# RelayShield Wallet Risk Check

> RelayShield Wallet Risk Check is a paid API for AI agents from atq6wtkp6k.execute-api.us-east-1.amazonaws.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Assesses the risk level of an EVM wallet address, returning risk flags and a risk level classification (e.g. LOW, MEDIUM, HIGH).

## Facts

- Endpoint: POST https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/wallet-risk
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-wallet-risk-check-95595835
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BYi4UIvotQRbv5cCQz8Mn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-wallet-risk-check-95595835 -d '<json body>'
```

Example prompt: Before I send any funds, can you run a RelayShield risk check on the EVM wallet 0xd8da6bf26964af9d7eed9e03e53415d37aa96045 and tell me the risk level and any flags?

## When to prefer this

Use this endpoint when you need a quick, pay-per-use EVM wallet risk assessment before executing a transaction, onboarding a new counterparty, or screening a wallet for compliance. It returns structured risk flags and a risk level, making it ideal for automated pre-payment screening in agent workflows.

## Known failure modes

- Invalid or malformed wallet address returns an error response
- Unsupported chain type results in an error
- Missing required body parameters returns a 400-level error
- Payment not included or insufficient USDC results in a 402 Payment Required response
- Address not found on chain may return empty metadata with LOW risk

## How this service works

Screen a wallet address across EVM, Solana, TON, or Bitcoin for known scam, exploit, drainer, or sanctions-list association before your agent transacts with it. Returns a risk level and specific risk flags. The recommended first call for any autonomous trading or DeFi agent before interacting with a new counterparty wallet.

## Output

Returns a JSON object with ok status, the queried chain (e.g. 'evm'), the wallet address, metadata, a list of risk_flags (empty if none), and a risk_level string (e.g. 'LOW', 'MEDIUM', 'HIGH').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "address": {
   "type": "string",
   "description": "Wallet address — EVM (0x), Solana (base58), TON (EQ.../UQ...), or Bitcoin"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-wallet-risk-check-95595835/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from atq6wtkp6k.execute-api.us-east-1.amazonaws.com](https://www.zero.xyz/host/atq6wtkp6k.execute-api.us-east-1.amazonaws.com/llms.txt)