# Focused technical checks

One-time private reports. Review the selected input example and service scope before purchase. No account is required for wallet API purchases. Each completed result is available privately for 30 days.

- **Webhook Event Check: $29.00 USD.** Review supplied event envelopes, payload structure, repeated identities and timestamp order. Structured CloudEvents 1.0 JSON only; optional bounded structural JSON Schema. No endpoint calls, signature validation or delivery guarantees. [Input schema](/agent/webhook-event-check.input.schema.json) · [Example request](/agent/webhook-event-check.request.example.json) · [Example report](/agent/webhook-event-check.result.example.json)

- **Software Dependency Manifest Check: $49.00 USD.** Check a CycloneDX manifest for schema errors, missing metadata and inconsistent component references. CycloneDX 1.6 or 1.7 JSON. No software scan, vulnerability lookup, license opinion or security certification. [Input schema](/agent/software-dependency-manifest-check.input.schema.json) · [Example request](/agent/software-dependency-manifest-check.request.example.json) · [Example report](/agent/software-dependency-manifest-check.result.example.json)

- **Schedule & Timezone Check: $19.00 USD.** Preview cron run times in an IANA time zone and review daylight-saving transitions. Strict five-field cron with explicit start offset, 1–100 occurrences and a ten-year preview span. Results describe the selected engine; no schedule is activated. [Input schema](/agent/schedule-timezone-check.input.schema.json) · [Example request](/agent/schedule-timezone-check.request.example.json) · [Example report](/agent/schedule-timezone-check.result.example.json)

- **API Error Response Check: $29.00 USD.** Review supplied HTTP error examples for problem-details and schema consistency. RFC 9457 JSON examples, with an optional bounded structural body schema. Optional standard fields and extension members are accepted. No live API test. [Input schema](/agent/api-error-response-check.input.schema.json) · [Example request](/agent/api-error-response-check.request.example.json) · [Example report](/agent/api-error-response-check.result.example.json)

- **OpenAPI Overlay Preview: $39.00 USD.** Preview an OpenAPI Overlay and receive the changed document, action trace and structural differences. Overlay 1.2.0, JSON or YAML text, supported bounded JSONPath, sequential merge/remove/copy and same-document reusable actions. No external references, publication or full OpenAPI validation. [Input schema](/agent/openapi-overlay-preview.input.schema.json) · [Example request](/agent/openapi-overlay-preview.request.example.json) · [Example report](/agent/openapi-overlay-preview.result.example.json)

Inputs use structured JSON; Overlay source documents may also be YAML 1.2 text within the request. The input data profile accepts up to 36,000 UTF-8 bytes, 6,000 JSON nodes and 24 nesting levels; the complete browser checkout request must fit its existing 40,000-byte envelope. Unsupported data is rejected before an order is created. These are processing specifications, not contribution limits.

The optional payload/body schema uses a structural JSON Schema 2020-12 profile: type, properties, required, additionalProperties, items, minItems/maxItems, minLength/maxLength, minimum/maximum, enum/const, allOf/anyOf/oneOf/not, title and description. References, patterns, formats and other keywords are rejected. This prevents a partial check from being presented as full schema validation.

CloudEvents uses the structured JSON 1.0 format. Schema checks do not verify webhook authenticity. CycloneDX uses bundled 1.6/1.7 JSON schemas; it does not query vulnerability databases. Cron uses strict five-field numeric expressions and an explicit start with UTC offset; the report identifies its preview engine and daylight-saving policy. Overlay uses 1.2.0 with bounded RFC9535 JSONPath, no external references, regex functions, aliases or overlapping ancestor/descendant targets. No customer URI is fetched.

Choose the catalog's available browser checkout or wallet API route. An unpaid quote is not a completed purchase; retrieve results using the private access supplied by that route. [Catalog](https://gatewayinformationgroup.com/catalog) · [Developer guide](https://gatewayinformationgroup.com/developers)