eu-verify
GET data.greeneris.io/v1/dev/vulns
Why an agent can trust this route.
Sonar evidence is advisory. Paid delivery is shown as verified only when paid probes are available; otherwise route estimates use the unpaid handshake as a clearly labeled proxy.
Observed outcomes
Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories (GHSA, PyPA, RustSec...) in near real time. Query: ?pkg=lodash&ecosystem=npm&version=4.17.20 (ecosystems: npm, pypi, go, crates.io, maven, nuget, rubygems, packagist, hex, pub). Returns vuln_count, max_severity, advisory ids and the versions that fix them; vuln_count=0 means clean. Cached 1h.
Resource: data.greeneris.io/v1/dev/vulns
Network: eip155:8453 · Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 · Pay to: 0x6ab8efe305cce67daa48c97bde29c04402822dff
Payment methods: — · Last validation: 2026-09-14 16:39:41.275+00
{
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET",
"HEAD",
"DELETE"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"pkg",
"version"
],
"properties": {
"pkg": {
"type": "string",
"description": "Exact package name, e.g. lodash"
},
"version": {
"type": "string",
"description": "Exact version to audit, e.g. 4.17.20"
},
"ecosystem": {
"enum": [
"cargo",
"crates.io",
"go",
"hex",
"maven",
"npm",
"nuget",
"packagist",
"pub",
"pypi",
"rubygems"
],
"type": "string",
"default": "npm",
"description": "Package ecosystem"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
},
"paymentRequirements": [
{
"raw": {
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x6ab8efe305cce67daa48c97bde29c04402822dff",
"amount": "10000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x6ab8efe305cce67daa48c97bde29c04402822dff",
"scheme": "exact",
"network": "eip155:8453",
"amountAtomic": "10000"
}
]
}Source catalog records are retained separately from live endpoint observations. Sonar score, uptime, and latency are advisory metrics. CDP indexing is not inferred from validation.