# ChipScan Token Security Audit API

> ChipScan Token Security Audit API is a paid API for AI agents from api.chipscan.xyz, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-11).

Performs a fast automated security audit of a crypto token, flagging risks and vulnerabilities

## Facts

- Endpoint: POST https://api.chipscan.xyz/v1/audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/chipscan-token-security-audit-api-c5db6f0a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-U1AxU0b1sZI2jIgx0tvS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability chipscan-token-security-audit-api-c5db6f0a -d '<json body>'
```

Example prompt: Can you run a quick security audit on the token at contract address 0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 on Ethereum and tell me if it has any red flags like honeypot traps or malicious functions?

## When to prefer this

Choose ChipScan when you need a fast, low-cost ($0.01) automated token security audit without waiting for a full manual smart contract review. Best suited for quick pre-investment checks, launchpad screening, or flagging obviously malicious tokens at scale. Not a substitute for a comprehensive professional audit of production-grade contracts.

## Known failure modes

- Invalid or unrecognized contract address returns an error
- Unsupported blockchain network not covered by the scanner
- Contract not yet indexed or too recently deployed
- Rate limiting if too many audits are requested simultaneously
- Ambiguous results for heavily proxied or upgradeable contracts

## How this service works

Meme-token security audits and chip-structure lifecycle analysis, sold per-call to AI agents via x402. USDC on Base. No account, no API key.

## Output

A security audit report for the specified token contract, including a risk score, identified vulnerabilities (e.g. honeypot detection, mint functions, ownership concentration, blacklist functions, proxy patterns), and a safety assessment summary.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "chain",
  "address"
 ],
 "properties": {
  "chain": {
   "enum": [
    "sol",
    "bsc",
    "base",
    "eth"
   ],
   "type": "string"
  },
  "address": {
   "type": "string",
   "description": "Token contract address"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "verdict",
  "security",
  "token"
 ],
 "properties": {
  "chain": {
   "type": "string"
  },
  "token": {
   "type": "object",
   "properties": {
    "name": {
     "type": [
      "string",
      "null"
     ]
    },
    "price": {
     "type": "number"
    },
    "symbol": {
     "type": [
      "string",
      "null"
     ]
    },
    "liquidity": {
     "type": [
      "number",
      "null"
     ]
    },
    "market_cap": {
     "type": [
      "number",
      "null"
     ]
    },
    "holder_count": {
     "type": [
      "number",
      "null"
     ]
    }
   }
  },
  "address": {
   "type": "string"
  },
  "service": {
   "type": "string"
  },
  "verdict": {
   "enum": [
    "clean",
    "warning",
    "danger"
   ],
   "type": "string"
  },
  "endpoint": {
   "type": "string"
  },
  "security": {
   "type": "object",
   "description": "Raw security fields: honeypot, open_source, owner_renounced, renounced_mint, renounced_freeze_account, buy_tax, sell_tax, rug_ratio, top_10_holder_rate, creator_token_status, sniper_count, burn_status"
  },
  "warnings": {
   "type": "array",
   "items": {
    "type": "string"
   }
  },
  "red_flags": {
   "type": "array",
   "items": {
    "type": "string"
   }
  },
  "kol_holders": {
   "type": "number"
  },
  "snapshot_at": {
   "type": "number",
   "description": "Unix seconds"
  },
  "smart_money_holders": {
   "type": "number"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/chipscan-token-security-audit-api-c5db6f0a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.chipscan.xyz](https://www.zero.xyz/host/api.chipscan.xyz/llms.txt)