# x402 Agent Wallet Tools – ERC20 Allowance Risk Scan

> x402 Agent Wallet Tools – ERC20 Allowance Risk Scan is a paid API for AI agents from x402-wallet.558686.xyz, paid per call via x402, $0.014/call, status unknown (last checked 2026-09-13).

Scans a wallet's ERC20 token allowances for risk exposure and returns a risk level assessment, findings, and a revocation plan for dangerous or unlimited approvals.

## Facts

- Endpoint: POST https://x402-wallet.558686.xyz/v1/tools/erc20-allowance-risk-scan
- Price: $0.014/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-agent-wallet-tools-erc20-allowance-risk-scan-c737ed73
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_QoCOVsZaRxHazxJew9-Jy

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-agent-wallet-tools-erc20-allowance-risk-scan-c737ed73 -d '<json body>'
```

Example prompt: Can you scan my wallet 0xaaaa...aaaa for risky ERC20 allowances? I've given unlimited USDC approval to 0xbbbb...bbbb and I'm not sure if that spender is trusted — flag the risk level and tell me if I should revoke anything.

## When to prefer this

Choose this endpoint when an AI agent needs to programmatically assess the risk of a wallet's existing ERC20 token approvals before executing a transaction or after a suspected phishing event. It is purpose-built for on-chain allowance risk classification with a structured revocation recommendation, making it superior to generic blockchain explorers that list approvals without risk scoring. Best suited for DeFi safety workflows, wallet security audits, and pre-transaction hygiene checks.

## Known failure modes

- Invalid Ethereum address format for owner or spender returns a validation error
- Malformed allowance array (missing required fields like token or spender) causes a 400 bad request
- Unlimited allowance string not recognized may cause unexpected classification
- Trusted flag misconfiguration may under-report risk for truly dangerous spenders
- Service unavailability or payment failure (x402 protocol) returns a 402 or 5xx error

## How this service works

A buyer-side control console for signature risk, EIP-712 review, transaction decoding, ERC20 allowance risk, Permit/Permit2 approvals, transaction simulation summaries, spend guard policy, receipt gate enforcement, and private-key boundaries.

## Output

Returns a JSON object with: a boolean ok status, the tool name, echoed input, an array of risk findings (each describing a specific dangerous allowance), an overall riskLevel enum, a list of analyzed allowances, and a boolean revokePlan indicating whether revocation is recommended.

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "tool": "erc20-allowance-risk-scan",
  "input": {
   "owner": "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
   "allowances": [
    {
     "token": "USDC",
     "spender": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
     "trusted": false,
     "allowance": "unlimited"
    }
   ]
  },
  "route": "/v1/tools/erc20-allowance-risk-scan",
  "result": {
   "findings": [],
   "riskLevel": "riskLevel_example",
   "allowances": [],
   "revokePlan": true
  },
  "project": "x402-agent-wallet-tools",
  "deterministic": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-agent-wallet-tools-erc20-allowance-risk-scan-c737ed73/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-wallet.558686.xyz](https://www.zero.xyz/host/x402-wallet.558686.xyz/llms.txt)