# Crypto Wallet & Contract Risk Check

> Crypto Wallet & Contract Risk Check is a paid API for AI agents from x402-agent-api.onrender.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-13).

Checks a wallet or contract address for OFAC sanctions, on-chain risk signals, and smart contract owner powers to determine whether it is safe to pay or trade with.

## Facts

- Endpoint: POST https://x402-agent-api.onrender.com/api/v1/wallet-risk-check?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/crypto-wallet-contract-risk-check-d9f8d2a5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LMxBfAGhBRI4-sC-HAzGv

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability crypto-wallet-contract-risk-check-d9f8d2a5 -d '<json body>'
```

Example prompt: Before I pay this x402 invoice, can you check if the payTo address 0x6847231bD28E16A0A57c59793f6B8BD8CC0043aC on Base is safe — run it through OFAC and on-chain risk checks?

## When to prefer this

Choose this endpoint when you need a fast, automated pre-payment or pre-trade safety check on a specific Ethereum or Base address — especially when handling x402 payment flows or onboarding new crypto counterparties. It combines OFAC sanctions screening with on-chain behavioral signals in one call, making it more comprehensive than a pure sanctions-only check. Prefer it over manual block explorer lookups when you need a machine-readable verdict with risk score for automated decision-making.

## Known failure modes

- Invalid address format (must be 0x + 40 hex chars) returns validation error
- Unsupported chain value returns schema validation error
- Network timeout or upstream RPC failure may return 5xx error
- OFAC list may be up to 24 hours stale — timestamp included in response
- Contract addresses with proxies may have incomplete implementation details if verification is missing
- Payment failure via x402 returns 402 with payment instructions before check is run

## How this service works

SEC filings and web data for AI agents: read any section of a US public company's 10-K or 10-Q (risk factors, MD&A, …) since 2001, see what changed in it since last year, its latest 8-K events and press releases, a one-call due-diligence dossier with red flags (or a batch screen of 10), market-wide red-flag alerts (restatements, auditor changes, late filings, insider buying), today's earnings releases with their key figures, and a free index of its filings; turn any web page into clean Markdown; check whether a crypto wallet or token is safe to pay or trade (OFAC, owner powers, liquidity), new Base token launches with risk verdicts, and whether an x402 endpoint is safe to pay; profile a domain's email setup; HVAC engineering calculations (psychrometrics, coil loads, duct sizing) with every step shown. No accounts or API keys: pay per call in USDC with x402. Discovery endpoints are free; paid endpoints use the x402 v2 protocol with USDC on Base. Call a paid endpoint, receive 402 with a PAYMENT-REQUIRED header, sign the payment, and retry with PAYMENT-SIGNATURE. Libraries such as @x402/fetch do this transparently. Which tool: What filings does a company have? Which year's report or which 8-K do I want? → sec_list_filings (free). What was filed with the SEC since Friday / this morning? Which companies reported earnings or a CEO change today? → sec_list_filings (free). What are a company's risk factors? What did management say in the MD&A? What was in an earlier year's report? → sec_filing_section ($0.01). What changed in a company's risk factors (or MD&A, business, legal proceedings) since last year? Which new risks were added? → sec_section_changes ($0.04). I need several sections of the same report (e.g. risk factors and MD&A). → sec_filing_sections ($0.015). What are a company's revenue, profit, EPS, cash, debt and free cash flow over the last years or quarters? → sec_financials ($0.005). Are a company's insiders (CEO, CFO, directors) buying or selling its stock? → sec_insider_trades ($0.005). What happened at a company lately: earnings, CEO/CFO changes, acquisitions, cybersecurity incidents? → sec_recent_events ($0.01). Which companies' SEC filings mention a phrase ("material weakness", "tariff", a product or a person)? → sec_full_text_search ($0.01). Brief me on a public company: is anything wrong (restatements, auditor changes, losses, insider selling)? Financials, recent events and insiders in one call. → company_dossier ($0.03). Screen a list of tickers (a portfolio or watchlist) for red flags in one call, worst first. → company_dossier_batch ($0.15). Who reported earnings today (or this morning), and what were the headline numbers? Optionally just my watchlist. → sec_earnings_today ($0.01). Did anything serious just get filed anywhere in the market (restatements, auditor changes, late filings, CEO exits, insider buying)? (free counter for polling) → sec_alerts_peek (free). Show me the new SEC red-flag alerts across the market or for my watchlist (poll with the cursor). → sec_market_alerts ($0.005). Who is this company (from a domain, name or ticker): what it does, HQ, founders, CEO, employees, ticker? → company_profile ($0.005). Is this person, company or crypto wallet on a US sanctions (OFAC) list? → sanctions_screen ($0.005). Where are US interest rates, inflation and unemployment right now? → economic_indicators ($0.003). What does this web page, article, PDF, feed or documentation say? → scrape_markdown ($0.002). Read several pages at once, or find a site's pages (pricing, docs, blog) first? → site_map ($0.002). Is it safe to pay this wallet address (an x402 payTo, a vendor, another agent)? Is it sanctioned, new, a contract? → wallet_risk_check ($0.005). Is this token a scam? Can the owner mint, freeze or tax it? Is there liquidity to sell? → token_risk_check ($0.01). What exactly does a paid tool return? (free, real output for an example input) → free_sample (free). Did any new tokens launch on Base since my last check? (free counter for polling) → token_launches_peek (free). Which tokens just launched on Base, and which look safe? (poll with since_block) → new_token_launches ($0.01). Is it safe to pay this x402 endpoint: valid challenge, fair price, clean payTo wallet, real usage? → x402_preflight ($0.003). Is this email address real and safe to send to? → email_verify ($0.001). Who hosts a company's email, is SPF/DMARC set up, which SaaS does it use? → domain_enrich ($0.004). HVAC: what are the dew point, enthalpy, RH and humidity ratio of air (from any two properties, at any elevation)? → hvac_psychrometrics ($0.002). HVAC: what is the cooling or heating coil load (sensible, latent, tons), or the mixed air with outdoor air? → hvac_coil_load ($0.002). HVAC: what size duct for this airflow (equal friction or velocity), or what friction and velocity in this duct? → hvac_duct_size ($0.002). Inputs are forgiving: name a company by ticker, CIK or name; sections as "Risk Factors", "MD&A" or "Item 1A"; 8-K events as codes (5.02) or words (earnings, executive changes); unknown fields are ignored. Invalid input returns a valid example, and failed calls are never charged. Every paid result ends with `next_calls`: the natural follow-up questions as ready-to-send calls with their price. Live reliability (answers, failures and latency per tool) is published at /status.

## Output

A JSON object with a verdict (e.g. 'no_flags', 'flagged'), a numeric risk score, an array of reason objects with severity levels (info/warning/critical), OFAC sanctions hit details, account metadata (type, balances, transaction count, contract implementation), and an explorer URL. Also includes a next_calls array suggesting follow-up checks and a legal disclaimer.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "via": {
   "type": "string",
   "maxLength": 64,
   "description": "Optional: the tool whose next_calls suggested this call (filled in for you)."
  },
  "chain": {
   "enum": [
    "base",
    "ethereum"
   ],
   "type": "string",
   "default": "base",
   "description": "\"base\" (default) or \"ethereum\"."
  },
  "address": {
   "type": "string",
   "pattern": "^0x[0-9a-fA-F]{40}$",
   "description": "The wallet or contract to check, e.g. the payTo of an x402 payment request."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "chain": "base",
  "account": {
   "safe": null,
   "type": "wallet",
   "owner": null,
   "token": null,
   "delegate": null,
   "usdc_balance": 4.21,
   "implementation": null,
   "native_balance": 0.0012,
   "code_size_bytes": 0,
   "transactions_sent": 12
  },
  "address": "0x6847231bD28E16A0A57c59793f6B8BD8CC0043aC",
  "reasons": [
   {
    "code": "active",
    "message": "Has sent 12 transactions on Base.",
    "severity": "info"
   }
  ],
  "verdict": "no_flags",
  "sanctions": {
   "hits": [],
   "checked_against": "OFAC SDN and Consolidated lists (1,245 crypto addresses, loaded 2026-10-12T04:00:00.000Z)"
  },
  "disclaimer": "Automated checks of on-chain data and OFAC's published addresses, not legal or financial advice. No check catches every scam.",
  "next_calls": [],
  "risk_score": 0,
  "explorer_url": "https://basescan.org/address/0x6847231bD28E16A0A57c59793f6B8BD8CC0043aC"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/crypto-wallet-contract-risk-check-d9f8d2a5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-agent-api.onrender.com](https://www.zero.xyz/host/x402-agent-api.onrender.com/llms.txt)