# OneKeyAway DeFi Protocol Admin Key Risk Checker

> OneKeyAway DeFi Protocol Admin Key Risk Checker is a paid API for AI agents from onekeyaway.appin60.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-30).

Returns the admin/upgrade/mint/pause key structure of a smart contract (EOA, multisig, Safe, or timelock) to assess centralization risk for a given DeFi token or vault.

## Facts

- Endpoint: GET https://onekeyaway.appin60.com/api/vault?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/onekeyaway-defi-protocol-admin-key-risk-checker-ba4eabb3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uYlniZMYK1gZw8181VZBr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability onekeyaway-defi-protocol-admin-key-risk-checker-ba4eabb3
```

Example prompt: Can you check OneKeyAway to see whether the USDC contract at 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 on Base (chain 8453) is controlled by an EOA, a multisig, or a timelock — and whether it's safe from a single stolen key draining the protocol?

## When to prefer this

Use this endpoint when you need a fast, pre-computed lookup of who controls upgrade, mint, or pause functions on a DeFi smart contract across 15 major chains. It's ideal for risk assessment, due diligence before depositing, or protocol security audits where you need to know if a protocol is one stolen key away from a full drain. Prefer this over manual on-chain analysis when you need an instant, human-readable verdict without writing custom blockchain queries.

## Known failure modes

- Contract address not found in the 480-token dataset — returns ok:false or empty verdict
- Invalid chain ID or unsupported chain — request rejected or no result
- Malformed contract address (not 0x + 40 hex) — validation error
- Contract has no detectable admin key structure — ambiguous verdict
- Payment failure via x402 — 402 response, call not processed

## How this service works

Free check: who can upgrade, mint or pause a smart contract. An EOA, a 1-of-n Safe, a real multisig, or a timelock. Results from 480 DeFi tokens.

## Output

Returns a JSON object with ok (boolean), symbol (token ticker), verdict (human-readable string describing the admin key type: EOA, 1-of-n Safe, multisig, or timelock, with details), and vaultTimelockSeconds (integer seconds of enforced timelock, if any).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "chain",
      "address"
     ],
     "properties": {
      "chain": {
       "type": "string",
       "example": "8453",
       "description": "Chain id or name: 1, 8453, 42161, 10, 56, 137, 43114, 146, 59144, 81457, 80094, 324, 999, 130, 747474 (or ethereum, base, arbitrum, optimism, bsc, polygon, avalanche, sonic, linea, blast, berachain, zksync, hyperevm, unichain, katana)"
      },
      "address": {
       "type": "string",
       "example": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
       "description": "Contract address (0x + 40 hex)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "symbol": "steakUSDC",
  "verdict": "MULTISIG; vault enforces a 168h timelock on new markets and cap increases",
  "vaultTimelockSeconds": 604800
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/onekeyaway-defi-protocol-admin-key-risk-checker-ba4eabb3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from onekeyaway.appin60.com](https://www.zero.xyz/host/onekeyaway.appin60.com/llms.txt)