---
title: "PHP lint"
method: POST
path: "/api/lint/php"
tags: ["Dev Tools"]
---

# PHP lint

`POST /api/lint/php`

## Request

- Base URL: `https://api.webbersites.com`
- URL: `https://api.webbersites.com/api/lint/php`
- Auth: API key in header `X-PAYMENT`

PHP lint: POST {code}, get the bugs back with line numbers. Deterministic static analysis — code is never executed, no AI. Catches SQL injection (request data interpolated into query strings), the removed mysql_* API, unbalanced braces, '+' string concat, = vs == in conditions, type-juggling loose comparisons, eval/extract on request data, unused variables, leftover var_dump. Understands PHP tags, heredocs, interpolation. Max 128 KB.

Price: $0.002 per call, paid in USDC via the x402 protocol (see the x402 security scheme).

## Request body

- object
  - `code` string, required: PHP source to lint, max 128 KB

## Response `200`

Success

- object
  - `language` string
  - `syntax` object
  - `issues` unknown[]
    - unknown
  - `counts` object
  - `verdict` string

## Other responses

- `402`: Payment required — the response body lists accepted payment methods (amount, asset, network, pay-to address). Retry the request with a signed X-PAYMENT header.

---

[API](https://skmtc.dev/webbersites/apis/webbersites-x402-data-api.md) · [All operations](https://skmtc.dev/webbersites/apis/webbersites-x402-data-api/llms.txt) · [OpenAPI document](https://skmtc.dev/webbersites/apis/webbersites-x402-data-api/revisions/c14a76c67a94?raw)