# Apollo Contract Scan

> Apollo Contract Scan is a paid API for AI agents from apollo-contract-scan.vercel.app, paid per call via x402, $0.5/call, status unknown (last checked 2026-09-14).

Runs a heuristic pattern-level red-flag analysis on a Solidity smart contract (by address or raw source) to surface pre-audit security risks

## Facts

- Endpoint: POST https://apollo-contract-scan.vercel.app/scan
- Price: $0.5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/apollo-contract-scan-ffa7ba99
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Y_mnC3H53VhtQqAq5SKM7

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability apollo-contract-scan-ffa7ba99 -d '<json body>'
```

Example prompt: Can you do a quick heuristic security scan on this Solidity contract at address 0x1234abcd...5678 — I need to know if there are any obvious red flags before I interact with it?

## When to prefer this

Choose this endpoint when you need a fast, low-cost heuristic pre-audit of a Solidity smart contract — either by on-chain address (with Sourcify verification) or raw source — and want to surface obvious red flags before committing to a full formal security audit. Ideal for DeFi due diligence, pre-deployment sanity checks, or triage before engaging a professional auditor.

## Known failure modes

- Contract address not found or not verified on Sourcify — scan cannot proceed without source
- Invalid or unparseable Solidity source code submitted
- Network timeout reaching Sourcify for source retrieval
- No red flags found does not guarantee contract safety — heuristic scan has limited scope
- Payment failure or insufficient USDC balance blocks request

## How this service works

Heuristic Solidity risk scan: pattern-level red flags for a contract address (verified source via Sourcify) or raw source. Honest scoping: a fast pre-audit, not a formal security audit.

## Output

A structured heuristic report listing pattern-level red flags and risk indicators found in the Solidity contract, sourced from verified on-chain code via Sourcify or directly from raw source input. Results represent a fast pre-audit scan, not a comprehensive formal security audit.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/apollo-contract-scan-ffa7ba99/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from apollo-contract-scan.vercel.app](https://www.zero.xyz/host/apollo-contract-scan.vercel.app/llms.txt)