# Contract Auditor — Smart Contract Security Quick-Scan

> Contract Auditor — Smart Contract Security Quick-Scan is a paid API for AI agents from contract-auditor-ivory.vercel.app, paid per call via x402, $0.25/call, status unknown (last checked 2026-10-10).

Scans a deployed smart contract (or raw Solidity source) for critical security risks including upgradeable proxies, dangerous owner powers, reentrancy, selfdestruct, delegatecall, and honeypot patterns before approving or funding it.

## Facts

- Endpoint: GET https://contract-auditor-ivory.vercel.app/pro/audit?utm_source=zero.xyz
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/contract-auditor-smart-contract-security-quick-scan-cb02492a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wyIJeu-fDLtyIJ03rGYII

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability contract-auditor-smart-contract-security-quick-scan-cb02492a
```

Example prompt: Before I approve this contract, can you security-scan it for honeypots, reentrancy, selfdestruct, and owner mint/pause powers? The contract address is 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum.

## When to prefer this

Use this endpoint when you need a fast, automated pre-flight security check on a specific smart contract before approving tokens, sending funds, or interacting with it — especially for DeFi protocols, token contracts, or any unknown contract. Prefer this over manual code review when speed matters and you want automated detection of common attack vectors and rug-pull patterns.

## Known failure modes

- Invalid or unrecognized contract address returns an error
- Contract not deployed on the specified chain returns not-found error
- Unsupported chain ID returns a chain resolution error
- Raw Solidity source with syntax errors may fail to parse
- Rate limiting or payment failure blocks the scan
- Unverified contracts without source code may yield limited results

## How this service works

Security quick-scan for smart contracts. Detect upgradeable proxies, owner mint/pause/blacklist/fee powers, selfdestruct, delegatecall, tx.origin auth, reentrancy and honeypot patterns BEFORE you approve or fund a contract. MCP server + pay-per-call x402 API.

## Output

Returns a structured security report flagging detected risks such as upgradeable proxy patterns, owner-controlled mint/pause/blacklist/fee functions, selfdestruct presence, delegatecall usage, tx.origin authentication, reentrancy vulnerabilities, and honeypot patterns — allowing the user to assess contract risk before committing funds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "type": "string",
   "description": "Chain alias or numeric chainId (default ethereum)."
  },
  "source": {
   "type": "string",
   "description": "Optional raw Solidity source to scan instead of an address."
  },
  "address": {
   "type": "string",
   "description": "Deployed contract address (0x + 40 hex)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/contract-auditor-smart-contract-security-quick-scan-cb02492a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from contract-auditor-ivory.vercel.app](https://www.zero.xyz/host/contract-auditor-ivory.vercel.app/llms.txt)