# ContractLens Smart Contract Security Scan

> ContractLens Smart Contract Security Scan is a paid API for AI agents from contractlens-api.appin60.com, paid per call via x402, $0.25/call, status unknown (last checked 2026-10-14).

Runs Slither static-analysis on a Sourcify-verified smart contract and returns security findings, proxy/upgradeability status, and admin function list

## Facts

- Endpoint: GET https://contractlens-api.appin60.com/audit?utm_source=zero.xyz
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/contractlens-smart-contract-security-scan-478109df
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LVVFaUwAsW4-WD7HT8Cnt

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability contractlens-smart-contract-security-scan-478109df
```

Example prompt: Before I approve this contract, can you run a security scan on the USDC contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum mainnet (chain ID 1) and tell me if there are any reentrancy issues, admin functions like mint or pause, or proxy upgrade risks?

## When to prefer this

Use ContractLens when you need a fast, automated, on-demand Slither static-analysis audit of a specific smart contract before approving, depositing into, or trading a token or DeFi protocol. It is especially valuable for AI agents that need a programmatic security verdict with structured findings rather than a human audit report. Prefer it over manual review when the contract is Sourcify-verified on a supported EVM chain and you want reentrancy, proxy status, and admin-function exposure in a single call.

## Known failure modes

- Contract not verified on Sourcify — rejected without charge, no findings returned
- Invalid or unsupported chain ID — request rejected
- Malformed contract address — validation error returned
- Network or upstream Slither analysis timeout
- Contract on an unsupported chain (outside Ethereum, Base, Arbitrum, Optimism, Polygon, BNB)

## How this service works

Smart contract security scan for AI agents: give a chain id and contract address, get Slither static-analysis findings (reentrancy, unchecked calls, arbitrary sends, etc.), proxy/upgradeability status and the list of owner/role-gated admin functions (mint, pause, blacklist, upgrade). Works on any Sourcify-verified contract on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB. Use before approving, depositing into or trading a token/protocol. Unverified contracts are rejected without charge.

## Output

Returns a JSON object with security findings from Slither static analysis (reentrancy, unchecked calls, arbitrary sends, etc.), the contract's proxy and upgradeability status, and a list of owner/role-gated admin functions such as mint, pause, blacklist, and upgrade. Unverified contracts are rejected without charge.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "origin"
     ],
     "properties": {
      "origin": {
       "type": "string",
       "description": "https origin of your x402 service, e.g. https://api.example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "origin": "https://api.example.com",
  "summary": {
   "payable": 5,
   "rejected": 1
  },
  "routesChecked": 6
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/contractlens-smart-contract-security-scan-478109df/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from contractlens-api.appin60.com](https://www.zero.xyz/host/contractlens-api.appin60.com/llms.txt)