# Kairo Bounty Scan

> Kairo Bounty Scan is a paid API for AI agents from kairo-x402.onrender.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Scans a GitHub repository (and optionally a specific issue) for crypto-collectible bounties and assesses risk level before an agent attempts to claim them.

## Facts

- Endpoint: GET https://kairo-x402.onrender.com/api/bounty-scan
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/kairo-bounty-scan-2dda520b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9_G7R_F690LYtuhp7esgs

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability kairo-bounty-scan-2dda520b
```

Example prompt: Scan the nicholasgasior/exec-warden repo and check issue #42 — is there a crypto bounty on it, and is it safe to attempt?

## When to prefer this

Use this endpoint when an AI agent needs to evaluate a GitHub repository or specific issue for crypto bounty opportunities before committing resources to attempt a claim. It is especially valuable for agents autonomously hunting bounties, as the risk and collectability assessment prevents wasted effort or exposure to honeypot/malicious bounties. Prefer this over manual repo inspection or generic GitHub API calls when on-chain reward verification and risk scoring are needed in a single pay-per-call, account-free call.

## Known failure modes

- Invalid or non-existent repo format returns an error
- Private repositories that are inaccessible to the scanner return no data
- GitHub API rate limits on the backend may cause timeouts
- Non-integer issue numbers cause schema validation failure
- Payment not processed (x402 failure) results in 402 response before scan runs

## How this service works

Crypto-native ($0.02 USDC on Base, x402) utility endpoints for agents. No accounts, no KYC — pay-per-call.

## Output

Returns a JSON object with the repository name, an enum risk rating (clean/low/medium/high/critical), a boolean indicating whether the bounty is crypto-collectible on-chain, a boolean safe_to_attempt flag, an optional issue number, a star count, and an array of findings detailing what was detected. An optional human-readable note may also be included.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "description": "owner/name"
  },
  "issue": {
   "type": "integer"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo",
  "risk",
  "crypto_collectable",
  "safe_to_attempt",
  "findings"
 ],
 "properties": {
  "note": {
   "type": "string"
  },
  "repo": {
   "type": "string"
  },
  "risk": {
   "enum": [
    "clean",
    "low",
    "medium",
    "high",
    "critical"
   ],
   "type": "string"
  },
  "issue": {
   "type": [
    "integer",
    "null"
   ]
  },
  "stars": {
   "type": [
    "integer",
    "null"
   ]
  },
  "findings": {
   "type": "array",
   "items": {
    "type": "object"
   }
  },
  "safe_to_attempt": {
   "type": "boolean"
  },
  "crypto_collectable": {
   "type": "boolean"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/kairo-bounty-scan-2dda520b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from kairo-x402.onrender.com](https://www.zero.xyz/host/kairo-x402.onrender.com/llms.txt)