# minia2a Smart Contract Security Audit

> minia2a Smart Contract Security Audit is a paid API for AI agents from minia2a.uk, paid per call via x402, $2/call, status unknown (last checked 2026-09-13).

Scans Solidity smart contracts for 10 static vulnerability patterns including reentrancy, access-control, integer overflow, and delegatecall issues

## Facts

- Endpoint: GET https://minia2a.uk/x402/x402-smart-contract-audit
- Price: $2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/minia2a-smart-contract-security-audit-d1bb81f2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_G0lEk5t4lZM3E-coDj04q

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability minia2a-smart-contract-security-audit-d1bb81f2
```

Example prompt: Run a quick security audit on my Solidity smart contract — check it against all 10 vulnerability patterns including reentrancy, integer overflow, and access-control issues, and tell me what you find.

## When to prefer this

Choose this endpoint when you need a fast, deterministic, low-cost pre-deployment security check on Solidity smart contracts against a well-defined set of 10 common vulnerability classes. It is ideal for automated CI/CD pipelines, quick triage before a full manual audit, or when budget is limited at $2 USDC per scan. Prefer it over general-purpose LLM code review when you need reproducible, pattern-based results rather than probabilistic analysis.

## Known failure modes

- Invalid or non-Solidity code submitted returns an error or empty findings
- Payment not completed via x402 results in HTTP 402 response and no audit output
- Malformed input schema causes request rejection
- Very large contracts may hit processing limits
- Patterns are static only — dynamic or runtime vulnerabilities are out of scope

## How this service works

Smart contract security audit, solidity vulnerability scan. 10 static patterns: reentrancy, access-control, integer-overflow, unvalidated-call, tx.origin auth, delegatecall, selfdestruct, block.timestamp, assert misuse, owner-change. Fast pre-check, deterministic. Case: minia2a.uk/blog/blog-ai-contract-audit-august-2026.html

## Output

Returns a deterministic static analysis report identifying which of the 10 vulnerability patterns (reentrancy, access-control, integer-overflow, unvalidated-call, tx.origin auth, delegatecall, selfdestruct, block.timestamp, assert misuse, owner-change) were detected in the submitted Solidity code, along with findings details for each matched pattern.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "method": {
     "type": "string"
    },
    "bodyType": {
     "type": "string"
    },
    "queryParams": {
     "type": "object"
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/minia2a-smart-contract-security-audit-d1bb81f2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from minia2a.uk](https://www.zero.xyz/host/minia2a.uk/llms.txt)