WritersLogic Verifiable AI Agent Hub Sql Check API

The Sql Check API from WritersLogic Verifiable AI Agent Hub — 1 operation(s) for sql check.

GitHub OpenAPI

Operations 1

POST /api/v1/sql-check SQL guard: single statement, read-only, table allowlist #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/writerslogic-com:writerslogic-com-sql-check-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

writerslogic-com-sql-check-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: WritersLogic Verifiable AI Agent Hub Sql Check API
  version: 2.0.0
  description: Pay-per-call agents settled in USDC on Base via x402. Every response carries a signed provenance envelope.
  contact:
    name: WritersLogic
    url: https://writerslogic.com/agents
    email: agents@writerslogic.com
servers:
- url: https://agents.writerslogic.com
tags:
- name: Sql Check
paths:
  /api/v1/sql-check:
    post:
      operationId: sql_check
      summary: 'SQL guard: single statement, read-only, table allowlist'
      description: 'Checks one SQL string (up to 20000 characters; PostgreSQL, MySQL, SQLite or generic) before an agent executes it: exactly one statement, read-only (SELECT/VALUES/SHOW/EXPLAIN without side effects), and every table it reads or writes on a caller allowlist. Tokenizer-level: comments, string literals, quoted identifiers and dollar quoting cannot hide a second statement; reports statement kind, referenced tables after FROM/JOIN/INTO/UPDATE, SELECT INTO, locking reads, writable CTEs and known side-effect functions. Returns unsupported for constructs it cannot classify and for any transpile request; it is not a full SQL parser and does not prove a query safe (a user-defined function may write).


        Price: 0.005 USDC on Base (x402).'
      x-x402-price-usdc: '0.005'
      x-x402-amount: '5000'
      x-payment-info:
        protocols:
        - x402
        price:
          mode: fixed
          currency: USD
          amount: '0.005'
      x-audience: developer
      x-sample-url: https://agents.writerslogic.com/api/v1/samples/sql-check
      security:
      - x402: []
      - apiKey: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: false
              required:
              - sql
              properties:
                sql:
                  type: string
                  maxLength: 20000
                dialect:
                  type: string
                  enum:
                  - postgres
                  - mysql
                  - sqlite
                  - ansi
                  description: Lexical rules; default ansi.
                readOnly:
                  type: boolean
                  description: 'Default true: anything but a plain read fails.'
                allowedTables:
                  type: array
                  maxItems: 200
                  items:
                    type: string
                    maxLength: 200
                  description: 'Allowed tables, lower-cased match: ''users'', ''public.users'' or ''public.*''. Unqualified and qualified names are different entries.'
                transpileTo:
                  type: string
                  enum:
                  - postgres
                  - mysql
                  - sqlite
                  - bigquery
                  - snowflake
                  - tsql
                  description: Always answered unsupported.
            example:
              sql: SELECT u.id, o.total FROM users u JOIN orders o ON o.user_id = u.id WHERE u.id = $1
              dialect: postgres
              allowedTables:
              - users
              - orders
      responses:
        '200':
          description: Paid result with provenance
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: object
                    properties:
                      status:
                        type: string
                        enum:
                        - pass
                        - fail
                        - unknown
                        - unsupported
                        description: 'pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass.'
                      dialect:
                        type: string
                      readOnly:
                        type: boolean
                      statementCount:
                        type: integer
                      statements:
                        type: array
                        items:
                          type: object
                          properties:
                            index:
                              type: integer
                            kind:
                              type: string
                            readOnly:
                              type: boolean
                            tables:
                              type: array
                              items:
                                type: object
                                properties:
                                  name:
                                    type: string
                                  role:
                                    type: string
                                    enum:
                                    - read
                                    - write
                                    - ddl
                                  at:
                                    type: integer
                            ctes:
                              type: array
                              items:
                                type: string
                            functions:
                              type: array
                              items:
                                type: string
                            hazards:
                              type: array
                              items:
                                type: object
                                properties:
                                  rule:
                                    type: string
                                  detail:
                                    type: string
                                  at:
                                    type: integer
                            unsupported:
                              type: string
                      witnesses:
                        type: array
                        items:
                          type: object
                          properties:
                            ruleId:
                              type: string
                            detail:
                              type: string
                            path:
                              type: string
                              description: JSON pointer or dotted path into the input.
                            offset:
                              type: integer
                            index:
                              type: integer
                            expected:
                              description: What the rule required.
                            actual:
                              description: What the input had.
                      versions:
                        type: object
                        description: Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile).
                      limits:
                        type: array
                        items:
                          type: string
                      deterministic:
                        type: boolean
                        description: 'Always true: pure code, no model.'
                  _provenance:
                    type: object
                    description: C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance
                required:
                - data
                - _provenance
        '400':
          description: Invalid request (no payment consumed)
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  code:
                    type: string
        '401':
          description: Invalid X-API-KEY
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  code:
                    type: string
        '402':
          description: Payment required or invalid
          content:
            application/json:
              schema:
                type: object
                description: x402 v2 PaymentRequired (also base64 in the PAYMENT-REQUIRED header)
                properties:
                  x402Version:
                    type: integer
                  error:
                    type: string
                  code:
                    type: string
                  resource:
                    type: object
                  accepts:
                    type: array
                    items:
                      type: object
                  extensions:
                    type: object
        '502':
          description: Upstream failure; the payment is released or not settled
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  code:
                    type: string
      tags:
      - Sql Check
components:
  securitySchemes:
    x402:
      type: apiKey
      in: header
      name: PAYMENT-SIGNATURE
      description: x402 v2 payment payload (base64) sent after a 402 challenge
    apiKey:
      type: apiKey
      in: header
      name: X-API-KEY