# ScanPay Token Security Audit

> ScanPay Token Security Audit is a paid API for AI agents from scanpay-ob3w.onrender.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-31).

Performs deterministic AST-based security scanning of ERC-20 or Solana SPL token contracts, returning a risk score and trade execution verdict.

## Facts

- Endpoint: POST https://scanpay-ob3w.onrender.com/api/v1/token/audit?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scanpay-token-security-audit-fc5e9bd9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_OEUv8BlXiGtg1BdRKiscv

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scanpay-token-security-audit-fc5e9bd9 -d '<json body>'
```

Example prompt: Can you audit the Ethereum token at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 and tell me if it's safe to trade — give me the risk score and verdict?

## When to prefer this

Use this endpoint when you need a fast, deterministic, pay-per-use security verdict on a specific token contract address before executing a trade or recommending a DeFi position. It is well-suited for AI agents that need a cheap ($0.05 USDC) programmatic safety gate integrated into automated trading or portfolio workflows. Prefer it over manual audits or full-service audit firms when speed and low cost matter more than a comprehensive human review.

## Known failure modes

- Invalid or malformed token address returns an error response
- Unsupported chain identifier (not 'base', 'ethereum', or 'solana') causes a validation failure
- Undeployed or non-existent contract address may yield empty findings with ambiguous verdict
- Payment failure via x402 micropayment protocol blocks the request from being processed
- Network timeout from Render.com hosted service during high load
- Contract source code unavailable on-chain may limit AST analysis depth

## How this service works

Deterministic AST code security scanner with x402 Solana micropayments, remote MCP, and ERC-8183 Evaluator oracle.

## Output

Returns a JSON object with a 'findings' array listing detected security issues and an 'execution_gate' object containing a verdict string (e.g. 'SAFE'), a numeric risk_score, and an allow_trade boolean indicating whether the token passes security checks.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "chain",
  "token_address"
 ],
 "properties": {
  "chain": {
   "type": "string",
   "description": "Target chain: 'base', 'ethereum', or 'solana'"
  },
  "token_address": {
   "type": "string",
   "description": "ERC-20 contract (0x...) or Solana SPL mint address"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "findings": [],
  "execution_gate": {
   "verdict": "SAFE",
   "risk_score": 0,
   "allow_trade": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scanpay-token-security-audit-fc5e9bd9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from scanpay-ob3w.onrender.com](https://www.zero.xyz/host/scanpay-ob3w.onrender.com/llms.txt)