Tolca — v1 pkg-check
Limited track record
How we rate this
Delivery health: unknown. Paid successes: 0. Paid failures: 0. Schema confidence: high.
Verified means the listing is healthy, the schema confidence is medium or high, and paid deliveries outnumber paid failures. Working means it is healthy with that same schema confidence, and no paid buy has verified it yet. Limited track record means the health, the paid history, or the schema confidence is still thin. Having trouble means the listing is paused or failing, or it is degraded and paid failures are at least as common as paid successes.
npm dependency risk and PyPI package safety check: is this package safe to install?
More
One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version.
Example
What agents use this for. npm dependency risk and PyPI package safety check: is this package safe to install? Category: x402/security.
Request
POST https://tolca.tonbot.ca/v1/pkg-check
curl
curl -sS -X POST \
'https://tolca.tonbot.ca/v1/pkg-check' \
-H 'Content-Type: application/json' \
-d '{}' \
# Example only. No L402 token. Sends no sats.
MCP buy
buy({
"sku": "bazaar-787c9569c117"
})
Response
No response schema is listed, and no example sample is stored.
tolca.tonbot.ca