# RelayShield Wallet Risk Assessment

> RelayShield Wallet Risk Assessment is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-15).

Assesses the risk level of an EVM blockchain wallet address, returning risk flags and a risk level classification

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/wallet-risk
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-wallet-risk-assessment-b1d001fa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_J0d8ivuKS9Q0B6EdZkBpR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-wallet-risk-assessment-b1d001fa -d '<json body>'
```

Example prompt: Can you check the risk level of this Ethereum wallet address — 0xd8da6bf26964af9d7eed9e03e53415d37aa96045 — before I send funds to it? I need to know if there are any risk flags or if it's LOW, MEDIUM, or HIGH risk.

## When to prefer this

Use RelayShield wallet risk when you need a fast, pay-per-use EVM wallet risk score without a subscription — ideal for agents that screen wallets on-demand before transactions, for compliance checks, or for DeFi counterparty vetting. Prefer this over manual blockchain explorers when you need structured risk flags and a machine-readable risk level classification.

## Known failure modes

- Invalid or malformed wallet address returns an error response
- Unsupported chain identifier may return an error or empty metadata
- Network timeout or service unavailability returns a non-ok response
- Wallet address not found in risk database may return LOW risk with empty metadata by default
- Payment failure (x402) if USDC balance is insufficient

## How this service works

RelayShield Landing Site

## Output

Returns a JSON object with ok status, the chain type (evm), the queried wallet address, a risk_level string (e.g. LOW, MEDIUM, HIGH), a list of risk_flags indicating specific concerns, and address metadata. Low-risk addresses return empty risk_flags and risk_level of LOW.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "address": {
   "type": "string",
   "description": "Wallet address — EVM (0x), Solana (base58), TON (EQ.../UQ...), or Bitcoin"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "chain": "evm",
   "address": "0xd8da6bf26964af9d7eed9e03e53415d37aa96045",
   "metadata": {},
   "risk_flags": [],
   "risk_level": "LOW"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-wallet-risk-assessment-b1d001fa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)