# Forest Web ERC-20 Token Security Preflight

> Forest Web ERC-20 Token Security Preflight is a paid API for AI agents from http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run, paid per call via x402, $0.004/call, status unknown (last checked 2026-10-10).

Returns normalized security evidence for a single ERC-20 token contract on a supported EVM chain using the GoPlus Token Security API, classifying control, trading-restriction, and tax risk signals.

## Facts

- Endpoint: POST https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/token/risk-preflight?utm_source=zero.xyz
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/forest-web-erc-20-token-security-preflight-e4d81668
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1nqApTuoVdFE6vAfYqWOK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability forest-web-erc-20-token-security-preflight-e4d81668 -d '<json body>'
```

Example prompt: Can you run a security preflight on the USDC contract 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum and tell me what risk flags come back — any trading restrictions, tax issues, or ownership control concerns?

## When to prefer this

Choose this endpoint when you need a quick, structured security evidence snapshot for a single ERC-20 contract on a major EVM chain before a trade or integration decision. Prefer it over raw GoPlus API calls because it normalizes the output into conservative evidence classes. Use it for pre-trade risk gating, DeFi safety checks, or agent workflows that need machine-readable token risk signals without executing any transaction.

## Known failure modes

- Unsupported chain value returns a validation error — only ethereum, optimism, bnb, polygon, base, arbitrum are accepted
- Invalid or malformed contract address (not matching 0x + 40 hex chars) returns a schema validation error
- Contract address not found on the specified chain may return empty or null evidence
- GoPlus upstream API unavailability may cause timeout or 5xx error
- Payment not provided or invalid x402 authorization returns HTTP 402

## How this service works

Return bounded third-party ERC-20 security evidence for one exact contract on a fixed supported EVM chain using the GoPlus Token Security API. Forest normalizes named control, trading-restriction and tax facts into conservative evidence classes; it does not claim a token is safe, audit source code, predict returns, recommend a trade, access a wallet, approve, swap, sign, simulate or broadcast a transaction. Base mainnet USDC

## Output

A normalized set of security evidence classes derived from GoPlus Token Security data, covering named control risks (e.g. mintable, owner privileges), trading restriction facts (e.g. blacklist, whitelist, transfer pause), and tax information (e.g. buy/sell tax rates). Results are conservative evidence signals, not a definitive 'safe' verdict. No wallet access, code audit, or transaction simulation is included.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "enum": [
    "ethereum",
    "optimism",
    "bnb",
    "polygon",
    "base",
    "arbitrum"
   ],
   "type": "string",
   "description": "Public chain value used to scope this lookup."
  },
  "address": {
   "type": "string",
   "pattern": "^0x[0-9A-Fa-f]{40}$",
   "description": "Public address value used to scope this lookup."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/forest-web-erc-20-token-security-preflight-e4d81668/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run](https://www.zero.xyz/host/http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/llms.txt)