# B20 Config Audit — Transfer Policy Misconfiguration Linter

> B20 Config Audit — Transfer Policy Misconfiguration Linter is a paid API for AI agents from 402.com.tr, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Audits a B20 token's transfer-policy configuration for misconfigurations such as dangling scope bindings, ALWAYS_BLOCK rules, renounced allowlists, and live pauses that would silently brick token transfers.

## Facts

- Endpoint: GET https://402.com.tr/api/x402/b20-config-audit
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/b20-config-audit-transfer-policy-misconfiguration-linter-534faf32
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vZ9yznU_f66yRO8SHBPIC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability b20-config-audit-transfer-policy-misconfiguration-linter-534faf32
```

Example prompt: Can you lint the transfer-policy configuration for B20 token at address 0xAbC123... on Base and tell me if it's bricked, has any critical misconfigurations like dangling scope bindings or ALWAYS_BLOCK rules, and whether the token can actually move?

## When to prefer this

Use this endpoint when you need to pre-launch validate a B20 token's transfer policy before deployment, diagnose why transfers are silently failing or being denied, or guard holders and merchants against stuck funds caused by policy misconfigurations. Prefer this over generic ERC-20 tools when the token specifically uses the B20 standard with scope-based transfer policies.

## Known failure modes

- Invalid or non-B20 token address returns an error or empty audit result
- Non-existent contract address may return unresolvable state
- Network RPC errors on Base may cause lookup failures
- Token with no B20 policy schema may not be auditable

## How this service works

🆕 The B20 misconfiguration lint. Base's docs warn: a scope bound to a NON-EXISTENT allowlist silently denies EVERYONE — transfers brick. Audits every policy scope for dangling bindings, ALWAYS_BLOCK, renounced (frozen) lists and live pauses; verdict bricked / critical_misconfig / misconfigured / clean plus a can-this-token-even-move flag. Pre-launch lint for issuers, stuck-funds guard for holders and merchants.

## Output

Returns a structured audit verdict (bricked / critical_misconfig / misconfigured / clean) plus a boolean flag indicating whether the token can move, along with detailed findings on dangling scope bindings, ALWAYS_BLOCK entries, renounced or frozen allowlists, and any active transfer pauses across all policy scopes.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "pathParams": {
     "type": "object"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "address": {
       "type": "string",
       "description": "B20 token address"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/b20-config-audit-transfer-policy-misconfiguration-linter-534faf32/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from 402.com.tr](https://www.zero.xyz/host/402.com.tr/llms.txt)