{"slug":"api-agentstools-dev-code-inspect-b36f4a","title":"Static application-security scan of a single code blob for CWE Top-25 logic bugs","host":"api.agentstools.dev","method":"POST","resource":"https://api.agentstools.dev/code/inspect","category":"code","description":"Static application-security scan of a single code blob for CWE Top-25 logic bugs (SQL injection, XSS, command injection, SSRF, path traversal, insecure deserialization, weak crypto and more). Pass the code and its language; returns a verdict with per-finding CWE, severity and line. Static indicators","price_listed":0.008,"price_asked":0.008,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":984,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"code":"import hashlib\nh = hashlib.md5(data).hexdigest()\n","language":"python"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"code":{"description":"The source code blob to inspect","type":"string"},"language":{"description":"Language of the blob: python, javascript, java, go, php or ruby","type":"string"}},"required":["code","language"]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-09-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.008,"price_match":true,"latency_ms":984,"error":null}],"description_full":"Static application-security scan of a single code blob for CWE Top-25 logic bugs (SQL injection, XSS, command injection, SSRF, path traversal, insecure deserialization, weak crypto and more). Pass the code and its language; returns a verdict with per-finding CWE, severity and line. Static indicators, not a guarantee.","last_updated":"2026-09-17T11:55:15.662Z","schemes":["exact"]}