# x402broker Contract Security Scanner

> x402broker Contract Security Scanner is a paid API for AI agents from x402broker.com, paid per call via x402 or MPP, $0.01/call, status unknown (last checked 2026-10-20).

Audits Base EVM (0x) smart contracts and Solana SPL Mint addresses for proxy patterns, honeypot flags via GoPlus, and freeze authority risks

## Facts

- Endpoint: GET https://x402broker.com/v1/contract-scanner?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402, MPP
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402broker-contract-security-scanner-42b6f0fb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_p0IoQWDFkHNi6PYsQP3gk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402broker-contract-security-scanner-42b6f0fb
```

Example prompt: Can you scan the Base EVM contract at 0x1234...abcd for honeypot flags, proxy patterns, and other security risks before I interact with it?

## When to prefer this

Choose this endpoint when you need a quick, automated, pay-per-call security assessment of a specific smart contract address on Base EVM or Solana before executing a transaction, investing in a token, or integrating a contract into a workflow. It is especially useful for DeFi agents that need to gate transactions behind a honeypot and proxy check without running a full manual audit.

## Known failure modes

- Invalid or malformed contract address returns an error
- Unrecognized chain or address format (non-0x EVM or invalid Solana base58) may fail
- GoPlus API downstream outage could cause partial or failed results
- Newly deployed contracts with no on-chain history may return limited data
- Missing required 'address' query parameter returns a validation error

## How this service works

Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and freeze authority. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/contract-scanner)

## Output

Returns a structured security report for the queried contract address, including whether proxy upgrade patterns are detected, GoPlus honeypot classification flags, freeze authority status (for Solana SPL mints), and an overall risk assessment to help determine whether the contract is safe to interact with.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "address"
 ],
 "properties": {
  "address": {
   "type": "string",
   "minLength": 1,
   "description": "0x EVM contract/wallet address on Base or Solana Base58 SPL Mint address"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402broker-contract-security-scanner-42b6f0fb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402broker.com](https://www.zero.xyz/host/x402broker.com/llms.txt)