# AgentBIT Contract Risk Audit

> AgentBIT Contract Risk Audit is a paid API for AI agents from agentbit.app, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-23).

Audits a Base blockchain smart contract or token address for security risks, returning a risk assessment for AI agents.

## Facts

- Endpoint: POST https://agentbit.app/v1/risk/contract-audit?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-23
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentbit-contract-risk-audit-89bfb673
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZUAqMQCVkHo1Y6HusPbUl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentbit-contract-risk-audit-89bfb673 -d '<json body>'
```

Example prompt: Can you run a security audit on the Base contract at 0x4200000000000000000000000000000000000006 and tell me if there are any risk flags before I interact with it?

## When to prefer this

Choose this endpoint when an AI agent needs a quick, pay-per-call security risk assessment of a specific smart contract or token on the Base network before executing a transaction, providing liquidity, or making an investment decision. Prefer it over generic blockchain explorers when you need a structured, agent-readable risk verdict rather than raw on-chain data. Ideal for DeFi automation workflows where screening contracts at scale without API key management is a priority.

## Known failure modes

- Invalid address format (not 0x + 40 hex chars) returns validation error
- Address not found on Base network returns empty or error response
- Contract is an EOA (externally owned account) rather than a contract
- Rate limiting or payment failure via x402 protocol
- Unverified or very new contracts may have limited audit data
- Network timeout if Base RPC is slow

## How this service works

A structured token/contract risk report for a Base contract: a normalized risk score, a pass/warn/fail checklist (bytecode present, sanctions, verified source, ownership, holder concentration) and a single verdict. $0.05.

## Output

A JSON object containing a risk assessment for the given Base smart contract address, likely including risk score, identified vulnerabilities or red flags, contract characteristics, and security findings relevant to agent decision-making about whether to interact with the contract.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "address": {
   "type": "string",
   "description": "Token/contract address on Base (0x + 40 hex)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {}
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentbit-contract-risk-audit-89bfb673/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentbit.app](https://www.zero.xyz/host/agentbit.app/llms.txt)