Smart contract security audit for developers and auditors: finds vulnerabilities, gas o…
Smart contract security audit for developers and auditors: finds vulnerabilities, gas optimizations, and best-practice violations in Solidity, Rust, Move, or TypeScript code, with a diff review mode for proposed changes. Category: inference.
by agentforge-taupe.vercel.app · discovered, not yet claimed by its owner · updated 2026-10-08
Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.
What it does
Smart contract security audit for developers and auditors: finds vulnerabilities, gas optimizations, and best-practice violations in Solidity, Rust, Move, or TypeScript code, with a diff review mode for proposed changes. Category: inference.
Tags: code review · smart contract audit · solidity · vulnerability scan · gas optimization · bazaar
Call contract
- Method
- POST
- Input
- json
- Output
- json
- Last paid call
- 2026-10-08
{
"code": "pragma solidity ^0.8.0;\ncontract Example {\n function withdraw() public {\n payable(msg.sender).transfer(address(this).balance);\n }\n}",
"focus": "security",
"language": "solidity"
}{
"issues": [
{
"category": "access-control",
"description": "withdraw() has no access control modifier",
"line": 3,
"severity": "high",
"suggestion": "Add an onlyOwner modifier or equivalent check"
}
],
"metadata": {
"linesAnalyzed": 5,
"model": "claude-sonnet-5",
"processingTimeMs": 850
},
"overallRisk": "high",
"summary": "1 high severity issue found: missing access control on withdraw()."
}Use with an agent
- Discover. Agents find this listing with
GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP toolsearch_resources, or/discovery/resources. - Inspect. Fetch
/resources/32292.jsonfor the price and payment options. - Pay. Call
GET https://agentforge-taupe.vercel.app/v1/code-review. The provider answers402with its payment requirements. An x402 client signs one of the options below and retries withPAYMENT-SIGNATURE. - Execute. The provider returns
200with the data. Agent Bazaar is not in the request path and never sees your payment.
For humans
You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.
Pricing & payment
- Price
- $0.05 / request
- Protocol
- x402 v2
- Auth
- No account or API key. Pay per request.
- Networks
- Base
- Demand
- 2 calls · 2 unique payers in 30d (public x402 Bazaar data)
x402 payment requirements
| Scheme | Network | Asset | Amount | Pay to | Timeout |
|---|---|---|---|---|---|
| exact | Base eip155:8453 | USDC | $0.05 | 0xFA6F352E71c44d217df04eCAD902C82B72D2378c | 300s |
| exact | Base eip155:8453 | USDC | $0.05 | 0xFA6F352E71c44d217df04eCAD902C82B72D2378c | 300s |
accepts[] (raw JSON)
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0xFA6F352E71c44d217df04eCAD902C82B72D2378c",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "50000",
"amountUsd": 0.05,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0xFA6F352E71c44d217df04eCAD902C82B72D2378c",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "50000",
"amountUsd": 0.05,
"maxTimeoutSeconds": 300
}
]Schemas
Output schema (JSON Schema)
{
"properties": {
"example": {
"properties": {
"gasOptimization": {
"description": "Gas optimization report (when focus includes gas)",
"type": "object"
},
"issues": {
"items": {
"properties": {
"category": {
"type": "string"
},
"description": {
"type": "string"
},
"line": {
"type": "number"
},
"severity": {
"enum": [
"info",
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"suggestion": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"metadata": {
"properties": {
"linesAnalyzed": {
"type": "number"
},
"model": {
"type": "string"
},
"processingTimeMs": {
"type": "number"
}
},
"type": "object"
},
"overallRisk": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"summary": {
"type": "string"
}
},
"required": [
"overallRisk",
"issues",
"summary",
"metadata"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}Example shape — generated from the schema, not a captured live response
{
"example": {
"gasOptimization": {},
"issues": [
{
"category": "string",
"description": "string",
"line": 0,
"severity": "info",
"suggestion": "string"
}
],
"metadata": {
"linesAnalyzed": 0,
"model": "string",
"processingTimeMs": 0
},
"overallRisk": "low",
"summary": "string"
},
"type": "string"
}Examples
curl "https://agentforge-taupe.vercel.app/v1/code-review"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paidconst res = await fetch("https://agentforge-taupe.vercel.app/v1/code-review");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}import httpx
res = httpx.get("https://agentforge-taupe.vercel.app/v1/code-review")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerDetails
- Provider
- agentforge-taupe.vercel.app
- Endpoint
- https://agentforge-taupe.vercel.app/v1/code-review
- Machine-readable
/resources/32292.json