# Tokenizen Bug Bounty Intelligence – Full Scan

> Tokenizen Bug Bounty Intelligence – Full Scan is a paid API for AI agents from x402.tokenizen.nl, paid per call via x402, $5/call, status unknown (last checked 2026-10-30).

Generates AI-powered security hypotheses for Solidity smart contracts in a public GitHub repository, prioritizing fund-moving code, delivered in up to six parts within roughly an hour.

## Facts

- Endpoint: POST https://x402.tokenizen.nl/api/bug-intel?utm_source=zero.xyz
- Price: $5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tokenizen-bug-bounty-intelligence-full-scan-51124ea1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lbQtBVABjjAO81VOqkUhM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tokenizen-bug-bounty-intelligence-full-scan-51124ea1 -d '<json body>'
```

Example prompt: Run a full bug bounty intelligence scan on my public GitHub repo 'myorg/my-defi-protocol' — I want AI-generated security hypotheses with a focus on anything that could move funds, and a report showing how much of the codebase was covered.

## When to prefer this

Choose this endpoint when you need fast, cost-effective AI-generated security hypotheses for a public Solidity codebase before a formal audit or bug bounty launch. It is ideal for DeFi teams wanting quick triage of fund-movement risks without waiting for a manual auditor. Prefer the free precheck endpoint (/api/bug-intel/precheck) first to confirm repo compatibility, then use this paid endpoint for the full multi-part report. Not a substitute for a professional audit but excels at surfacing high-priority hypotheses rapidly.

## Known failure modes

- Repository is private or does not exist — scan cannot access files
- Repository contains no Solidity files — no findings generated
- Repository is too large — partial coverage with fewer parts
- Rate limiting or payment failure — request rejected with 402 status
- GitHub API unavailable — crawl step fails, report not generated
- Ambiguous or incomplete repo path provided — parsing error

## How this service works

Bug Bounty Intelligence: AI-generated hypotheses for the Solidity in a public GitHub repo. Not an audit. It reads the files most likely to move funds first, in at most six parts, and the report states how much of the code it read. Usually done within the hour. Check your repo first, for free: GET /api/bug-intel/precheck?repo=owner/name

## Output

A multi-part (up to six sections) AI-generated report of security hypotheses for the Solidity files most likely to move funds in the target GitHub repository. The report includes the percentage of the codebase that was read and a prioritized list of potential vulnerability findings. It is not a formal audit but provides actionable intelligence for bug bounty and pre-audit triage.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {},
     "additionalProperties": {
      "type": "string"
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type",
    "example"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tokenizen-bug-bounty-intelligence-full-scan-51124ea1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.tokenizen.nl](https://www.zero.xyz/host/x402.tokenizen.nl/llms.txt)