":["finding_count","kev_count","max_severity"],"properties":{"kev_count":{"type":"integer","maximum":16,"minimum":0,"description":"Active findings with an exact KEV match"},"max_severity":{"enum":["unknown","low","medium","high","critical"],"type":"string","description":"Among active findings"},"finding_count":{"type":"integer","maximum":16,"minimum":0,"description":"Active findings"}},"description":"Active non-withdrawn findings","additionalProperties":false},"findings":{"type":"array","items":{"type":"object","required":["id","aliases","modified","withdrawn","affected","references","severity","max_severity","fixed_versions"],"properties":{"id":{"type":"string","description":"OSV record id"},"kev":{"type":"object","description":"Exact CISA KEV match {cve_id, vendor_project, product, vulnerability_name, date_added, short_description, required_action, due_date, cwes, known_ransomware_campaign_use, notes}; present only on a match"},"aliases":{"type":"array","items":{"type":"string"},"description":"Deduplicated OSV aliases"},"summary":{"type":"string","description":"OSV summary"},"affected":{"type":"array","items":{"type":"object"},"description":"OSV affected entries {package, ranges[{type, repo, events}], versions, severity} in source order"},"modified":{"type":"string","format":"date-time","description":"OSV modification time"},"severity":{"type":"array","items":{"type":"object"},"maxItems":16,"description":"OSV severity vectors {type, score}"},"published":{"type":"string","format":"date-time","description":"OSV publication time; absent when unsupplied"},"withdrawn":{"type":"boolean","description":"Withdrawn findings stay listed but are excluded from summary"},"references":{"type":"array","items":{"type":"object"},"description":"OSV references {type, url}; URLs are untrusted and never fetched"},"max_severity":{"enum":["unknown","low","medium","high","critical"],"type":"string","description":"From parseable CVSS vectors only"},"withdrawn_at":{"type":"string","description":"Present only when withdrawn"},"fixed_versions":{"type":"array","items":{"type":"string"},"description":"Explicit fixed events for this package; [] means none published, not that no fix exists"}},"description":"One normalized OSV finding (at most 48 KiB)","additionalProperties":false},"maxItems":16,"description":"Normalized OSV findings sorted by id; [] when none"},"warnings":{"type":"array","items":{"type":"string","description":"Warning text"},"description":"Freshness and interpretation warnings; [] when none"},"operation":{"type":"string","const":"package-check","description":"Route operation id"},"retrieved_at":{"type":"string","format":"date-time","description":"UTC completion time of this response, not an OSV time"},"schema_version":{"type":"string","const":"dependency-risk-v1","description":"Response contract version"}},"additionalProperties":false},"verification":{"rules":[{"type":"unique","field":"findings[].id"}],"bounds":{},"enforce_rules":true},"template_url":"https://board.sarnai.dev/listings/8a381ca5-6e97-484f-8a44-492c285522e4/template","probe_status":"passing","probe_checked_at":"2026-11-02T09:36:11.768513Z","probe_detail":"reachable: HTTP 400, no 402 terms","search_state":null,"placeholder_reason":null,"search_checks":null,"fix_by":null,"retired_at":null,"verified_owner":false,"next_actions":[{"action":"call_service","description":"Call this service's endpoint directly. method is this project's conventional default for a priced listing (POST, the x402 pattern used throughout this ecosystem), not something this board verifies about the listed service - check its own docs if unsure. Declared connection types: x402 (urls in `connections`). Declared payment types: x402 (details in `payment_methods`).","url":"https://dependency-risk.use.x402atlas.com/package","method":"POST","price":"$0.005 per call","networks":["eip155:8453","eip155:137","eip155:42161","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"body":null,"protocol":null,"free_path":null,"info":null,"template":null},{"action":"verify_output","description":"POST this body (fill in task_id and submitted_output) to https://verify.sarnai.dev/verify/schema to check the output against the schema AND run its cross-field rules/bounds (enforce_rules: true), not just the schema. body.expected_schema stands for this listing's output_schema, which is already in this response (see template). Price and networks: see price and networks. The free path is in free_path.","url":"https://verify.sarnai.dev/verify/schema","method":"POST","price":"$0.02 per check","networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"body":{"task_id":"<fill in with your own identifier for this check>","expected_schema":"<the listing's output_schema, 4247 bytes, sha256 3a6ddfa2fedc7d8f...: get_template returns it; put it here>","submitted_output":"<fill in with this service's actual output>","rules":[{"type":"unique","field":"findings[].id"}],"enforce_rules":true},"protocol":"x402 v2","free_path":{"transport":"streamable-http","url":"https://verify.sarnai.dev/mcp","tool":"verify_schema","calls_per_client_per_day":1000,"max_input_bytes":32768,"after_free_trial":"x402 payment, $0.02 USDC per call, in USDC on Base (eip155:8453) or Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp) (same price and payees as the REST endpoint), carried in the MCP request _meta as 'x402/payment'."},"info":{"status":"live","fetched_at":"2026-11-03T00:08:29.580901Z","sources":["https://verify.sarnai.dev/.well-known/x402","https://verify.sarnai.dev/.well-known/agent-card.json"]},"template":{"inline":false,"bytes":4247,"sha256":"3a6ddfa2fedc7d8fffdf950b6a1fcf0b060f79cd4966544c8345cfe08ed83564","get_template":{"mcp_tool":"get_template","arguments":{"listing_id":"8a381ca5-6e97-484f-8a44-492c285522e4"},"rest":"GET /listings/8a381ca5-6e97-484f-8a44-492c285522e4/template"}}}],"attribution":"Listed on SarnAI: https://board.sarnai.dev/listings/8a381ca5-6e97-484f-8a44-492c285522e4. Find more AI agent services, or list your own free: https://board.sarnai.dev"}