---
title: "Scan a public GitHub x402 repository before launch"
method: POST
path: "/api/tools/github-x402-repo-scanner"
---

# Scan a public GitHub x402 repository before launch

`POST /api/tools/github-x402-repo-scanner`

Reads a bounded set of public repository evidence through GitHub's API and returns seven file-level checks with remediation. Sensitive-looking filenames are listed but not downloaded. The scanner does not execute code, inspect private repositories or git history, return repository contents, probe a deployed endpoint, or verify settlement.

## Request body

- object
  - `repository_url` string, uri, required

## Response `200`

Bounded repository evidence report

- object

## Other responses

- `400` — Invalid or private repository
- `404` — Public repository not found
- `429` — GitHub API capacity temporarily exhausted

---

[API](https://skmtc.net/ontarioprotocol/apis/ontario-protocol-x402-api.md) · [All operations](https://skmtc.net/ontarioprotocol/apis/ontario-protocol-x402-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ontarioprotocol/ontario-protocol-x402-api/versions/54384a1c4bf3/schema)