
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@true402.dev/ai-sdk
Advanced tools
true402 tools for the Vercel AI SDK — pay-per-call on-chain rug/honeypot & address safety for Base AI agents over x402 (USDC, no account, no API key).
true402 tools for the Vercel AI SDK — give your Base agent pay-per-call on-chain safety over x402: rug/honeypot checks, address safety, and deployer reputation. No account, no API key — the wallet is the identity (USDC on Base, gas sponsored by the facilitator).
npm i @true402.dev/ai-sdk ai
import { generateText } from 'ai';
import { true402Tools } from '@true402.dev/ai-sdk';
const { text } = await generateText({
model,
prompt: 'Is 0x4ed4…Efed safe to ape into?',
tools: true402Tools({ payerPrivateKey: process.env.PAYER_PRIVATE_KEY! }),
});
The model can call, before it trades:
| Tool | What it does | ~price |
|---|---|---|
true402_token_report | Composite avoid / caution / ok verdict for a Base ERC-20 (buy/sell honeypot sim + liquidity + ownership + rug activity) | $0.01 |
true402_token_safety | Structural safety score 0–100 + flags | $0.005 |
true402_address_safety | Profile + risk for any address before you send/approve/call it (proxy detection) | $0.005 |
true402_deployer_check | Deployer reputation — who made the token + their track record | $0.008 |
payerPrivateKey is a Base wallet holding a little USDC. Without it the stalls still return their HTTP 402 price, so the agent can decide. Override baseUrl / rpcUrl in the options if self-hosting.
Powered by true402 — the machine-native x402 marketplace on Base. Browse every stall at /catalog.
FAQs
true402 tools for the Vercel AI SDK — pay-per-call on-chain rug/honeypot & address safety for Base AI agents over x402 (USDC, no account, no API key).
The npm package @true402.dev/ai-sdk receives a total of 191 weekly downloads. As such, @true402.dev/ai-sdk popularity was classified as not popular.
We found that @true402.dev/ai-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.