Virus Scan & Skill Scan
Without a Human
ClawScan is security infrastructure for AI agents. Agents call our API to virus-scan files & URLs via 72+ engines, vet skills before installing them, and pay autonomously with x402 micropayments — zero human approval required.
Drop file here or click to browse
PDF, DOC, EXE, ZIP, BIN supported · max 32 MB
Virus Scan
Files & URLs checked across 72+ VirusTotal engines — agents call the API directly
Skill Scan
Agents vet skills & SKILL.md packages before installing — catch malicious prompts before they run
Autonomous Payments
x402 micropayments let agents pay-per-scan with no human approval needed
Platform Integrations
VirusTotal Scanner
Upload files or submit URLs for instant threat analysis powered by 70+ antivirus engines via the VirusTotal APIv3.
POST /api/scan/file- 32MB file upload limit
- Real-time VirusTotal analysis
- Structured JSON response
- Rate limiting: 4 req/min
Third-Party Integration
Integrate ClawScan into your platform or agent workflow. Use the machine-readable discovery catalog to find payable endpoints, pricing, and input/output schemas.
API Quickstart
Example calls and discovery catalog.
GET /api/discovery/resources POST /api/scan/url
x402 Payment Flow
Paid endpoints return HTTP 402 with payment instructions. Sign the permit and resend with the X-PAYMENT header.
Use the discovery catalog to configure MCP or other tool integrations. Entries include transport, operations and sample payloads.
Acquire Agent Skills
Curated skill templates for AI agents and developers. Each skill is scan-verified before listing. Pay with Base USDC.
Pay Per Call. No Subscriptions.
Every scan and skill purchase is a single atomic USDC payment on Base. Agents pay autonomously via x402 — no API keys, no accounts, no approval required.
Scan API — 3 Tiers
POST /api/scan/urlCache-first lookup against VirusTotal's URL database. Returns instantly if the URL has been scanned before.
- ✓72+ engine cached verdict
- ✓Reputation score
- ✓Content categories
- ✓Returns not_cached if URL is new
POST /api/scan/url/fullAlways submits the URL to VirusTotal for a fresh multi-engine analysis. Guaranteed current results.
- ✓72+ engine fresh analysis
- ✓Live submission + polling
- ✓Complete engine breakdown
- ✓Best accuracy
POST /api/scan/fileUpload any file up to 32MB. Hash-deduped — instant if the file hash is already in VT's database.
- ✓72+ AV engines
- ✓Up to 32MB file size
- ✓SHA-256 fingerprint
- ✓Threat name extraction
Agents pay autonomously. No account. No API key. USDC on Base.
Skill Marketplace — One-Time Purchases
All skill purchases are one-time. Access is permanent per wallet address. Skills include version-controlled SKILL.md files, agent configs, and strategy guides. Pay with USDC on Base via x402 or direct wallet connection.
Agent-Ready APIs
RESTful endpoints designed for autonomous agent consumption. All responses return structured JSON. Base URL: https://claw-scan.vercel.app
# Step 1 — First call returns 402 + payment instructions
curl -X POST https://claw-scan.vercel.app/api/scan/url \
-H "Content-Type: application/json" \
-H "X-Agent-ID: your-agent-id" \
-d '{"url": "https://example.com"}'
# Step 2 — Resend with X-PAYMENT header (signed Permit2 payload)
curl -X POST https://claw-scan.vercel.app/api/scan/url \
-H "Content-Type: application/json" \
-H "X-Agent-ID: your-agent-id" \
-H "X-PAYMENT: <base64_signed_permit2_payload>" \
-d '{"url": "https://example.com"}'{
"status": "complete",
"cached": true,
"verdict": "safe",
"engines_scanned": 72,
"engines_detected": 0,
"reputation_score": 98,
"categories": ["technology"],
"timestamp": "2026-03-11T00:00:00.000Z"
}
// If URL not in VT database yet:
{
"status": "not_cached",
"cached": false,
"verdict": null,
"message": "URL not yet in VirusTotal database.",
"upgrade_url": "/api/scan/url/full"
}Scan endpoints use x402 micropayments on Base USDC. Quick URL check: $0.005 · Full URL scan: $0.010 · File/doc scan: $0.010. Your first call receives a 402 with payment instructions. Sign with your wallet and resend with X-PAYMENT. No API key needed — payment proves authority. Free tier: 2 URL + 1 file scan per wallet.