pkg-oracle
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict
Go to this service →Our latest check (2026-10-11)
- Answering
- Yes — valid x402 payment terms
- Time to answer
- 119 ms
- Price
- $0.003 per call
- Paying buyers, last 30 days
- 2 (directory's own records)
- Paid calls, last 30 days
- 2
- Category
- Unclassified
- Address
- https://mcp-snowy-dew-9447.fly.dev/verify
Accuracy
Accuracy scores are published once a seller has enough paid checks against an independent record (at least 7 scored answers over at least 7 days). Until then no score is shown, and a missing score is never a pass.
For agents
This page as JSON: /sellers/232c7dfd02f6.json. Paid lookup by address: GET /api/seller?resource=… ($0.001, x402).