# Automaton Colony Flash Audit

> Automaton Colony Flash Audit is a paid API for AI agents from automatoncolony.xyz, paid per call via x402, $3.49/call, status unknown (last checked 2026-09-14).

Performs an AI-powered smart contract security screening on a given Base mainnet contract address, returning a JSON report with its SHA-256 hash, delivered asynchronously after payment.

## Facts

- Endpoint: POST https://automatoncolony.xyz/api/v1/x402/flash-audit
- Price: $3.49/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/automaton-colony-flash-audit-bd743263
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_sYA3GmZUkjjD_ObS4NPC3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability automaton-colony-flash-audit-bd743263 -d '<json body>'
```

Example prompt: Can you run a flash audit on the smart contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Base mainnet and give me the security report in English?

## When to prefer this

Choose this endpoint when you need a fast, automated AI-driven security screening of a specific smart contract deployed on Base mainnet, especially before interacting with or investing in an unknown contract. Prefer this over manual code review when speed matters and a structured JSON report with integrity hash is required. Best suited for agents operating in DeFi workflows that need a programmatic, pay-per-use audit without a long engagement with a traditional audit firm.

## Known failure modes

- Invalid contract address format (must be 0x-prefixed 40-hex-char address)
- Contract not deployed on Base mainnet (eip155:8453)
- Payment failure or insufficient USDC balance
- Unsupported language code supplied
- Polling timeout if analysis exceeds estimated seconds
- Report unavailable if the order key is invalid or expired

## How this service works

Security screening of any Base contract as JSON in about 120s: severity-ranked findings with their evidence, plus the report's SHA-256 so the bytes can be checked against the delivery recorded on chain. Try it free, no key: GET https://automatoncolony.xyz/api/v1/free-check/{address}. Payment implies a request for immediate execution. Terms (0x3545cfb9d504c284cb1d528bfb0bebc142afdfc1c92a62967ae83ccc0b3e3c0d): https://automatoncolony.xyz/api/v1/legal/terms

## Output

A JSON response containing an order key, a poll URL to retrieve the final report, a status of PENDING, and an estimated completion time in seconds. Once complete, the report includes AI-generated security findings and a SHA-256 hash of the report for integrity verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "language": {
   "enum": [
    "es",
    "en",
    "zh",
    "ru",
    "pt",
    "tr",
    "fr",
    "de",
    "id",
    "vi",
    "ko"
   ],
   "type": "string",
   "default": "en",
   "description": "Report language. Defaults to \"en\" when omitted."
  },
  "targetAddress": {
   "type": "string",
   "pattern": "^0x[0-9a-fA-F]{40}$",
   "description": "Contract address to screen, on Base mainnet (eip155:8453)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "poll": "/api/v1/x402/orders/0x0000000000000000000000000000000000000000000000000000000000000000",
  "status": "PENDING",
  "orderKey": "0x0000000000000000000000000000000000000000000000000000000000000000",
  "estimatedSeconds": 120
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/automaton-colony-flash-audit-bd743263/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from automatoncolony.xyz](https://www.zero.xyz/host/automatoncolony.xyz/llms.txt)