# Coin Railz Smart Contract Security Scanner

> Coin Railz Smart Contract Security Scanner is a paid API for AI agents from coinrailz.com, paid per call via x402, $1/call, status unknown (last checked 2026-09-15).

Performs a basic smart contract security scan returning a safety score and vulnerability checks for a given contract

## Facts

- Endpoint: POST https://coinrailz.com/x402/contract-scan
- Price: $1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/coin-railz-smart-contract-security-scanner-708b85f4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_S31uxPaJjmVrICZGU1dcg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability coin-railz-smart-contract-security-scanner-708b85f4 -d '<json body>'
```

Example prompt: Before I interact with this DeFi protocol, can you run a security scan on the smart contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum and tell me the safety score and any vulnerabilities found?

## When to prefer this

Use this endpoint when you need a quick, affordable ($1 USDC) automated security assessment of a smart contract before interacting with it, approving tokens, or investing in a DeFi protocol. It is best suited for basic vulnerability screening rather than deep formal audits, and is ideal for AI trading agents or wallet assistants that need a fast risk signal about an unknown contract.

## Known failure modes

- Invalid or non-existent contract address returns error
- Unsupported blockchain network not recognized
- Contract bytecode unavailable or unverified leading to incomplete scan
- Payment failure ($1 USDC) results in 402 response before scan executes
- Malformed request body causes 400 bad request
- Service timeout for very large or complex contracts

## How this service works

Basic smart contract security scan with safety score and vulnerability checks

## Output

Returns a JSON object with a success flag, the service name ('contract-scan'), a timestamp, and a result field indicating the outcome of the security scan — including a safety score and identified vulnerability checks for the submitted smart contract.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "query": {
   "type": "string",
   "description": "Query parameter for the service"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "application/json",
 "format": "json",
 "example": {
  "result": "Service executed successfully",
  "service": "contract-scan",
  "success": true,
  "timestamp": "2026-02-07T01:38:53.200Z"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/coin-railz-smart-contract-security-scanner-708b85f4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from coinrailz.com](https://www.zero.xyz/host/coinrailz.com/llms.txt)