# Johto Wallet Risk Screener

> Johto Wallet Risk Screener is a paid API for AI agents from johto-x402-api.johtodata.workers.dev, paid per call via x402, $0.025/call, status unknown (last checked 2026-10-28).

Screens an EVM wallet address against the OFAC SDN sanctions list and ScamSniffer phishing address list, returning a risk score, verdict, and flag details.

## Facts

- Endpoint: GET https://johto-x402-api.johtodata.workers.dev/v1/wallet-risk?utm_source=zero.xyz
- Price: $0.025/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-28
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/johto-wallet-risk-screener-34630cc4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DB7p1F27-XQwNr9kkqtDh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability johto-wallet-risk-screener-34630cc4
```

Example prompt: Can you check whether the wallet address 0x28c6c06298d514db089934071355e5743bf21d60 is sanctioned by OFAC or listed as a phishing address on ScamSniffer? I need the risk score and verdict before I send funds.

## When to prefer this

Choose this endpoint when you need a fast, pay-per-use OFAC SDN and ScamSniffer dual-list wallet screening without a subscription — particularly suited for AI agents doing on-demand compliance checks before crypto transactions. Prefer it over subscription-based AML APIs when call volume is low or unpredictable, and when you want to avoid charges on failed lookups. At $0.0025 per call it is cost-effective for high-volume automated screening pipelines too.

## Known failure modes

- Invalid address format (not matching ^0x[0-9a-fA-F]{40}$) returns a validation error and no charge
- Address not found in any list returns CLEAR verdict with riskScore 0 and empty flags
- Upstream list fetch failure may cause partial or stale results
- Payment failure via x402 results in 402 response and no data returned
- Network timeout from Cloudflare Worker may return 5xx error

## How this service works

Valuable data. Quality leads. Paid per call in USDC on Base via x402. Not charged if the fetch fails or nothing matches. Prices per call (USDC): /v1/jp-invoice-check $0.002; /v1/sec-13f $0.003; /v1/sec-8k $0.003; /v1/sanctions-screen $0.0025; /v1/tenders $0.011; /v1/uk-tenders $0.003; /v1/fr-tenders $0.006; /v1/au-contracts $0.0035; /v1/wallet-risk $0.0025; /v1/kyb $0.0029; /v1/read $0.0019; /v1/crawl $0.0045; /v1/jobs $0.01; /v1/domain-profile $0.003.

## Output

Returns a JSON object with: a string verdict (CLEAR or flagged status), integer riskScore (0–100), boolean ofacSanctioned, boolean scamSnifferListed, an array of flags with details, a human-readable summary and flagsText, snapshot dates for each list checked (OFAC SDN, ScamSniffer), the checkedAt timestamp, addressType, and a disclaimer. Also includes rows count (1 if found).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "address": {
       "type": "string",
       "pattern": "^0x[0-9a-fA-F]{40}$",
       "description": "One EVM address, 0x + 40 hex"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "required": [
      "data",
      "rows"
     ],
     "properties": {
      "data": {
       "type": "object",
       "properties": {
        "flags": {
         "type": "array"
        },
        "address": {
         "type": "string"
        },
        "summary": {
         "type": "string"
        },
        "verdict": {
         "type": "string"
        },
        "checkedAt": {
         "type": "string"
        },
        "flagsText": {
         "type": "string"
        },
        "listsAsOf": {
         "type": "object",
         "properties": {
          "ofacSdn": {
           "type": "object",
           "properties": {
            "asOf": {
             "type": "string"
            },
            "name": {
             "type": "string"
            },
            "source": {
             "type": "string"
            },
            "fetchedAt": {
             "type": "string"
            }
           }
          },
          "scamSniffer": {
           "type": "object",
           "properties": {
            "asOf": {
             "type": "string"
            },
            "name": {
             "type": "string"
            },
            "note": {
             "type": "string"
            },
            "source": {
             "type": "string"
            },
            "license": {
             "type": "string"
            },
            "fetchedAt": {
             "type": "string"
            }
           }
          }
         }
        },
        "riskScore": {
         "type": "integer"
        },
        "disclaimer": {
         "type": "string"
        },
        "addressType": {
         "type"
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "flags": [],
   "address": "0x28c6c06298d514db089934071355e5743bf21d60",
   "summary": "CLEAR: 0x28c6c062… not on the OFAC SDN list, not on the ScamSniffer phishing address list (snapshots 2026-10-21 / 2026-10-22).",
   "verdict": "CLEAR",
   "checkedAt": "2026-10-22T12:00:00.000Z",
   "flagsText": "",
   "listsAsOf": {
    "ofacSdn": {
     "asOf": "2026-10-21",
     "name": "OFAC SDN list",
     "source": "https://www.treasury.gov/ofac/downloads/sdn.xml",
     "fetchedAt": "2026-10-22T11:27:12Z"
    },
    "scamSniffer": {
     "asOf": "2026-10-22",
     "name": "ScamSniffer phishing address list",
     "note": "ScamSniffer publishes this list with a 7-day delay.",
     "source": "https://github.com/scamsniffer/scam-database/blob/main/blacklist/all.json",
     "license": "GPL-3.0",
     "fetchedAt": "2026-10-22T11:27:23Z"
    }
   },
   "riskScore": 0,
   "disclaimer": "A screening aid, not legal advice. CLEAR only means the address is not on these two lists as of the snapshot dates. Verify OFAC matches with OFAC Sanctions List Search.",
   "addressType": "evm",
   "ofacMatches": [],
   "ofacListDate": "2026-10-21",
   "ofacListMode": "snapshot",
   "ofacSanctioned": false,
   "scamSnifferListed": false,
   "scamSnifferChecked": true
  },
  "rows": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/johto-wallet-risk-screener-34630cc4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from johto-x402-api.johtodata.workers.dev](https://www.zero.xyz/host/johto-x402-api.johtodata.workers.dev/llms.txt)