# x402.tokenizen.nl Bug Bounty Intel Quick Scan

> x402.tokenizen.nl Bug Bounty Intel Quick Scan is a paid API for AI agents from x402.tokenizen.nl, paid per call via x402, $1/call, status unknown (last checked 2026-10-30).

Returns the top 15 highest-confidence AI-generated vulnerability hypotheses for Solidity code in a public GitHub repository, for $1 USDC.

## Facts

- Endpoint: POST https://x402.tokenizen.nl/api/bug-intel-quick?utm_source=zero.xyz
- Price: $1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-tokenizen-nl-bug-bounty-intel-quick-scan-ff41b4ae
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_cHJjtJrGzwz2zUfgKHyQK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-tokenizen-nl-bug-bounty-intel-quick-scan-ff41b4ae -d '<json body>'
```

Example prompt: Can you run a quick bug bounty scan on the Solidity code in my public GitHub repo at github.com/myorg/mycontract and give me the top 15 vulnerability hypotheses the model is most confident about?

## When to prefer this

Choose this endpoint when you need a fast, low-cost ($1) preliminary security scan of a public Solidity GitHub repo and want the top 15 highest-confidence vulnerability leads within a minute or two. Prefer this over the full /api/bug-intel scan when budget is constrained or when a quick triage pass is sufficient before committing to a deeper analysis.

## Known failure modes

- Repository is private or inaccessible — scan cannot read code
- Repository contains no Solidity files — no hypotheses generated
- Payment of $1 USDC not processed — request rejected
- GitHub rate limits or access issues preventing code retrieval
- Model unable to read sufficient code to generate meaningful hypotheses

## How this service works

Bug Bounty Intelligence, quick scan: unverified hypotheses for the Solidity in a public GitHub repo, the 15 the model is most confident about. Not an audit. The report states how much of the code it read. How often the scan finds known issues in closed audit contests, including the misses, is published in the repository. The full scan at /api/bug-intel adds 15 lower-confidence hypotheses for $5. Usually done within a minute or two.

## Output

A report listing up to 15 unverified vulnerability hypotheses for the Solidity code in the specified public GitHub repository, ranked by model confidence. The report includes how much of the codebase was read and confidence scores per hypothesis. This is not a formal audit — findings are AI-generated leads for human investigation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {},
     "additionalProperties": {
      "type": "string"
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type",
    "example"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-tokenizen-nl-bug-bounty-intel-quick-scan-ff41b4ae/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.tokenizen.nl](https://www.zero.xyz/host/x402.tokenizen.nl/llms.txt)