# Address Security Check — EVM Wallet Risk Screening

> Address Security Check — EVM Wallet Risk Screening is a paid API for AI agents from the-stall.intuitek.ai, paid per call via x402, $0.136/call, status unknown (last checked 2026-09-15).

Returns security risk assessment for an EVM wallet address on a specified blockchain, flagging malicious or high-risk activity.

## Facts

- Endpoint: GET https://the-stall.intuitek.ai/cap/address-security
- Price: $0.136/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/address-security-check-evm-wallet-risk-screening-e18ea682
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rEKgR6NGJnhZCpQaXWI9K

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability address-security-check-evm-wallet-risk-screening-e18ea682
```

Example prompt: Before I send funds, can you check if this Ethereum wallet 0x4e9ce36e442e55ecd9025b9a6e0d88485d628a67 is flagged for any malicious activity or security risks?

## When to prefer this

Use this endpoint when you need a quick, pay-per-call security screening of an EVM wallet address across major chains (Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche) without setting up API keys or accounts. Ideal for pre-transaction due diligence, fraud detection pipelines, or agent workflows that need to gate actions based on address trustworthiness. Prefer this over broader on-chain analytics tools when you only need a simple risk/safety signal for a single address.

## Known failure modes

- Invalid or malformed address format (non-0x address) returns error
- Unsupported chain name or chain ID returns error
- Address not found on the specified chain may return empty or neutral result
- Payment failure via x402/USDC halts the request
- Rate limiting or upstream data provider unavailability

## How this service works

Wallet/address security and reputation check. Detects phishing, sanctions, cybercrime, money laundering, dark-web activity, and blacklisted wallets using GoPlus Labs + SlowMist + BlockSec data. Returns risk score (0-100) and per-flag breakdown. Supports Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche, and more.

## Output

A security assessment of the given EVM wallet address, including risk flags, malicious activity indicators, blacklist status, and possibly a risk score or classification — helping determine whether it is safe to interact with the address.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "chain": "ethereum",
   "address": "0x1234567890123456789012345678901234567890"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "required": {
   "type": "string"
  },
  "properties": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/address-security-check-evm-wallet-risk-screening-e18ea682/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from the-stall.intuitek.ai](https://www.zero.xyz/host/the-stall.intuitek.ai/llms.txt)
