{"uid":"cap_4M0VvGzl1OwCbkSxXutRA","slug":"agent-session-key-delegate-guard-39cf7fba","name":"Agent Session Key & Delegate Guard","description":"🆕 Pre-execution security audit for autonomous agent session keys (ERC-4337) and delegated signers (EIP-7702). Evaluates time-locks (perpetual leak vs bounded session), per-tx spend caps, router target allowlisting (Uniswap/Aerodrome vs unbounded execution), and produces an actionable GO / OVER_PERMISSIVE / DRAIN_RISK verdict before signing. Pass signer= (session key address).","url":"https://402.com.tr/api/x402/agent-session-guard?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"pathParams":{"type":"object"},"queryParams":{"type":"object","required":["signer"],"properties":{"signer":{"type":"string","description":"Session key / delegate address"},"account":{"type":"string","description":"Agent smart account (optional)"},"expiryHours":{"type":"string","description":"Session lifetime hours (optional)"},"spendCapUsd":{"type":"string","description":"Spending limit in USD (optional)"},"allowedTargets":{"type":"string","description":"Comma-separated target contracts (optional)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_oEQ3N1Y9GSbIfPrTLJTXN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Pre-execution security audit for ERC-4337 session keys and EIP-7702 delegated signers, returning a GO / OVER_PERMISSIVE / DRAIN_RISK verdict before signing.","exampleAgentPrompt":"Before my agent signs with session key 0xAbC123...def, run a security audit on it — check if the time-lock is bounded, whether the spend cap is set to $500 USD, and confirm that only Uniswap and Aerodrome are in the allowed targets list.","exampleUseCases":[{"title":"Pre-signing audit for DeFi trading agent","prompt":"My autonomous DeFi agent is about to sign with session key 0x1234...abcd. Before it does, audit it — the session should expire in 24 hours, spend cap is $200, and allowed targets should be Uniswap and Aerodrome only. Tell me if it's safe to proceed."},{"title":"Detecting over-permissive perpetual session key","prompt":"Can you check whether the session key 0xDead...Beef on my agent smart account 0xAaaa...1111 is dangerously open? I'm worried it might have no expiry and no spend limits — give me the verdict."},{"title":"Compliance gate before agent deployment","prompt":"Before I deploy my trading agent fleet, audit the delegate signer 0x9999...CAFE — I want to confirm it has a 48-hour expiry, a $1000 spend cap, and that unbounded execution is blocked. Flag it if it's DRAIN_RISK or OVER_PERMISSIVE."}],"resultDescription":"Returns a structured security verdict — one of GO, OVER_PERMISSIVE, or DRAIN_RISK — along with a breakdown of the session key's time-lock status (perpetual vs bounded), spend cap evaluation, and router target allowlist coverage (e.g. Uniswap/Aerodrome vs unbounded). Includes actionable recommendations to remediate any identified risks before signing.","failureModes":["Missing or invalid signer address returns a 400 error","Unresolvable or non-existent signer address may return an unknown verdict or error","If allowedTargets contains unrecognized contract addresses, the audit may flag them conservatively","Optional parameters omitted may result in a more conservative verdict due to lack of constraint data","Service unavailability or upstream timeout returns a 5xx error"],"whenToPreferThis":"Use this endpoint when an autonomous agent or smart wallet is about to grant or use an ERC-4337 session key or EIP-7702 delegated signer and you need a pre-execution risk verdict. It is specifically valuable when you need structured GO/OVER_PERMISSIVE/DRAIN_RISK classification rather than a raw on-chain data read — particularly for agents operating with DeFi routers where unbounded execution or missing expiry could lead to fund loss. Prefer this over generic on-chain inspection when you want an opinionated, actionable security ruling rather than raw permission data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T06:35:59.338Z","isFirstParty":false,"canonicalSlug":"agent-session-key-delegate-guard-39cf7fba"}