SERVICE / DETAILother

Toolsmith

GET toolcall.click/t/package/check

OPEN SERVICE ↗

SONAR SCORE0.767

LIVE PRICE0.010000

BAZAAR LIVEcompatible

CDP INDEXEDno

DECISION EVIDENCE

Why an agent can trust this route.

23 observations in the last 24h

HANDSHAKE SUCCESS95.7%402 challenge reachable

PAID DELIVERY0.0%settlement observed

P90 LATENCY2203msrecent response window

PRICE DRIFT0.0%advertised vs observed

Sonar evidence is advisory. Paid delivery is shown as verified only when paid probes are available; otherwise route estimates use the unpaid handshake as a clearly labeled proxy.

SONAR PROBE HISTORY / 30D

Observed outcomes

JSON ↗

LIVE ENDPOINT METADATA

Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.

Resource: toolcall.click/t/package/check

Network: eip155:8453 · Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 · Pay to: 0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5

Payment methods: — · Last validation: 2026-09-14 12:26:22.494+00

{
  "input": {
    "type": "object",
    "required": [
      "type",
      "method"
    ],
    "properties": {
      "type": {
        "type": "string",
        "const": "http"
      },
      "method": {
        "enum": [
          "GET"
        ],
        "type": "string"
      },
      "queryParams": {
        "type": "object",
        "required": [
          "name"
        ],
        "properties": {
          "eco": {
            "enum": [
              "npm",
              "pypi",
              "go",
              "maven",
              "cargo",
              "rubygems",
              "nuget"
            ],
            "type": "string",
            "description": "Ecosystem, default npm"
          },
          "name": {
            "type": "string",
            "description": "Package name, e.g. express or @scope/pkg"
          },
          "version": {
            "type": "string",
            "description": "Version to check, default latest"
          }
        }
      }
    },
    "additionalProperties": false
  },
  "output": {
    "type": "object",
    "required": [
      "type"
    ],
    "properties": {
      "type": {
        "type": "string"
      },
      "example": {
        "type": "object"
      }
    }
  },
  "paymentRequirements": [
    {
      "raw": {
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "payTo": "0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5",
        "amount": "10000",
        "scheme": "exact",
        "network": "eip155:8453",
        "maxTimeoutSeconds": 300
      },
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "payTo": "0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5",
      "scheme": "exact",
      "network": "eip155:8453",
      "amountAtomic": "10000"
    }
  ]
}

METADATA PROVENANCE

Source catalog records are retained separately from live endpoint observations. Sonar score, uptime, and latency are advisory metrics. CDP indexing is not inferred from validation.