80trust / 100
Container Pull Preflight
by Forest Containers in Weather & location
x402 APIPassing, checked 1 h ago
Preflight one anonymously readable OCI image for a requested target platform before pull or deploy. Forest resolves the supplied tag once, selects one exact multi-arch child manifest when possible, reports that immutable manifest declared config/layer size, and checks bounded OCI referrer presence. No layers are downloaded and referrer presence is never treated as signature, SBOM, attestation or vulnerability verification. Base mainnet USDC
POST https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/container/pull-preflight
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 180 ms typical, 235 ms slowest 5%
- Last check
- 1 h ago
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X POST "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/container/pull-preflight" \
-H "content-type: application/json" \
-d '{"image":"registry.k8s.io/pause","platform":{"arch":"amd64","os":"linux"},"reference":"3.10"}'import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fhttp--forest-gas-station-mainnet--lcjl27p8lmjs.code.run%2Fcontainer%2Fpull-preflight
const res = await pay("https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/container/pull-preflight", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({"image":"registry.k8s.io/pause","platform":{"arch":"amd64","os":"linux"},"reference":"3.10"}),
});
console.log(await res.json());Example input
{
"image": "registry.k8s.io/pause",
"platform": {
"arch": "amd64",
"os": "linux"
},
"reference": "3.10"
}Example output
{
"capability": "container.pull-preflight",
"data": {
"image": "example",
"index_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
"platform_supported": false,
"reference": "example",
"referrers": {
"api_supported": false,
"artifact_types": [],
"count": 0,
"items": [],
"returned_count": 0,
"truncated": false
},
"requested_platform": {
"arch": "example",
"os": "example"
},
"selected_manifest_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
"selected_manifest_media_type": "example",
"size": {
"config_bytes": 0,
"layer_bytes": 0,
"layer_count": 0,
"total_declared_bytes": 0
},
"source": "OCI Distribution API",
"state": "ready",
"verification": {
"sbom_validated": false,
"signature_verified": false,
"vulnerability_scan_performed": false
}
},
"meta": {
"cache": "miss",
"checked_at": "2026-01-01T00:00:00.000Z",
"duration_ms": 0,
"provider": "oci-distribution"
},
"ok": true,
"version": "1"
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 1 h ago | Passed | 402 | 38 ms | $0.005 |
| 5 h ago | Passed | 402 | 180 ms | $0.005 |
| 9 h ago | Passed | 402 | 118 ms | $0.005 |
| 12 h ago | Passed | 402 | 244 ms | $0.005 |
| 16 h ago | Passed | 402 | 231 ms | $0.005 |
| 20 h ago | Passed | 402 | 222 ms | $0.005 |
| 23 h ago | Passed | 402 | 39 ms | $0.005 |
| 28 h ago | Passed | 402 | 235 ms | $0.005 |