security

TaintCheck

Scan a dependency manifest for known-vulnerable and confirmed-malicious packages. POST /v1/scan with a link to a lockfile on GitHub, GitLab or Bitbucket, the file pasted in, or a components array, and get per-dependency verdicts (malicious, vulnerable, suspicious, clean) from OSV.dev and the OpenSSF Malicious Packages feed. Pay per request in USDC; no account, no API key.

post/v1/taint-check

Request

  • Base URL: https://agent.pocket.network
  • URL: https://agent.pocket.network/v1/taint-check
  • Auth: none required

Request body

Response

The upstream response, served after payment settles.

object required

For POST /v1/scan, a JSON object with a findings array — each dependency's verdict (malicious, vulnerable, suspicious, clean), a summary, and a data_as_of timestamp. Findings vary by each supplier's snapshot freshness and converge as mirrors sync. The exact shape is the service's own and is not pinned here; errors return a JSON object with an error field, and the GET routes return their own small JSON documents.

Changes

No recorded changes to this operation across all 1 revision of this API.