# Crucible Agent Security Audit

> Crucible Agent Security Audit is a paid API for AI agents from crucible.unitynodes.com, paid per call via x402, $0.25/call, status unknown (last checked 2026-09-14).

Runs a security audit probe against a specified Web3 agent or service, returning a risk score, categorized findings, and confidence-rated vulnerabilities.

## Facts

- Endpoint: POST https://crucible.unitynodes.com/audit/agent
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/crucible-agent-security-audit-8450d871
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_sL_HCa-zuTIeK2QzRSKmW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability crucible-agent-security-audit-8450d871 -d '<json body>'
```

Example prompt: Run a safe-mode security audit on the agent service with ID 'agent-xyz-001' using Crucible and tell me the risk score, any failed checks, and how confident the audit is.

## When to prefer this

Choose this endpoint when you need a structured, scored security assessment of a specific Web3 agent or onchain service — especially before integrating it into an automated pipeline. It is preferable over general web searches when you need machine-readable findings with severity labels, confidence scores, and cited evidence rather than informal opinions.

## Known failure modes

- Invalid or unknown targetServiceId returns error or zero-score result
- Probe mode value not recognized may fall back to default behavior
- Service unreachable or unresponsive target may produce incomplete findings
- Payment failure (x402) blocks the call before audit begins
- Low confidence score indicates insufficient data to fully assess the target

## How this service works

Pay-per-call Web3 agent services: wallet, token and agent security audits; token prices, depeg checks and portfolio valuation; cited fact-checking and source research.

## Output

Returns a structured audit report including: an overall risk score (0-1), a list of categorized findings (each with title, severity, confidence, pass/fail status, probe ID, and category), a verified boolean, the target service ID, supporting source URLs with content hashes, evidence claims mapped to sources, and an overall confidence rating for the audit.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "targetServiceId"
 ],
 "properties": {
  "mode": {
   "type": "string",
   "description": "Probe mode, e.g. \"safe\""
  },
  "targetServiceId": {
   "type": "string",
   "description": "Identifier of the agent/service to audit"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cost": {
   "type": "number"
  },
  "data": {
   "type": "object",
   "properties": {
    "score": {
     "type": "number"
    },
    "findings": {
     "type": "array",
     "items": {
      "type": "object",
      "properties": {
       "title": {
        "type": "string"
       },
       "failed": {
        "type": "boolean"
       },
       "probeId": {
        "type": "string"
       },
       "category": {
        "type": "string"
       },
       "severity": {
        "type": "string"
       },
       "confidence": {
        "type": "number"
       }
      }
     }
    },
    "verified": {
     "type": "boolean"
    },
    "targetServiceId": {
     "type": "string"
    }
   }
  },
  "sources": {
   "type": "array",
   "items": {
    "type": "object",
    "properties": {
     "url": {
      "type": "string"
     },
     "hash": {
      "type": "string"
     },
     "name": {
      "type": "string"
     }
    }
   }
  },
  "evidence": {
   "type": "array",
   "items": {
    "type": "object",
    "properties": {
     "claim": {
      "type": "string"
     },
     "support": {
      "type": "string"
     },
     "sourceIndex": {
      "type": "number"
     }
    }
   }
  },
  "riskScore": {
   "type": "number"
  },
  "confidence": {
   "type": "number"
  },
  "contentHash": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/crucible-agent-security-audit-8450d871/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from crucible.unitynodes.com](https://www.zero.xyz/host/crucible.unitynodes.com/llms.txt)