# Lone Star Oracle EVM Wallet Risk Scorer

> Lone Star Oracle EVM Wallet Risk Scorer is a paid API for AI agents from wallet.lonestaroracle.xyz, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-15).

Scores an EVM wallet address for risk based on transaction patterns, on-chain exposure analysis, and suspicious activity detection

## Facts

- Endpoint: GET https://wallet.lonestaroracle.xyz/score
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/wallet-lonestaroracle-xyz-5f911020
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_MsA8SZdYPn74SWL2XRRVU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability wallet-lonestaroracle-xyz-5f911020
```

Example prompt: Can you run a risk score on this Ethereum wallet address 0x3fC91A3afd70395Cd496C647d5a6CC9D4B2b7FAD? I want to know if it has suspicious transaction patterns or any exposure to risky counterparties.

## When to prefer this

Use this endpoint when you need on-chain, EVM-specific wallet risk scoring with transaction pattern analysis and exposure checks — ideal for compliance screening, DeFi counterparty due diligence, or flagging suspicious wallets before interacting with them. Prefer this over generic blockchain explorers when you need a structured, machine-readable risk score rather than raw transaction data.

## Known failure modes

- Invalid or malformed wallet address returns an error response
- Non-EVM chain addresses (e.g. Bitcoin, Solana) may not be supported
- Wallet with no transaction history may return low-confidence or null scores
- Payment failure (402) if USDC balance is insufficient
- Rate limiting if too many requests are made in a short window
- New wallet addresses with minimal history may yield inconclusive results

## How this service works

EVM wallet risk scoring — transaction patterns, exposure analysis, suspicious activity

## Output

A risk score and associated analysis for the queried EVM wallet address, including indicators derived from transaction patterns, counterparty exposure, and flags for suspicious or anomalous on-chain behavior.

## Request schema (JSON Schema)

```json
{
 "name": "LoneStarOracle — WalletRisk",
 "tags": [
  "wallet",
  "risk",
  "security",
  "scam",
  "sanctions",
  "defi",
  "aml"
 ],
 "type": "object",
 "version": "1.0.0",
 "category": "data",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "chain": {
       "type": "string",
       "title": "Chain",
       "default": "eth"
      },
      "token": {
       "type": "string",
       "title": "Token"
      },
      "wallet": {
       "type": "string",
       "title": "Wallet"
      },
      "address": {
       "type": "string",
       "title": "Address"
      },
      "contract": {
       "type": "string",
       "title": "Contract"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "chain": "eth",
     "address": "0x1da5821544e25c636c1417ba96ade4cf6d2f9b5a",
     "balance": 0,
     "summary": "0x1da58215...f9b5a on ETH: Risk 10/10 (critical) | Flags: sanctioned, stealing_attack",
     "tx_count": 0,
     "risk_flags": [
      "sanctioned",
      "stealing_attack",
      "blacklist_doubt"
     ],
     "risk_label": "critical",
     "risk_score": 10,
     "is_contract": true,
     "flag_sources": "SlowMist,BlockSec",
     "balance_symbol": "ETH"
    }
   }
  }
 },
 "description": "On-chain wallet risk scorer for EVM addresses. Returns a 0–10 risk score and list of flags: sanctioned, mixer, phishing, darkweb transactions, money laundering, stealing attack, and more. Powered by GoPlus Security + live RPC data. Supports Ethereum, Base, BSC, Arbitrum, and Polygon."
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/wallet-lonestaroracle-xyz-5f911020/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from wallet.lonestaroracle.xyz](https://www.zero.xyz/host/wallet.lonestaroracle.xyz/llms.txt)
