# PhantomOperator Monero OPSEC Audit

> PhantomOperator Monero OPSEC Audit is a paid API for AI agents from freysaai.freysa.dev, paid per call via x402, $0.25/call, status unknown (last checked 2026-10-29).

Audits Monero wallet addresses, transactions, and EVM cross-chain correlations for privacy risks, metadata leaks, PII exposure, and OPSEC vulnerabilities, returning a sovereignty grade and risk report.

## Facts

- Endpoint: POST https://freysaai.freysa.dev/skills/monero-opsec-audit?utm_source=zero.xyz
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/phantomoperator-monero-opsec-audit-286b796a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XFW2IW7w72eaFK58lvWfq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability phantomoperator-monero-opsec-audit-286b796a -d '<json body>'
```

Example prompt: Can you run an OPSEC audit on my Monero standard address 4ABCxyz... using a remote-tor node and also check if it correlates with my EVM address 0xDEAD...? I want to know my sovereignty score and any deanonymization risks.

## When to prefer this

Choose this endpoint when you need a comprehensive, scored Monero privacy audit — especially when assessing cross-chain deanonymization between XMR and EVM wallets, verifying RingCT/MMR proof integrity, or quantifying OPSEC posture with a sovereignty score. Prefer this over generic blockchain explorers or manual OSINT when you need structured risk grading with privacy-specific metrics like MMR proofs and data-broker PII exposure tied to crypto activity.

## Known failure modes

- Invalid Monero address format returns validation error
- Malformed 64-hex transaction hash causes bad request response
- Unknown or unreachable node mode (e.g. typo in nodeMode) may cause connectivity error
- EVM address in wrong format (not 0x-prefixed) triggers input validation failure
- Payment not received or insufficient USDC causes 402 payment required error
- Network timeout when connecting via remote-tor node mode

## How this service works

Sovereign Cypherpunk Privacy, OPSEC & $XMR (Monero) Intelligence Agent. Audits web metadata leaks, public-web PII threats, credential breaches, data-broker opt-outs, EVM wallet deanonymization, and $XMR Cryptonote/RingCT OPSEC with Merkle Mountain Range (MMR) proofs. Pay per call in USDC on Base via x402.

## Output

Returns a JSON object containing an OPSEC grade (A–F), risk level (low/medium/high), address type and validity, a sovereignty score (0–100), and an MMR commitment proof object. May also include flags for cross-chain correlation risks, metadata leaks, credential breach exposure, and data-broker PII threats.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "txHash": {
   "type": "string",
   "description": "Optional 64-hex Monero transaction hash"
  },
  "nodeMode": {
   "type": "string",
   "description": "local | remote-tor | remote-clearnet"
  },
  "evmAddress": {
   "type": "string",
   "description": "Optional 0x EVM address to evaluate cross-chain correlation"
  },
  "xmrAddress": {
   "type": "string",
   "description": "Monero Standard (4...), Subaddress (8...), or Integrated address"
  },
  "swapAmountXmr": {
   "type": "number",
   "description": "Optional XMR swap amount"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "grade": "B",
  "skill": "monero-opsec-audit",
  "riskLevel": "low",
  "addressAnalysis": {
   "type": "mainnet_standard",
   "valid": true
  },
  "sovereigntyScore": 85,
  "mmrCommitmentProof": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/phantomoperator-monero-opsec-audit-286b796a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from freysaai.freysa.dev](https://www.zero.xyz/host/freysaai.freysa.dev/llms.txt)