api-production-2800.up.railway.app · token-risk

Token risk scanner API by AgentSpendGuard for Base and EVM wallet, trading, and DeFi agents before swapping or interacting with a token. Search keywords: token risk, Base token security, EVM token scanner, GoPlus token security, DexScreener liquidity, honeypot risk, AI agent wallet safety. Combines security flags, holder count, tax, honeypot, proxy, mint controls, and liquidity evidence into strict JSON verdict, score, reasons, and recommended action.

Call it in 30 seconds

// npm i x402-fetch viem
import { wrapFetchWithPayment } from "x402-fetch";
import { createWalletClient, http } from "viem";
import { privateKeyToAccount } from "viem/accounts";
import { base } from "viem/chains";

const account = privateKeyToAccount(process.env.PRIVATE_KEY); // funds USDC on Base
const wallet = createWalletClient({ account, chain: base, transport: http() });
const fetchWithPay = wrapFetchWithPayment(fetch, wallet);

// Pays the $0.015 USDC automatically on the 402, then returns the real response:
const res = await fetchWithPay("https://api-production-2800.up.railway.app/v1/token-risk", { method: "POST" });
console.log(await res.json());

# pip install x402 eth-account httpx
import os, asyncio
from eth_account import Account
from x402.clients.httpx import x402HttpxClient

account = Account.from_key(os.environ["PRIVATE_KEY"])  # funds USDC on Base

async def main():
    async with x402HttpxClient(account=account) as client:
        # x402 handles the 402 -> pay ($0.015 USDC) -> retry automatically
        r = await client.get("https://api-production-2800.up.railway.app/v1/token-risk")
        print((await r.aread()).decode())

asyncio.run(main())

# 1) An unpaid request returns HTTP 402 with the exact payment terms:
curl -i -X POST "https://api-production-2800.up.railway.app/v1/token-risk" \
  -H 'content-type: application/json' \
  -d '{"chainId": 8453, "minHolderCount": 100, "minLiquidityUsd": 10000, "tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"}'

# 2) Paying + retrying requires an x402 client that can sign the USDC
#    authorization (curl alone cannot). See the JS / Python tabs below.

New to x402? Read the 5-minute quickstart →