# Crucible Wallet Token Approval Exposure Audit

> Crucible Wallet Token Approval Exposure Audit is a paid API for AI agents from crucible.unitynodes.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-13).

Scans an Ethereum wallet for risky token allowances/approvals granted to potentially malicious or compromised spenders

## Facts

- Endpoint: POST https://crucible.unitynodes.com/audit/exposure
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/crucible-wallet-token-approval-exposure-audit-baf58dbe
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6zaMXgsELIuwaF815xUyr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability crucible-wallet-token-approval-exposure-audit-baf58dbe -d '<json body>'
```

Example prompt: Can you audit my Ethereum wallet 0xAbC123... for any risky token approvals or unlimited allowances that might let someone drain my funds?

## When to prefer this

Choose this endpoint when you need a detailed, per-spender breakdown of token approval risks for an Ethereum mainnet wallet, particularly when you want cited evidence and a machine-readable risk score. Prefer this over generic blockchain explorers when you need automated risk classification of spenders (risky vs safe) and unlimited-approval detection in a single pay-per-call API without managing your own node or approval-indexing infrastructure.

## Known failure modes

- Invalid or malformed wallet address returns a validation error
- Non-Ethereum mainnet addresses are not supported
- Wallet with no token approvals returns an empty exposures array
- RPC or blockchain data unavailability may cause partial results or timeout
- Payment failure (insufficient USDC) blocks the call before execution

## How this service works

Pay-per-call Web3 agent services: wallet, token and agent security audits; token prices, depeg checks and portfolio valuation; cited fact-checking and source research.

## Output

Returns a list of token exposure objects per approved spender, each with token address, symbol, balance, spender address, whether the approval is unlimited, and whether the spender is flagged as risky. Also returns an overall risk score (0-1), a confidence score, a content hash for verification, and cited evidence with source URLs supporting the risk assessments.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "wallet"
 ],
 "properties": {
  "wallet": {
   "type": "string",
   "description": "Wallet address (0x...), Ethereum mainnet"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cost": {
   "type": "number"
  },
  "data": {
   "type": "object",
   "properties": {
    "wallet": {
     "type": "string"
    },
    "exposures": {
     "type": "array",
     "items": {
      "type": "object",
      "properties": {
       "token": {
        "type": "string"
       },
       "symbol": {
        "type": "string"
       },
       "balance": {
        "type": "string"
       },
       "spender": {
        "type": "string"
       },
       "unlimited": {
        "type": "boolean"
       },
       "riskySpender": {
        "type": "boolean"
       }
      }
     }
    }
   }
  },
  "sources": {
   "type": "array",
   "items": {
    "type": "object",
    "properties": {
     "url": {
      "type": "string"
     },
     "hash": {
      "type": "string"
     },
     "name": {
      "type": "string"
     }
    }
   }
  },
  "evidence": {
   "type": "array",
   "items": {
    "type": "object",
    "properties": {
     "claim": {
      "type": "string"
     },
     "support": {
      "type": "string"
     },
     "sourceIndex": {
      "type": "number"
     }
    }
   }
  },
  "riskScore": {
   "type": "number"
  },
  "confidence": {
   "type": "number"
  },
  "contentHash": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/crucible-wallet-token-approval-exposure-audit-baf58dbe/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from crucible.unitynodes.com](https://www.zero.xyz/host/crucible.unitynodes.com/llms.txt)