# Cairnworks Verify — Control Audit

> Cairnworks Verify — Control Audit is a paid API for AI agents from cairnworks-verify.run402.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-28).

Audits on-chain contract control structures (Safe multisig ownership, proxy detection, code size) for one or more addresses at a specific block on Base or BSC

## Facts

- Endpoint: POST https://cairnworks-verify.run402.com/control-audit?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-28
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cairnworks-verify-control-audit-c84de955
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4py-v3xHjfJi2cTmCKH3y

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cairnworks-verify-control-audit-c84de955 -d '<json body>'
```

Example prompt: Can you audit the contract control structure for 0x60d4...9a0b on Base at block 52784802 — specifically whether it's a Gnosis Safe, who the owners are, and if it's a proxy contract?

## When to prefer this

Choose this endpoint when you need cryptographically-evidenced, signed audit results for contract control structures (Safe multisig ownership, proxy detection) on Base or BSC without requiring an API key or account. It is particularly useful for agents that need to verify on-chain governance or treasury control at a specific historical block and want a tamper-evident SHA-256 digest of the evidence. Prefer over generic block explorers when you need structured JSON output with Safe-specific metadata and proxy detection in a single call.

## Known failure modes

- Invalid address format (not 0x + 40 hex chars) returns validation error
- Block number not yet finalized on the requested chain
- More than 10 addresses in the batch exceeds maxItems limit
- Unsupported chain value outside base/bsc/base-sepolia enum
- Payment not received or insufficient USDC — x402 payment required before response
- RPC timeout or node unavailability for historical block queries

## How this service works

cairnworks verify — fixed-price x402 (USDC on Base) checks for agent payouts: verify a Base/BSC transaction receipt and ERC-20 transfers (0.01), audit a URL's status/redirects/paywall flags (0.01), token holder and treasury share audit at a block (0.02), batch-verify up to 10 payout receipts (0.02). No account, no API key; every response is signed JSON with a sha256 evidence digest. Free sample outputs at /samples (no payment).

## Output

Returns a signed JSON object with kind 'control_audit' containing the resolved block hash and number, chain and chain ID, and per-address details including whether a Gnosis Safe was detected, the list of Safe owners, the Safe signing threshold, whether a proxy (EIP-1167 minimal proxy) was detected, and the contract code size in bytes. Every response includes a SHA-256 evidence digest for tamper-evidence verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "block": {
   "type": [
    "integer",
    "string"
   ]
  },
  "chain": {
   "enum": [
    "base",
    "bsc",
    "base-sepolia"
   ],
   "type": "string"
  },
  "addresses": {
   "type": "array",
   "items": {
    "type": "string",
    "pattern": "^0x[0-9a-fA-F]{40}$"
   },
   "maxItems": 10,
   "minItems": 1
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "kind": "control_audit",
  "block": {
   "hash": "0x…",
   "resolved": 52784802
  },
  "chain": "base",
  "chain_id": 8453,
  "addresses": [
   {
    "kind": "contract",
    "address": "0x60d4…9a0b",
    "control": {
     "safe_owners": [
      "0x…"
     ],
     "safe_detected": true,
     "safe_threshold": 2
    },
    "proxy_171": true,
    "code_size_bytes": 171
   }
  ],
  "evidence_sha256": "…"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cairnworks-verify-control-audit-c84de955/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cairnworks-verify.run402.com](https://www.zero.xyz/host/cairnworks-verify.run402.com/llms.txt)