# TokenRisk Token Security Scanner

> TokenRisk Token Security Scanner is a paid API for AI agents from tokenrisk.hergertsynthora.com, paid per call via x402, $0.32/call, status unknown (last checked 2026-09-14).

Analyzes a token contract address on Base or Ethereum for honeypots, rug-pulls, malicious behaviors, and smart-contract risks, returning a structured verdict (safe/caution/risky/rug_pull).

## Facts

- Endpoint: POST https://tokenrisk.hergertsynthora.com/service
- Price: $0.32/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tokenrisk-token-security-scanner-49e2ad49
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TI5KV6DJQfcwVSisubbTR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tokenrisk-token-security-scanner-49e2ad49 -d '<json body>'
```

Example prompt: Before I buy this token, can you run a full honeypot and rug-pull check on the Ethereum contract 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 — I need to know if it's safe, what the buy/sell taxes are, and whether the owner has been renounced?

## When to prefer this

Use this endpoint when an agent or user needs to assess token security risk before buying, swapping, or approving a token on Base or Ethereum. Prefer it over generic contract explorers when you need a structured verdict combining honeypot simulation, tax analysis, LP concentration, and ownership checks in a single call. Ideal for DeFi agents, wallet UIs, and trading bots that need a binary-ish risk signal with supporting detail.

## Known failure modes

- Invalid or non-existent contract address returns an error or unknown verdict
- Unsupported chain returns a validation error (only 'base' and 'ethereum' are supported)
- Newly deployed contracts with no on-chain history may produce incomplete analysis
- Network or RPC issues on the target chain may cause timeouts
- Payment not fulfilled (x402) results in a 402 Payment Required response before analysis is run

## How this service works

Detect honeypots, rug-pulls and malicious tokens before buying or approving. Combines GoPlus token-security (honeypot simulation, buy/sell tax, mintable, pausable, hidden owner, LP concentration, holder count) with bytecode analysis and owner-renounce checks into a safe/caution/risky/rug_pull verdict. Use it for token security, rug-pull detection and smart-contract risk. Ed25519-signed. 0.02 USDC on Base.

## Output

Returns a risk verdict (safe, caution, risky, or rug_pull) along with detailed flags: honeypot simulation result, buy/sell tax percentages, whether the token is mintable or pausable, hidden owner detection, liquidity pool concentration, holder count, and owner-renounce status. Response is Ed25519-signed for integrity.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "enum": [
    "base",
    "ethereum"
   ],
   "type": "string",
   "description": "Chain (default base)"
  },
  "address": {
   "type": "string",
   "description": "Token contract address (0x...)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "token_risk",
  "result": {
   "flags": [],
   "goplus": {
    "buy_tax": "0",
    "sell_tax": "0",
    "is_honeypot": "0"
   },
   "verdict": "safe",
   "risk_level": "low",
   "token_symbol": "USDC",
   "owner_renounced": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tokenrisk-token-security-scanner-49e2ad49/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tokenrisk.hergertsynthora.com](https://www.zero.xyz/host/tokenrisk.hergertsynthora.com/llms.txt)