# Agent Dev Preflight API

Deterministic pay-per-request dependency security and package preflight API for AI coding agents.

Recommended default: POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/dependencies/preflight — 0.10 USDC — full vulnerability, license, provenance, upgrade-gap and deterministic-risk preflight for up to 20 exact package versions.

## Production payment
- Protocol: x402 v2 exact
- Network: Base Mainnet (eip155:8453)
- Asset: native USDC
- No API key or subscription required

## Free discovery
- https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/catalog
- https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/discovery-manifest
- https://agent-dev-preflight-api.bonkoturyu.workers.dev/health
- https://agent-dev-preflight-api.bonkoturyu.workers.dev/docs

## Paid resources
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/package/risk — 0.03 USDC — Deterministic package risk preflight for AI coding agents using OSV and npm/PyPI registry metadata.
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/dependencies/vulnerabilities — 0.05 USDC — Batch OSV vulnerability lookup for exact installed npm/PyPI dependency versions before code changes or releases.
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/dependencies/preflight — 0.10 USDC — Full dependency security preflight for AI coding agents: vulnerabilities, upgrade gap, license metadata, provenance and risk.
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/package/provenance — 0.03 USDC — Software supply-chain package provenance, registry and integrity metadata for autonomous developer workflows.
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/dependencies/licenses — 0.03 USDC — Batch npm/PyPI license metadata triage for autonomous dependency review workflows.
- POST https://agent-dev-preflight-api.bonkoturyu.workers.dev/v1/package/upgrade — 0.03 USDC — Dependency upgrade-gap check comparing an exact installed package version with the registry latest version.

## Input constraints
- npm and PyPI
- exact installed versions only
- batch size: 1 to 20 packages

## Notes
- Successful responses are deterministic JSON.
- No LLM is used in the request path.
- Vulnerability data is sourced from OSV; package metadata comes from public registries.
- Risk and license outputs are triage metadata, not security or legal advice.

Support: adpmainnet@gmail.com