Api Endpoint

Pocket Network

Dependency health across PyPI, npm, Go, Cargo, Maven, Composer, and NuGet via deps.dev and OSV: versions, licenses, and known vulnerabilities. POST /v1/tool with {package, ecosystem}, or GET /v1/package for the Bazaar listing. Deterministic per advisory state. Pay per request in USDC; no account, no API key.

Open interactive test console

Offering

Provider: agent.pocket.network
Method: POST
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://agent.pocket.network/v1/package-advisories
MIME type: application/json
First seen: 2026-10-16T01:50:19.913Z
Last seen: 2026-11-04T14:31:36.489Z
Tags: Security, package-advisories, rest

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.005 USDC
Atomic price: 5000 · Network: eip155:8453 · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "5000",
    "payTo": "0xF732ea490c5766071785a2310523f7fA2CEbB829"
  }
]

Observed health

Status: Reachable
Latest latency: 413 ms
Average latency: 863 ms
HTTP status: 405
Last checked: 2026-11-04T11:00:22.416Z
Reachability: 100% over 13 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "POST",
        "PUT",
        "PATCH"
      ]
    },
    "bodyType": {
      "type": "string",
      "enum": [
        "json",
        "form-data",
        "text"
      ]
    },
    "body": {
      "type": "object",
      "description": "A package to audit. On the MCP relay route POST /v1/tool these fields are wrapped under an `arguments` object; the direct route takes them at the top level. GET /v1/package is the direct Bazaar query route.",
      "properties": {
        "package": {
          "type": "string",
          "description": "Package name, e.g. requests."
        },
        "ecosystem": {
          "type": "string",
          "description": "Ecosystem, e.g. pypi, npm, go, cargo, maven, composer, nuget."
        },
        "version": {
          "type": "string",
          "description": "Optional specific version."
        }
      },
      "required": [
        "package"
      ]
    }
  },
  "required": [
    "type",
    "method",
    "bodyType",
    "body"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string"
    },
    "example": {
      "type": "object",
      "properties": {
        "portal": {
          "type": "object",
          "properties": {
            "provenance": {
              "const": "third-party-supplier"
            },
            "serviceId": {
              "const": "package-advisories"
            },
            "schemaCheck": {
              "enum": [
                "passed",
                "undeclared",
                "unchecked"
              ]
            }
          },
          "required": [
            "provenance",
            "serviceId",
            "schemaCheck"
          ]
        },
        "data": {
          "type": "object",
          "description": "For POST /v1/tool, a JSON object with the latest_version, versions, licenses, and known vulnerabilities. The exact shape is the service's own and is not pinned here; errors return a JSON object with an `error` field, and the GET routes return their own small JSON documents."
        }
      },
      "required": [
        "portal",
        "data"
      ]
    }
  },
  "required": [
    "type"
  ]
}