# TrollBridge /prove — Smart Contract Verification Battery

> TrollBridge /prove — Smart Contract Verification Battery is a paid API for AI agents from mini-tollbooth.onrender.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-12).

Compiles a contract's verified source, performs AST analysis for dangerous patterns, and returns a proof ledger of PROVEN vs UNKNOWN security claims for a given contract address

## Facts

- Endpoint: GET https://mini-tollbooth.onrender.com/prove?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/trollbridge-prove-smart-contract-verification-battery-92ffe641
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VbZeOoVelYaqNwvxr7A8i

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability trollbridge-prove-smart-contract-verification-battery-92ffe641
```

Example prompt: Can you run a verification battery on the smart contract at 0xAbC123... on Base and tell me if it has any dangerous patterns like selfdestruct or delegatecall, and what the risk score is?

## When to prefer this

Choose this endpoint when you need to verify a specific smart contract's source code against known-dangerous Solidity patterns (selfdestruct, delegatecall, tx.origin, exposed dangerous functions) and want a structured proof ledger distinguishing PROVEN claims from UNKNOWN ones. It is particularly suited for pre-transaction due diligence on Base or Ethereum contracts that have verified source on Sourcify. Prefer this over general honeypot checks (/honeypot-check) when you need source-level AST analysis and proof claims rather than just behavioral simulation.

## Known failure modes

- Contract address not found on Sourcify (no verified source) — cannot compile or prove
- Invalid or malformed contract address format — request rejected
- Contract on unsupported chain — only base and ethereum are accepted
- Source code compiles differently than deployed bytecode — mismatch warning
- Rate limit or payment failure — 402 response requiring USDC payment
- Contract has no source verification — returns unverifiable status

## How this service works

The insurance booth for AI agents, with Mini's Agent Supply Store on the side of the road. One hundred checkpoints: pre-transaction safety lanes (honeypot, approval-risk, rug-score, receipt-check, tx-dryrun, permit-scan, airdrop-verdict, deployer-history, wallet-watch, secret-scan at $0.02 USDC per call; the protection tier — /contract-check, /approval-screen, /tx-plain-english, /honeypot-check, /tx-simulate, /redteam, /skill-scan, /verdict, /egress-audit, /tool-gate, /airlock, /repo-scan, /prove, /task-scope — at $0.10; the one-call /shield don't-get-rugged screen at $0.25; the full /preflight bundle at $0.05), bounty intel (bounties, fresh, verdicts, deadlines, sweepstakes, opportunities) at $0.02 USDC per call, trader intel (/prices and /quant at $0.02; /enrich and /token-check at $0.05; /contract-check and /honeypot-check at $0.10; /sec-facts at $0.05), market intel (/markets and /search at $0.05; /grants at $0.02), DeFi intel (/yields and /new-pairs at $0.05; /gas and /defi at $0.02), AI intel (/models at $0.02), agent-ops intel (/prompt-cost, /model-picks, /rpc-speed, /terms-tldr, /scrape, /gigs, /retry-verify, /idempotency, /verify-independent at $0.02; /site-watch, /wallet-check, /code-run, /regulatory-pack, /sage, /cron-watch, /caveat-check, /tripwire, /escrow, /trust, /bridge-fees, /dao-votes, /dev-activity, /dex-arb, /dydx-perps, /funding-rates, /gas-predict, /hack-tracker, /long-short-ratio, /lp-yields, /mev-scan, /open-interest, /perp-basis, /polymarket-odds, /rwa-watch, /sentiment, /stablecoin-flows, /tokenomics, /top-movers, /whale-watch, and /yield-stable at $0.05; /approval-screen, /tx-plain-english, /tx-simulate, and /task-scope at $0.10; /scam-scan deep scan at $5.00 or 30-day subscription at $30.00), supply store (/road-pack combo meal at $0.05; curated datasets, the /audit-prep pre-audit review, and the /prove-state symbolic-execution run at $1.00; the /audit AI-agent audit at $25.00). Every lane answers before money moves — heuristic verdicts, not audits. Don't get rugged.

## Output

Returns a JSON object containing: lane identifier (/prove), risk level label, plain-English summary, a disclaimer that this is a verification battery not formal proof, compilation status (compiled: true/false), source verification status (verified: true/false), numeric risk score (0-100), contract description, a proof ledger array listing individual security claims with their status (PROVEN or UNKNOWN) and basis (e.g. AST walk), the solc compiler version used, and a list of things the battery cannot prove (e.g. absence of all vulnerabilities).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "chain": {
       "type": "string",
       "description": "base | ethereum (default base)."
      },
      "address": {
       "type": "string",
       "description": "Contract address to verify (0x…). Must have verified source on Sourcify."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "lane": "/prove",
  "risk": "low",
  "summary": "…",
  "warning": "NOT_A_PROOF — verification battery, not formal verification.",
  "compiled": true,
  "verified": true,
  "risk_score": 6,
  "description": "NOT A PROOF — verification battery: compiles the contract's verified source with its own solc build, walks the AST for selfdestruct/delegatecall/tx.origin and exposed dangerous functions, and keeps a proof ledger of PROVEN vs UNKNOWN claims ($0.10).",
  "proof_ledger": [
   {
    "basis": "AST walk",
    "claim": "No selfdestruct in compiled sources",
    "status": "proven"
   }
  ],
  "solc_version": "0.8.37+commit.f401782d",
  "what_we_cannot_prove": [
   "That the contract contains no vulnerabilities — this battery checks known-dangerous patterns, not all possible behaviors."
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/trollbridge-prove-smart-contract-verification-battery-92ffe641/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mini-tollbooth.onrender.com](https://www.zero.xyz/host/mini-tollbooth.onrender.com/llms.txt)