Beauty & Personal Care · x402 · early usage

Base token risk scan: on-chain rug check and honeypot-style flag detection for any ERC-…

Base token risk scan: on-chain rug check and honeypot-style flag detection for any ERC-20, no GoPlus, DexScreener or other vendor - real Base token safety. Reads bytecode for mint/blacklist/pause/tax powers, EIP-1967 proxy, renounced ownership, plus Uniswap v…

by x402.agentindex.world · discovered, not yet claimed by its owner · updated 2026-10-12

30d calls2
30d payers1
MethodPOST
Outputjson

Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.

What it does

Base token risk scan: on-chain rug check and honeypot-style flag detection for any ERC-20, no GoPlus, DexScreener or other vendor - real Base token safety. Reads bytecode for mint/blacklist/pause/tax powers, EIP-1967 proxy, renounced ownership, plus Uniswap v2/v3 and Aerodrome liquidity. A Jev avoid/caution/acceptable verdict leads the response, raw signals follow. Holder concentration included only when history fits 1-2 log queries. Try GET /token-risk/sample.

Tags: token safety · rug pull · honeypot · rug check · token risk · bazaar

Call contract

Method
POST
Input
json
Output
json
Last paid call
2026-10-12
Input example from Bazaar metadata
{
  "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
}
Output example
{
  "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
  "bytecode_analysis": {
    "any_dangerous_function": true,
    "bytecode_size": 8421,
    "flags": {
      "blacklist": false,
      "mint": false,
      "pause": false,
      "set_max_tx_amount": true
    },
    "is_upgradeable_proxy": false,
    "owner": "0x0000000000000000000000000000000000000000",
    "owner_renounced": true,
    "status": "ok"
  },
  "holders_analysis": {
    "status": "skipped_established_token"
  },
  "liquidity_analysis": {
    "aerodrome_pools": [],
    "any_liquidity_found": true,
    "status": "ok",
    "uniswap_v2": {
      "pair": "0x1efdc3e6cfb3df3b7dd3e3971d5262733c52c21c",
      "reserve0": "1535891536408965785",
      "reserve1": "5106124266540300941199548545"
    },
    "uniswap_v3_pools": []
  },
  "network": {
    "caip2": "eip155:8453",
    "key": "base",
    "name": "Base"
  },
  "timing_ms": {
    "signals": 420,
    "total": 950,
    "verdict": 890
  },
  "verdict": {
    "confidence": 0.55,
    "probabilities": {
      "acceptable": 0.31,
      "avoid": 0.07,
      "caution": 0.62
    },
    "probability": 0.62,
    "verdict": "caution",
    "verdict_source": "jev"
  }
}

Use with an agent

  1. Discover. Agents find this listing with GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP tool search_resources, or /discovery/resources.
  2. Inspect. Fetch /resources/33919.json for the price and payment options.
  3. Pay. Call GET https://x402.agentindex.world/token-risk. The provider answers 402 with its payment requirements. An x402 client signs one of the options below and retries with PAYMENT-SIGNATURE.
  4. Execute. The provider returns 200 with the data. Agent Bazaar is not in the request path and never sees your payment.

For humans

You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.

Pricing & payment

Price
$0.005 / request
Protocol
x402 v2
Auth
No account or API key. Pay per request.
Networks
Base
Demand
2 calls · 1 unique payers in 30d (public x402 Bazaar data)

x402 payment requirements

SchemeNetworkAssetAmountPay toTimeout
exactBase
eip155:8453
USDC$0.0050xb3F32bdfe8D07825BC0D7387295aB1D7559BA69d300s
accepts[] (raw JSON)
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "payTo": "0xb3F32bdfe8D07825BC0D7387295aB1D7559BA69d",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "5000",
    "amountUsd": 0.005,
    "maxTimeoutSeconds": 300
  }
]

Schemas

Output schema (JSON Schema)
{
  "properties": {
    "example": {
      "properties": {
        "address": {
          "type": "string"
        },
        "bytecode_analysis": {
          "description": "mint/blacklist/pause/tax flags, proxy and ownership status.",
          "type": "object"
        },
        "holders_analysis": {
          "description": "status: 'ok' (with distinct_holders/top10_pct_of_supply), 'skipped_established_token' (history too large to reconstruct in 1-2 eth_getLogs calls), or 'unavailable' (the 3-second per-stage budget was exceeded).",
          "type": "object"
        },
        "liquidity_analysis": {
          "description": "Uniswap v2/v3 and Aerodrome pools found, with reserves.",
          "type": "object"
        },
        "network": {
          "type": "object"
        },
        "timing_ms": {
          "description": "signals (bytecode+liquidity via Multicall3, and holders - run together, sharing a 2s window), verdict, total, in milliseconds. Total is never intended to exceed 4.0s: signal-gathering and the Jev-or-rules verdict are each bounded so their sum can't exceed that budget by construction, not because anything gets cancelled at the last moment - added 2026-09-28 after a real payment settled for an analysis whose client had already timed out.",
          "type": "object"
        },
        "verdict": {
          "description": "avoid/caution/acceptable. verdict_source is 'jev' (a real Jev decision with a real probability) or 'rules' (deterministic mint/blacklist/pause/owner/liquidity check, probability/probabilities/confidence null) - used whenever Jev does not answer within 2 seconds, so the route always returns a verdict without ever waiting on an upstream with no SLA.",
          "properties": {
            "confidence": {
              "type": [
                "number",
                "null"
              ]
            },
            "probabilities": {
              "type": [
                "object",
                "null"
              ]
            },
            "probability": {
              "type": [
                "number",
                "null"
              ]
            },
            "reason": {
              "description": "Only present when verdict_source is 'rules'.",
              "type": "string"
            },
            "verdict": {
              "enum": [
                "avoid",
                "caution",
                "acceptable"
              ],
              "type": "string"
            },
            "verdict_source": {
              "enum": [
                "jev",
                "rules"
              ],
              "type": "string"
            }
          },
          "type": "object"
        },
        "x402_receipt": {
          "description": "Billing and provenance receipt for this call.",
          "type": "object"
        }
      },
      "required": [
        "address",
        "verdict",
        "bytecode_analysis",
        "liquidity_analysis",
        "holders_analysis"
      ],
      "type": "object"
    },
    "type": {
      "type": "string"
    }
  },
  "required": [
    "type"
  ],
  "type": "object"
}
Example shape — generated from the schema, not a captured live response
{
  "example": {
    "address": "string",
    "bytecode_analysis": {},
    "holders_analysis": {},
    "liquidity_analysis": {},
    "network": {},
    "timing_ms": {},
    "verdict": {
      "confidence": 0,
      "probabilities": {},
      "probability": 0,
      "reason": "string",
      "verdict": "avoid",
      "verdict_source": "jev"
    },
    "x402_receipt": {}
  },
  "type": "string"
}

Examples

curl
curl "https://x402.agentindex.world/token-risk"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://x402.agentindex.world/token-risk");
if (res.status === 402) {
  const { accepts } = await res.json();
  // pay one of accepts[] via an x402 client, then retry with the payment header
}
Python
import httpx
res = httpx.get("https://x402.agentindex.world/token-risk")
if res.status_code == 402:
    accepts = res.json()["accepts"]
    # pay one of accepts[] via an x402 client, then retry with the payment header

Details

Provider
x402.agentindex.world
Endpoint
https://x402.agentindex.world/token-risk
Machine-readable
/resources/33919.json