# ERC-20 Allowance Risk Check

> ERC-20 Allowance Risk Check is a paid API for AI agents from api.zlovev.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-29).

Returns live ERC-20 token allowances for a wallet across common protocol spenders, with risk labels and unlimited-approval flags, on Base or Ethereum mainnet.

## Facts

- Endpoint: GET https://api.zlovev.com/api/chain/allowance-risk?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/erc-20-allowance-risk-check-554555da
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4LfKXMMFnw0PDg9og02Tn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability erc-20-allowance-risk-check-554555da
```

Example prompt: Check my wallet 0x5c673769fbfbe227affbabc27ef1fbf2665d9ebb for risky USDC allowances on Base — I want to know if any spender has an unlimited or suspicious approval I should revoke.

## When to prefer this

Choose this endpoint when you need a one-call, risk-labelled summary of all ERC-20 allowances a wallet has granted, particularly for security audits, post-incident triage, or DeFi hygiene checks. It is superior to raw on-chain reads because it aggregates multiple spenders, applies risk scoring, and flags unlimited or balance-exceeding approvals automatically. Prefer it over generic blockchain RPC calls when you want interpreted risk output rather than raw allowance integers.

## Known failure modes

- Missing or invalid owner address returns a validation error
- More than 10 spender addresses returns an error
- Unsupported chain value returns a 400-level error
- Token contract address not found on the chosen chain may return empty or error
- Network congestion or RPC failure may return a 5xx error
- Payment not received (x402) returns a 402 Payment Required response

## How this service works

Pay-per-call data API for AI agents. No API key, no account, no signup — pay USDC on Base (eip155:8453) per request; free /api/meta lists all 24 endpoints. One call each: web page to LLM-ready text and link previews; China A-share quotes and limit-up pool; Chinese text and pinyin; Base/Ethereum on-chain reads (address, token, ERC-20 balances, tx, blocks, transfer history, gas price in USD); NFT records (collection, owner, and ipfs:// tokenURI resolved through public gateways); full-page screenshots; email verification without sending mail; ENS forward/reverse resolution; smart-contract due diligence (ABI, verified source, proxy); token security facts (owner, renounced ownership, paused, bytecode capability selectors); domain dossier (RDAP, DNS, TLS certificate, HTTP facts, hosting network); a one-call rule-based contract verdict (published-weights exposure score, owner/pause/proxy/capability facts, every reason with evidence); and an ERC-20 allowance risk check that returns the live allowance matrix for one wallet across up to 10 spenders (unlimited flags, contract/EOA status, exact revoke calls) with a single verdict.

## Output

A JSON object with: the block number of the check, chain and network identifiers, wallet balance and token metadata (symbol, decimals, address), a high-level verdict (clean/risky/etc.) with counts by risk level and a headline summary, and a per-spender array each containing the allowance amount (raw and formatted), whether it's unlimited, whether it exceeds the current balance, the risk label, whether the spender is a contract, whether it's Permit2, and a human-readable label.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "owner"
     ],
     "properties": {
      "chain": {
       "enum": [
        "base",
        "eth"
       ],
       "type": "string",
       "description": "base = Base mainnet (eip155:8453), eth = Ethereum mainnet (eip155:1). Default base"
      },
      "owner": {
       "type": "string",
       "description": "Wallet address (0x + 40 hex)"
      },
      "token": {
       "type": "string",
       "description": "ERC-20 contract address; default = USDC on the chosen chain"
      },
      "spenders": {
       "type": "string",
       "description": "Comma-separated spender addresses (max 10); default = common protocol router table"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "block": 51518553,
  "chain": "base",
  "owner": "0x5c673769fbfbe227affbabc27ef1fbf2665d9ebb",
  "scope": {
   "checked": 5,
   "max_spenders": 10,
   "spender_source": "default_router_table"
  },
  "token": {
   "symbol": "USDC",
   "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
   "balance": 0,
   "decimals": 6,
   "balance_raw": "0"
  },
  "network": "eip155:8453",
  "verdict": {
   "label": "clean",
   "counts": {
    "low": 0,
    "high": 0,
    "none": 5,
    "medium": 0,
    "unknown": 0
   },
   "headline": "已检查的 5 个 spender 上均无未撤销授权"
  },
  "spenders": [
   {
    "risk": "none",
    "label": "permit2",
    "permit2": true,
    "spender": "0x000000000022d473030f116ddee9f6b43ac78ba3",
    "allowance": 0,
    "unlimited": false,
    "allowance_raw": "0",
    "exceeds_balance": false,
    "spender_is_contract": true
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/erc-20-allowance-risk-check-554555da/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.zlovev.com](https://www.zero.xyz/host/api.zlovev.com/llms.txt)