Daily transfers, volume and coverage →
api.vrsai.tech · api.vrsai.tech · Security
Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdrawal/deprecation, and verified provenance evidence. Returns ALLOW, REVIEW, BLOCK, or UNKNOWN with machine-readable reasons.
| Window | Observed | Transfers |
|---|---|---|
| Last complete day (2026-10-30) | $0.01 | 1 |
| Last 7 days | $0.02 | 2 |
| Last 30 days | $0.13 | 13 |
| Growth, 7d against the 7 before | not comparable | |
Daily history →. Observed transfers show value arriving at the payout address; they do not establish service revenue.
Receiving wallets are payment addresses published for this service. Sending wallets transferred funds to an exclusive receiving address; this alone does not prove a purchase or identify an agent.
| Network | Full wallet address | Evidence |
|---|---|---|
| Base | 0x6746dff7bdb1ed4940dbe50024795ad97cba09af | Exclusive to this catalogue serviceFrom source record · source: x402_bazaar |
| Solana | EiJRESZjUCUufSjSb5iDmikXXeKa3C1gQwYCZR4xFocj | Exclusive to this catalogue serviceFrom source record · source: x402_bazaar |
All 2 retained sending addresses are listed below. Source: on-chain transfer scans. Dates are UTC days.
| Network | Full wallet address | Transfers | First / last observed | Last scanned (UTC) |
|---|---|---|---|---|
| Base | 0xa1d1c0cf717402ff3651aa4873ccf96410b01978 | 1 | 2026-10-30 / 2026-10-30 | 2026-10-31 15:38:16 |
| Base | 0xc4985c1ecaf9d7cc91727e32cf28bba1e002254a | 1 | 2026-10-28 / 2026-10-28 | 2026-10-29 23:38:15 |
Coverage includes retained scans only, not every historical transaction. Earlier daily totals cannot recover sender addresses. Sender lists exclude shared receiving wallets, whose transfers could belong to another service. A provider address does not establish wallet ownership.
Sorted by source-measured calls, not by our opinion. The right-hand figure is observed inflow, which stays empty for peers whose address is shared.
| With a measured call count | 11,777 (84.2 %) |
|---|---|
| With a published price | 12,061 (86.2 %) |
| With attributable inflows | 32 (0.2 %) |
| Observed inflows · 30d | $1,012.84 |
| Median measured calls | 2 |
| Median price per call | $0.01 |
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / ant...
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any...
CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affe...
Smart Contract Audit — Security review of a single contract
Chosen by category and by whether we have measured them, not by who pays us. A sponsored placement in this list is labelled as such.
| Network | Scheme | Amount | Asset |
|---|---|---|---|
| Base | exact | 0.01 | USDC |
| Solana | exact | 0.01 | USDC |
“exact” is the price per call. “upto” is a ceiling the client sets, not a price. Atomic amount 10000 = 0.01 USDC per call on Base. 2 payment options published.
endpoint
https://api.vrsai.tech/v1/capabilities/package_install_preflight
{
"body": {
"purl": "pkg:npm/%40colors/colors@1.5.0"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
{
"example": {
"decision": "ALLOW",
"evidence": [
{
"attempts": 1,
"latency_ms": 120,
"observed_at": "2026-08-26T00:00:00.000Z",
"source": "npm_registry",
"status": "OK"
},
{
"attempts": 1,
"latency_ms": 240,
"observed_at": "2026-08-26T00:00:00.000Z",
"source": "osv",
"status": "OK"
},
{
"attempts": 1,
"latency_ms": 90,
"observed_at": "2026-08-26T00:00:00.000Z",
"source": "deps_dev",
"status": "OK"
}
],
"input_fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"observations": {
"deps_dev": {
"advisory_ids": [],
"canonical_name": "@colors/colors",
"canonical_version": "1.5.0",
"licenses": [
"MIT"
]
},
"evidence_complete": true,
"provenance": {
"attestation_types": [],
"expected_repository_match": "NOT_REQUESTED",
"source_repositories": [],
"verified": false
},
"registry": {
"deprecated": false,
"distribution_hashes": [],
"exists": true,
"install_scripts": [],
"integrity": "sha512-fixture-integrity",
"repository_metadata": {
"url": "https://github.com/Marak/colors.js",
"verified": false
},
"yanked": "NONE",
"yanked_reasons": []
},
"vulnerabilities": {
"families": [],
"family_count": 0,
"malicious_package_signal": false,
"max_severity": "NONE",
"raw_record_count": 0
}
},
"observed_at": "2026-08-26T00:00:00.000Z",
"package": {
"ecosystem": "npm",
"name": "@colors/colors",
"purl": "pkg:npm/%40colors/colors@1.5.0",
"version": "1.5.0"
},
"policy_version": "balanced-2026-08-26",
"reason_codes": [
"NO_BLOCKING_SIGNAL_OBSERVED"
],
"unknowns": []
},
"type": "json"
}
Examples are the provider's own, not a call we made.
The observed inflow implies about 13 calls at list price; the source counted 13 (factor 1). A transfer is still not a purchase, but the order of magnitude holds — this is the strongest monetisation signal in the catalogue short of a receipt feed.
Peers with attributed inflows →32 of 13,993 services (0.2%) in Security have attributable inflows; 11,777 have a source-measured call count. Median measured calls: 2.
Rank this category by observed inflows →Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdrawal/deprecation, and verified provenance evidence. Returns ALLOW, REVIEW, BLOCK, or UNKNOWN with machine-readable reasons.
Quoted from x402 Bazaar · source record · read 2026-10-31
Observed transfers
· confidence medium
Token transfers reached this service's own payout address. A transfer is not a purchase, and shared, refunded or unrelated transfers cannot be excluded.
Why revenue is “unknown”. A revenue figure needs a receipt: an amount a buyer actually paid for this service. We hold none for this entry, and we hold no funds at all. What we have instead is $0.13 arriving at the payout address in 30 days — that is volume, and a lower bound: transfers can be refunds, treasury moves, or payments for something else entirely.
Cross-check. At the published price the observed inflow would cover about 13 calls; the source counted 13. Two independent measurements of the same question — they never match exactly, because the effective price differs per call size and the address can also receive unrelated transfers.
No daily history has been archived for this service yet. Open the full daily history →
A payment rail is where the provider asks to be paid. It is not proof that anything was paid through it.
One row per statement. “Verified” means we checked it ourselves and the finding is quoted. “Provider claim” means we read it in the provider's own record. “Not found” is a statement about our search, not proof of absence.
| Statement | Status | What we found | Source | Checked |
|---|---|---|---|---|
| Endpoint | Provider claim |
https://api.vrsai.tech/v1/capabilities/package_install_preflight
EvidenceAls Resource-URL im Bazaar-Eintrag geführt. |
api.cdp.coinbase.com | 2026-10-31 |
| Input output | Provider claim |
Request/response examples published with the listing
EvidenceBeispiel-Ein- und -Ausgabe stammen aus dem Bazaar-Eintrag des Anbieters. |
api.cdp.coinbase.com | 2026-10-31 |
| Payment | Provider claim |
2 rails: Base, Solana · payee 0x6746dFF7bDB1ED4940DBe50024795AD97CbA09Af
EvidenceAus den `accepts`-Einträgen: Netzwerk, Asset, Empfängeradresse und Betrag. Die Adresse ist die Grundlage der späteren On-Chain-Zuordnung; sie ist noch nicht durch eine eigene 402-Antwort bestätigt. |
api.cdp.coinbase.com | 2026-10-31 |
| Pricing | Provider claim |
0.01 USDC per call
EvidenceAtomic amount 10000 = 0.01 USDC per call on Base. 2 payment options published. Netzwerk: Base, Solana. |
api.cdp.coinbase.com | 2026-10-31 |
| Protocol | Provider claim |
x402 (HTTP 402 payment challenge)
EvidenceIm x402 Bazaar als zahlungspflichtige HTTP-Ressource gelistet (x402Version 2, Typ http). |
api.cdp.coinbase.com | 2026-10-31 |
| Provider | Provider claim |
api.vrsai.tech
EvidenceDie Ressource wird unter diesem Host im x402 Bazaar geführt; die Angaben stammen vom Anbieter. |
api.cdp.coinbase.com | 2026-10-31 |
| Usage | Verified |
13 calls / 10 unique payers in the last 30 days
EvidenceSource-reported usage from Coinbase x402 Bazaar, read on 2026-10-31. Letzter Aufruf laut Quelle: 2026-10-30T23:18:18.401Z. Aufrufe sind kein Umsatz. |
api.cdp.coinbase.com | 2026-10-31 |
We have not called this endpoint yet. Until we do, everything above is what the source published — no more.