# Token Risk Check

> Token Risk Check is a paid API for AI agents from grok-backtest-api.fly.dev, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-31).

Checks a token contract address on Base, Ethereum, or Solana for risk factors including proxy structure, taxes, upgrade risk, and overall safety verdict.

## Facts

- Endpoint: POST https://grok-backtest-api.fly.dev/token-check?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/token-risk-check-2de83475
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qXu3XIfWsHbkXuSRQR25k

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability token-risk-check-2de83475 -d '<json body>'
```

Example prompt: Before I swap into it, can you run a risk check on the token at address 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913 on Base — I want to know if it's safe, whether it has any taxes, and if there are any red flags?

## When to prefer this

Use this endpoint when an agent needs a quick, structured risk assessment of a specific token contract address before trading, swapping, or adding it to a portfolio. It's especially valuable for DeFi agents that need to screen tokens at runtime rather than relying on static allowlists. Prefer this over manual on-chain inspection when you need a combined signal from GoPlus security data and on-chain RPC facts in a single call. It covers Base, Ethereum, and Solana — making it useful across major EVM and non-EVM chains.

## Known failure modes

- Invalid or malformed contract address returns an error
- Unsupported chain value (not base/ethereum/solana) causes validation failure
- Unknown or very new tokens may have limited data and incomplete facts
- Address length outside 32–44 characters rejected by schema validation
- Network or RPC outage may cause incomplete flag data or timeout

## How this service works

Scam/honeypot/rug risk check for a token: unverified code, sell restrictions, mint/pause/blacklist powers, taxes, upgradeable proxy, age, liquidity, fake major-token impersonation and spam-airdrop patterns. Never visits metadata URLs.

## Output

Returns a JSON object with the token name, symbol, chain, contract address, a numeric risk score, a risk level label (e.g. low/medium/high), a plain-English verdict, a list of risk flags with severity and detail, and factual metadata about the contract (age in days, proxy status, buy/sell tax percentages, source verification status).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "enum": [
    "base",
    "ethereum",
    "solana"
   ],
   "type": "string"
  },
  "address": {
   "type": "string",
   "maxLength": 44,
   "minLength": 32
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "USD Coin",
  "chain": "base",
  "facts": {
   "age_days": 1165,
   "is_proxy": true,
   "taxes_pct": {
    "buy": 0,
    "sell": 0
   },
   "verified_source": true
  },
  "flags": [
   {
    "id": "upgradeable_proxy",
    "detail": "Upgradeable proxy...",
    "source": "rpc/goplus",
    "severity": "info"
   }
  ],
  "symbol": "USDC",
  "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
  "verdict": "Canonical major token on this chain. No major red flags found by these checks.",
  "risk_level": "low",
  "risk_score": 0,
  "canonical_major_token": "USDC"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/token-risk-check-2de83475/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from grok-backtest-api.fly.dev](https://www.zero.xyz/host/grok-backtest-api.fly.dev/llms.txt)