# Base Approval Risk Feed

> Base Approval Risk Feed is a paid API for AI agents from xx402.icu, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Scans recent Base blockchain approval logs for a set of ERC20 token addresses and returns a ranked risk queue of suspicious or dangerous token approval events, spender watchlists, and token-level summaries.

## Facts

- Endpoint: GET https://xx402.icu/x402/api/base-approval-risk-feed
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/base-approval-risk-feed-eee3186f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_h_lLEl-ZsrdYA93TLKrKn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability base-approval-risk-feed-eee3186f
```

Example prompt: Scan the last 500 blocks on Base for approval risk events on USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) and WETH (0x4200000000000000000000000000000000000006) — give me up to 15 flagged approval rows and up to 3 tokens scanned, ranked by risk.

## When to prefer this

Use this endpoint when you need real-time, block-level scanning of ERC20 token approval events on Base specifically to detect risky or malicious spender authorizations. It is the right choice when monitoring a known set of token addresses for approval-based exploit risk, rather than general wallet or protocol-level analysis.

## Known failure modes

- Invalid or non-Base token address returns empty results or error
- window_blocks out of range (below 100 or above 3000) causes validation error
- limit or token_limit out of allowed bounds returns 400
- Payment not provided causes 402 Payment Required response
- Token with no recent approval activity returns empty queue

## How this service works

Paid x402 buyer market scout, x402 paid resource preflight, x402 seller visibility audit, Base actionable risk feed, liquidity exit risk alerts, pool launch risk feed, stable asset risk feed, contract control event feed, protocol outflow risk feed, yield pool allocation risk feed, protocol fee quality feed, token watchlist decision packet, wallet watchlist decision packet, approval risk feed, ranked DeFi review queues with incident history, onchain risk decision packet, promoted token campaign decision packet, large transfer decision packet, token candidate screening decision radar, DEX pair anomaly decision radar, wallet safety decision packet, counterparty flow, allowance, approval exposure, DEX pair routing risk, token trade safety, token liquidity, token flow, holder concentration, contract controls, batch token screening decision packets, token diligence, and BTC15 prediction-market microstructure, execution-friction, calibration-slice, recent market tape, resolved feature sample, and threshold-pressure packets for agents and risk tools.

## Output

Returns a JSON object with: a risk summary, an approval_risk_queue (ranked list of suspicious approval events), a spender_watchlist of high-risk spender contracts, per-token summaries, and source/data freshness status.

## Response schema (JSON Schema)

```json
{
 "keys": [
  "summary",
  "approval_risk_decision",
  "priority_queue",
  "best_next_products",
  "risk_breakdown",
  "review_queue",
  "avoid_queue",
  "approval_risk_queue",
  "revocation_priority_queue",
  "spender_watchlist",
  "token_summaries",
  "bucket_counts",
  "source_status",
  "sources"
 ],
 "type": "json"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/base-approval-risk-feed-eee3186f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from xx402.icu](https://www.zero.xyz/host/xx402.icu/llms.txt)