# BitBooth Approval Safety

> BitBooth Approval Safety is a paid API for AI agents from app.heinrichstech.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Performs a heuristic risk assessment of an ERC-20 approve(spender, amount) call before signing, flagging unlimited approvals, fresh contracts, EOA spenders, copycat tokens, and known-malicious addresses.

## Facts

- Endpoint: POST https://app.heinrichstech.com/v1/cdp/approval-safety
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bitbooth-approval-safety-8cba3567
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ujzGwMLkTmx4sXPmJNLEU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bitbooth-approval-safety-8cba3567 -d '<json body>'
```

Example prompt: Before I sign this token approval, check if it's safe: the spender is 0xABC123...def and I'm being asked to approve an unlimited amount of USDC (0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48) on Ethereum mainnet.

## When to prefer this

Use this endpoint when an AI agent or wallet automation needs a programmatic safety gate before submitting any ERC-20 approve() transaction on-chain. It is especially valuable for catching unlimited approvals, unverified or newly deployed spender contracts, EOA spenders, and known-malicious addresses — all without requiring SaaS API keys. Prefer this over a full wallet risk report when you only need to screen a single pending approval quickly and cheaply ($0.05) rather than auditing an entire wallet history.

## Known failure modes

- Invalid or malformed Ethereum address for spender or token returns a 400 validation error
- Unknown or unsupported chain ID may result in incomplete heuristic analysis
- Contract address lookup may miss very recently deployed contracts not yet indexed
- Payment of 0.05 USDC not provided or x402 payment header missing causes 402 rejection
- Network timeouts during on-chain lookups may delay or fail the response

## How this service works

BitBooth Approval Safety: pay 0.05 USDC, get a structured risk assessment of an ERC-20 approve(spender, amount) before you sign it. Catches unlimited approvals to fresh contracts, EOA spenders, copycat tokens, and known-malicious contracts. Built for AI agents that handle wallets and need a programmatic gate before any token approval. Heuristic-based, no SaaS keys, returns within seconds.

## Output

A structured JSON risk assessment including an overall risk level (e.g. low/medium/high/critical), a list of specific risk flags triggered (such as unlimited approval, fresh contract, EOA spender, known-malicious address, copycat token), and a recommendation on whether to proceed with signing the approval.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bitbooth-approval-safety-8cba3567/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from app.heinrichstech.com](https://www.zero.xyz/host/app.heinrichstech.com/llms.txt)