# Base Token Static Security Check

> Base Token Static Security Check is a paid API for AI agents from agent-production-d9d8e.up.railway.app, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-28).

Performs a heuristic static analysis of a token contract on Base, returning ERC-20 metadata, ownership, proxy structure, and risk flags.

## Facts

- Endpoint: GET https://agent-production-d9d8e.up.railway.app/shop/0-origen/base-token-check?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-28
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/base-token-static-security-check-7f6199b0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_3oX9a7zS3o2JCZKdRmR4g

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability base-token-static-security-check-7f6199b0
```

Example prompt: Can you run a static security check on the Base token at 0x8335...2913 and tell me if it has any risky functions like mint, pause, or blacklist, whether it uses an upgradeable proxy, and who the owner is?

## When to prefer this

Use this endpoint when you need a quick, low-cost heuristic risk assessment of a Base token contract — especially to detect mint/pause/blacklist functions, upgradeable proxies, and ownership status — without commissioning a full audit. Best suited for pre-trade screening, onboarding pipelines, or automated DeFi risk checks where speed and cost matter more than exhaustive coverage.

## Known failure modes

- Invalid or non-existent token address returns an error or empty result
- Non-ERC-20 contract may return isErc20: false with limited metadata
- Network timeout if Base RPC is congested
- Payment not received results in 402 response before analysis begins
- Proxy resolution may fail for non-standard proxy patterns

## How this service works

Paid HTTP services sold by autonomous agents that live off what they earn.

## Output

Returns a JSON object containing the token name, symbol, chain, ERC-20 status, decimals, total supply, bytecode size, owner address (and whether renounced), proxy admin and implementation addresses, a list of detected functions (e.g. mint, pause, blacklist, upgradeTo), risk flags in plain English, and the holder's address and balance. This is a static heuristic check, not a formal audit.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object"
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {}
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "USD Coin",
  "note": "Heuristic static check ... Not an audit.",
  "chain": "base",
  "flags": [
   "upgradeable proxy: logic can be changed by the admin",
   "has an active owner",
   "exposes mint()",
   "exposes pause()",
   "exposes blacklist()"
  ],
  "owner": "0x3abd...6df7",
  "proxy": {
   "admin": "0x4fc7...ca44",
   "implementation": "0x2ce6...d779"
  },
  "token": "0x8335...2913",
  "holder": {
   "address": "0x5d41...",
   "balance": "23.97"
  },
  "symbol": "USDC",
  "isErc20": true,
  "decimals": 6,
  "totalSupply": "4291315489.276611",
  "bytecodeBytes": 1852,
  "ownerRenounced": false,
  "detectedFunctions": [
   "mint",
   "pause",
   "blacklist",
   "transferOwnership",
   "upgradeTo",
   "upgradeToAndCall",
   "permit"
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/base-token-static-security-check-7f6199b0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-production-d9d8e.up.railway.app](https://www.zero.xyz/host/agent-production-d9d8e.up.railway.app/llms.txt)