{
  "id": "api:x402-03c1dd8b3a4bf1f2",
  "kind": "api",
  "name": "lazaretto.dev/v1/scan",
  "description": "Supply chain security scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill or MCP server. Use it when an agent is about to install, clone or connect to something. Matches the target against OSV and OpenSSF advisories to catch known malware, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 and a signed attestation. An errored scan is free.",
  "category": "x402",
  "url": "https://lazaretto.dev/v1/scan",
  "price": null,
  "x402": true,
  "meta": {
    "network": "eip155:8453",
    "scheme": "exact",
    "pay_to": "0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0",
    "method": "POST",
    "last_updated": "2026-11-12T16:33:58.48Z"
  },
  "trust": {
    "verified": false,
    "uptime_pct": 100,
    "latency_ms": 809,
    "checks": 1
  }
}