# Wallet Token Approval Auditor with Unlimited-Allowance Risk Flags

> Wallet Token Approval Auditor with Unlimited-Allowance Risk Flags is a paid API for AI agents from api.x402node.dev, paid per call via x402, $0.015/call, status unknown (last checked 2026-09-14).

Returns all active ERC20 token approvals for a wallet address, identifying which spender contracts have allowances and flagging unlimited approvals as high-risk wallet-drain vectors.

## Facts

- Endpoint: GET https://api.x402node.dev/chain/wallet-approvals
- Price: $0.015/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/wallet-token-approval-auditor-with-unlimited-allowance-risk-flags-93039ed5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_OmbUPYe6PX2XxXfrBQ0LO

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability wallet-token-approval-auditor-with-unlimited-allowance-risk-flags-93039ed5
```

Example prompt: Audit my wallet 0xAbC123...def456 for risky token approvals — show me every contract that can spend my tokens and flag any unlimited allowances I should revoke.

## When to prefer this

Use this endpoint when an agent needs to audit a specific wallet's ERC20 token approvals for security risk, particularly to identify unlimited allowances that could be exploited by malicious or compromised spender contracts. Prefer this over generic blockchain explorers when you need structured, machine-readable approval data with risk flags already computed, so the agent can immediately surface actionable revocation targets without manual parsing.

## Known failure modes

- Invalid or malformed wallet address returns a 400 error
- Missing or invalid API key returns a 401 unauthorized error
- Unsupported chain identifier returns a 400 or 404 error
- No approvals found returns an empty list (not an error)
- Rate limiting or quota exceeded returns a 429 error
- Upstream node timeout returns a 503 or 504 error

## How this service works

Active token approvals for a wallet with unlimited-allowance risk flags - shows which contracts (spenders) can move which tokens and highlights the unlimited approvals that are the number one wallet-drain risk, so agents can audit and revoke before funds are lost, from data behind an API key. token approvals, approval risk, unlimited approval, revoke approval, wallet security, allowance check, spender risk

## Output

A list of active token approval records for the wallet, each showing the spender contract address, the token contract, the current allowance amount, and a risk flag indicating whether the approval is unlimited (i.e., max uint256), enabling the agent to surface dangerous approvals that could allow a malicious contract to drain the wallet.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "chain": {
       "type": "string",
       "description": "eth (default), base, arbitrum, optimism, polygon"
      },
      "address": {
       "type": "string",
       "description": "Wallet address (required)"
      }
     }
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/wallet-token-approval-auditor-with-unlimited-allowance-risk-flags-93039ed5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.x402node.dev](https://www.zero.xyz/host/api.x402node.dev/llms.txt)