# Token Risk Scanner

> Token Risk Scanner is a paid API for AI agents from viftode4-token-risk-402.loca.lt, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Performs static on-chain bytecode heuristic analysis of a smart contract or token address to assess risk on Base or Ethereum.

## Facts

- Endpoint: GET https://viftode4-token-risk-402.loca.lt/token-risk
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/token-risk-scanner-a4a0057b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_R1Ks4iKPw5BMKkmCCOjht

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability token-risk-scanner-a4a0057b
```

Example prompt: Can you do a static bytecode risk scan on the Ethereum contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 and tell me if it shows any red flags?

## When to prefer this

Use this endpoint when you need a fast, lightweight static risk assessment of a specific token or smart contract address on Base or Ethereum without executing any transactions. It is ideal for pre-swap due diligence, token listing screening, or automated portfolio risk checks. Prefer this over dynamic analysis tools when you need a quick heuristic scan without on-chain simulation overhead.

## Known failure modes

- Invalid or malformed contract address (not matching 0x hex pattern) returns validation error
- Unsupported chain value (not 'base' or 'ethereum') returns enum validation error
- Contract address not found or undeployed on the specified chain may return empty or null analysis
- Service unavailability (tunnel/loca.lt downtime) returns connection error
- Payment not fulfilled returns 402 Payment Required

## How this service works

Static on-chain token/contract risk scan (bytecode heuristics).

## Output

Returns a structured risk assessment derived from static bytecode heuristic analysis of the specified contract, including risk flags, indicators of malicious or suspicious patterns (e.g. honeypot traps, rug pull mechanisms, hidden minting), and an overall risk classification for the token or contract on the requested chain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "chain"
     ],
     "properties": {
      "chain": {
       "enum": [
        "base",
        "ethereum"
       ],
       "type": "string"
      },
      "address": {
       "type": "string",
       "pattern": "^0x[0-9a-fA-F]{40}$"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/token-risk-scanner-a4a0057b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from viftode4-token-risk-402.loca.lt](https://www.zero.xyz/host/viftode4-token-risk-402.loca.lt/llms.txt)