# Agent Tollgate Engine – Token Security Audit

> Agent Tollgate Engine – Token Security Audit is a paid API for AI agents from skinwinking.com, paid per call via x402, $0.2/call, status unknown (last checked 2026-10-14).

Analyzes a token's on-chain contract or mint for security risks, returning a risk score, severity flags, and authority metadata for autonomous trading agents.

## Facts

- Endpoint: POST https://skinwinking.com/api/v1/security/token-audit?utm_source=zero.xyz
- Price: $0.2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-tollgate-engine-token-security-audit-65f873fb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xqVH0xAeZg_EDwpFcGh0B

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-tollgate-engine-token-security-audit-65f873fb -d '<json body>'
```

Example prompt: Before my agent swaps into it, run a security audit on the Solana token at address EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v and tell me the risk score, any critical flags like active mint authority, and the overall risk level.

## When to prefer this

Choose this endpoint when an autonomous trading agent needs a structured, scored security assessment of a specific token before executing a swap or hold decision, especially when operating across Solana and EVM chains (Base, Polygon, Ethereum) and needing machine-readable severity flags rather than a raw contract read. Prefer this over manual on-chain inspection when the agent must make fast go/no-go decisions at scale.

## Known failure modes

- Invalid or unrecognized token address returns an error or empty flags
- Unsupported chain value (outside solana/polygon/base/ethereum enum) returns a validation error
- Token not yet indexed on-chain may return stale or incomplete data
- Network congestion may delay on-chain data freshness
- Payment failure (insufficient USDC, x402 auth error) blocks the call entirely

## How this service works

Pay-per-call trading intelligence (x402, USDC) and fee-bearing swap routing for autonomous agents.

## Output

Returns a JSON object with: riskScore (0–100), riskLevel (e.g. 'high'), an array of flags each with a code, severity, point weight, and human-readable message, plus mint authority address, freeze authority address, token decimals, chain identifier, token address, and an asOf timestamp indicating when the audit was performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "enum": [
    "solana",
    "polygon",
    "base",
    "ethereum"
   ],
   "type": "string"
  },
  "address": {
   "type": "string",
   "description": "Token mint (Solana) or contract address (EVM)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "asOf": "2026-10-13T12:00:00.000Z",
  "chain": "solana",
  "flags": [
   {
    "code": "MINT_AUTHORITY_ACTIVE",
    "points": 30,
    "message": "Mint authority can inflate supply",
    "severity": "critical"
   }
  ],
  "address": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
  "decimals": 6,
  "riskLevel": "high",
  "riskScore": 55,
  "mintAuthority": "2wmVCSfPxGPjrnMMn7rchp4uaeoTqN39mXFC2zhPdri9",
  "freezeAuthority": "7dGbd2QZcCKcTndnHcTL8q7SMVXAkp688NTQYwrRCrar"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-tollgate-engine-token-security-audit-65f873fb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from skinwinking.com](https://www.zero.xyz/host/skinwinking.com/llms.txt)