{"uid":"cap_56HMikfOTAORx-6uGNTrn","slug":"contractlens-token-security-scan-c4ffbdea","name":"ContractLens Token Security Scan","description":"Smart contract security scan for AI agents: give a chain id and contract address, get Slither static-analysis findings (reentrancy, unchecked calls, arbitrary sends, etc.), proxy/upgradeability status and the list of owner/role-gated admin functions (mint, pause, blacklist, upgrade). Works on any Sourcify-verified contract on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB. Use before approving, depositing into or trading a token/protocol. Unverified contracts are rejected without charge.","url":"https://contractlens-api.appin60.com/token?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["chainId","address"],"properties":{"address":{"type":"string","description":"ERC-20 token contract address (0x...)"},"chainId":{"type":"string","description":"EVM chain id: 1 Ethereum, 8453 Base, 42161 Arbitrum, 10 Optimism, 137 Polygon, 56 BNB"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ok":true,"chain":"Base","flags":[{"issue":"Mint function present (mint(address,uint96)): supply can be increased by a live owner/role.","severity":"medium"}],"token":{"name":"Degen","symbol":"DEGEN","decimals":18},"market":{"buys24h":609,"priceUsd":0.00099,"sells24h":766,"volume24hUsd":32314,"oldestPairAgeDays":1010,"liquidityUsdAllPairs":113268},"address":"0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed","control":{"owner":{"kind":"Safe multisig 2-of-3","address":"0x704Ec5C12Ca20a293C2C0B72B22619A4231f3c0d"}},"verdict":{"risk":"MEDIUM","score":24,"summary":"DEGEN: MEDIUM risk. Mint function present; Pause function present."},"adminPowers":{"mint":["mint(address,uint96)"],"pause":["pause()","unpause()"]},"sourceVerified":{"sourcify":"exact_match"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_poKWtN53Ss2AEmfr3bS7D","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs Slither static analysis and admin-power detection on a Sourcify-verified EVM smart contract, returning a risk verdict, security findings, proxy/upgradeability status, and privileged admin functions.","exampleAgentPrompt":"Before I buy any of this token, can you run a security scan on the DEGEN contract at 0x4ed4E862860beD51a9570b96d89aF5E1B0Efefed on Base (chain ID 8453) — I want to know the risk level, any Slither findings like reentrancy or unchecked calls, and whether the owner can mint or pause the token.","exampleUseCases":[{"title":"Pre-trade token safety check","prompt":"I'm about to ape into this new token on Arbitrum — contract is 0x912CE59144191C1204E64559FE8253a0e49E6548, chain ID 42161. Can you scan it for security issues, tell me if there's a mint function the team can use, and give me an overall risk score?"},{"title":"DeFi protocol deposit audit","prompt":"I want to deposit into this yield protocol on Polygon before committing funds. Can you audit the contract at 0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174 on chain 137 — especially check for arbitrary send vulnerabilities, proxy upgradeability, and who controls the admin keys?"},{"title":"Rug pull risk assessment","prompt":"Someone just sent me this contract on Ethereum mainnet — 0xdAC17F958D2ee523a2206206994597C13D831ec7, chain ID 1. Can you check if the owner can blacklist wallets, pause transfers, or inflate supply? I need to know if this is a rug risk before I share it with my community."}],"resultDescription":"A JSON object containing: ok status, chain name, token metadata (name, symbol, decimals), market data (price, volume, liquidity, pair age, buys/sells), a verdict object with risk level (LOW/MEDIUM/HIGH), numeric score, and plain-English summary, an adminPowers map listing privileged functions (mint, pause, blacklist, upgrade), control/owner info (address and multisig type), Slither flags with issue description and severity, proxy/upgradeability status, and Sourcify verification match type.","failureModes":["Unverified contract (not on Sourcify) — rejected without charge","Invalid or malformed contract address — error response","Unsupported chain ID — error response","Contract not deployed at address on specified chain — error response","Payment not provided or insufficient — 402 response"],"whenToPreferThis":"Use this endpoint when you need a structured, agent-ready security assessment of an EVM token or protocol contract before any financial action (approval, deposit, trade). It is especially valuable when you need Slither static-analysis findings (reentrancy, unchecked calls, arbitrary sends) combined with admin-power enumeration (mint, pause, blacklist, upgrade) and ownership info in a single call. Prefer it over manual audits or generic block explorer lookups when you need machine-readable risk verdicts. Works across Ethereum, Base, Arbitrum, Optimism, Polygon, and BNB chain. Only Sourcify-verified contracts are supported.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T06:35:16.753Z","isFirstParty":false,"canonicalSlug":"contractlens-token-security-scan-c4ffbdea"}