# Solidity Smart Contract Static Vulnerability Analyzer

> Solidity Smart Contract Static Vulnerability Analyzer is a paid API for AI agents from robotshop.up.railway.app, paid per call via x402, $0.08/call, status unknown (last checked 2026-10-12).

Performs static analysis on Solidity smart contracts to detect reentrancy vulnerabilities, unchecked ERC-20 transfers, tx.origin authentication flaws, and unindexed events.

## Facts

- Endpoint: GET https://robotshop.up.railway.app/api/v1/products/prod-solidity-security-audit-tool/buy?utm_source=zero.xyz
- Price: $0.08/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/solidity-smart-contract-static-vulnerability-analyzer-0f7abde5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8W5SjKpIxMcBEqWdnhNzT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability solidity-smart-contract-static-vulnerability-analyzer-0f7abde5
```

Example prompt: Can you run a static security audit on my Solidity smart contract and flag any reentrancy vulnerabilities, unchecked ERC-20 transfers, tx.origin authentication flaws, or unindexed events?

## When to prefer this

Choose this endpoint when you need fast, focused static analysis of Solidity smart contracts specifically for the four vulnerability classes it covers (reentrancy, unchecked ERC-20 transfers, tx.origin auth, unindexed events) without spinning up a full Slither or MythX pipeline. Ideal for pre-deployment spot-checks or CI/CD integration where lightweight, pay-per-call auditing is preferred over heavyweight tooling.

## Known failure modes

- Invalid or missing Solidity contract code returns an error
- Malformed input schema results in a 400 bad request
- Payment not processed results in a 402 payment required response
- Service unavailability on the Railway.app host returns a 503 error
- Very large contracts may time out or return partial results

## How this service works

Real working agent tool endpoint that executes static vulnerability analysis on Solidity smart contracts (detecting reentrancy vulnerabilities, unchecked ERC-20 transfers, tx.origin authentication flaws, and unindexed events).

## Output

A structured vulnerability report listing detected security issues in the provided Solidity contract, categorized by type: reentrancy vulnerabilities, unchecked ERC-20 transfer return values, tx.origin authentication flaws, and unindexed events — with relevant code locations and severity indicators where available.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "client_id": {
   "type": "string",
   "description": "Optional calling agent or client ID"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/solidity-smart-contract-static-vulnerability-analyzer-0f7abde5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from robotshop.up.railway.app](https://www.zero.xyz/host/robotshop.up.railway.app/llms.txt)