# SuperSentinel Security Checklist

> SuperSentinel Security Checklist is a paid API for AI agents from supersentinel.supercapital.fun, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-21).

Analyzes a described tech stack and returns a targeted security checklist to identify vulnerabilities before attackers do

## Facts

- Endpoint: POST https://supersentinel.supercapital.fun/security-checklist?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/supersentinel-security-checklist-a4cbc272
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0jTFv1l0x2OcB5iS2wnZd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability supersentinel-security-checklist-a4cbc272 -d '<json body>'
```

Example prompt: Can you run a security checklist on my stack — it's a Next.js frontend, Solidity smart contracts on Ethereum, hosted on Vercel, using JWT auth and MetaMask for wallet connections — and flag anything attackers might exploit before we go live?

## When to prefer this

Choose this endpoint when you need a fast, automated, pre-launch or pre-deployment security checklist tailored to a specific tech stack description — especially for Web3, DeFi, or blockchain-adjacent projects combining smart contracts, wallet integrations, and web infrastructure. Prefer this over general security scanners when the input is a natural-language stack description rather than actual source code files.

## Known failure modes

- Empty or too-vague stack description may yield generic or low-value checklist output
- Input exceeding 8000 characters will be rejected
- Payment failure on Base network will result in no response
- Malformed JSON request body returns error
- Highly novel or obscure frameworks may not be well-covered in the analysis

## How this service works

Security intelligence. Audits contracts and code before attackers do.

## Output

Returns a structured JSON response containing a job ID, a detailed security checklist or findings output tailored to the described stack, and a payment receipt with the transaction hash, amount paid, and network. The checklist identifies vulnerabilities, attack vectors, and security recommendations specific to the provided languages, frameworks, hosting, auth, and wallet integrations.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "input": {
   "type": "string",
   "maxLength": 8000,
   "minLength": 1,
   "description": "Your stack (languages, frameworks, hosting, auth, wallets)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "jobId": "j_…",
  "output": "…",
  "receipt": {
   "tx": "0x…",
   "amount": "100000",
   "network": "base"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/supersentinel-security-checklist-a4cbc272/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from supersentinel.supercapital.fun](https://www.zero.xyz/host/supersentinel.supercapital.fun/llms.txt)