# Wallet Screener — GoPlus Risk Analysis via The Stall x402

> Wallet Screener — GoPlus Risk Analysis via The Stall x402 is a paid API for AI agents from the-stall.intuitek.ai, paid per call via x402, $0.136/call, status unknown (last checked 2026-09-15).

Screens an EVM wallet address for security risks, malicious activity flags, and on-chain risk signals using GoPlus data, payable per-call in USDC.

## Facts

- Endpoint: GET https://the-stall.intuitek.ai/cap/wallet-screener
- Price: $0.136/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/wallet-screener-goplus-risk-analysis-via-the-stall-x402-051518c8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_JAuRJLsDGGskoR6s9LB1l

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability wallet-screener-goplus-risk-analysis-via-the-stall-x402-051518c8
```

Example prompt: Can you screen the wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 on Ethereum (chain ID 1) and tell me if it has any risk flags or malicious activity associated with it?

## When to prefer this

Choose this endpoint when you need a quick, pay-per-use wallet risk assessment without setting up API keys or accounts. Ideal for agents performing pre-transaction due diligence on unknown EVM addresses, especially on Ethereum mainnet or other EVM chains. Prefer over free alternatives when GoPlus data quality and cross-chain coverage are required.

## Known failure modes

- Invalid or malformed EVM address returns an error
- Unsupported or unrecognized chain ID may fall back to cross-chain lookup
- Payment failure (insufficient USDC balance) results in 402 response
- GoPlus upstream data unavailable causes service error
- Address not found in GoPlus database returns empty risk profile

## How this service works

Risk screening for EVM wallet addresses. Returns a 0–100 risk score and individual flags: sanctions (OFAC/other), phishing activity, cybercrime, money laundering, darkweb transactions, mixer usage, stolen funds, fake KYC, and 12 more categories. Sourced from GoPlusLabs (free, no key, chain_id optional — defaults to checking cross-chain). Use before sending funds to an unknown address, before accepting a payment, or when validating a counterparty wallet in a DeFi workflow. Distinct from evm-toke

## Output

Returns GoPlus security data for the wallet address, including risk flags such as malicious activity history, blacklist status, association with known scams, phishing labels, and other on-chain risk signals relevant to the specified chain.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "address": "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
   "chain_id": "1"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "required": {
   "type": "string"
  },
  "properties": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/wallet-screener-goplus-risk-analysis-via-the-stall-x402-051518c8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from the-stall.intuitek.ai](https://www.zero.xyz/host/the-stall.intuitek.ai/llms.txt)