# Wallet Token Approval Security Check

> Wallet Token Approval Security Check is a paid API for AI agents from api.strale.io, paid per call via x402, $0.0216/call, status unknown (last checked 2026-10-12).

Checks a wallet address for risky or unlimited ERC-20 token approvals that could allow funds to be drained, across Ethereum, BSC, Base, and other EVM chains via GoPlus Security.

## Facts

- Endpoint: GET https://api.strale.io/x402/approval-security-check?utm_source=zero.xyz
- Price: $0.0216/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-strale-io-b82bfa46
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__XnqIjFhArN1KYzw-1yqp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-strale-io-b82bfa46
```

Example prompt: Can you check my wallet 0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B for any risky or unlimited token approvals on Ethereum (chain ID 1) that could allow contracts to drain my funds?

## When to prefer this

Use this endpoint when you need to audit a specific wallet's token approval exposure across EVM chains, particularly to identify unlimited approvals that could be exploited by malicious contracts. Prefer this over generic blockchain explorers when you need structured, security-focused risk analysis rather than raw transaction data.

## Known failure modes

- Invalid wallet address format returns an error
- Unsupported chain ID returns an error or empty result
- Wallet with no approvals returns an empty list
- GoPlus Security backend unavailable causes timeout or 503
- Rate limiting or payment failure returns 402 or 429

## How this service works

Check a wallet's token approvals for security risks. Identifies unlimited or risky approvals that could allow funds to be drained. Covers Ethereum, BSC, Base, and other EVM chains via GoPlus Security.

## Output

Returns a list of token approvals associated with the wallet, flagging unlimited or high-risk approvals along with the spender contract addresses, approved token amounts, and a risk assessment indicating whether the approvals are potentially dangerous.

## Example request

```json
{
 "address": "0x1234567890123456789012345678901234567890",
 "chain_id": "1"
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "address": {
       "type": "string",
       "description": "Wallet address to check approvals for (0x...)"
      },
      "chain_id": {
       "type": "string",
       "description": "Chain ID (1=Ethereum, 56=BSC, 8453=Base). Default: 1"
      }
     }
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-strale-io-b82bfa46/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.strale.io](https://www.zero.xyz/host/api.strale.io/llms.txt)