{"uid":"cap_9ffBUcuYjVzZR_imXqDpQ","slug":"onekeyaway-defi-contract-control-check-7ec3ce03","name":"OneKeyAway DeFi Contract Control Check","description":"Free check: who can upgrade, mint or pause a smart contract. An EOA, a 1-of-n Safe, a real multisig, or a timelock. Results from 480 DeFi tokens.","url":"https://onekeyaway.appin60.com/api/control?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["chain","address"],"properties":{"chain":{"type":"string","example":"8453","description":"Chain id or name: 1, 8453, 42161, 10, 56, 137, 43114, 146, 59144, 81457, 80094, 324, 999, 130, 747474 (or ethereum, base, arbitrum, optimism, bsc, polygon, avalanche, sonic, linea, blast, berachain, zksync, hyperevm, unichain, katana)"},"address":{"type":"string","example":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","description":"Contract address (0x + 40 hex)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ok":true,"name":"USD Coin","chain":"base","roles":[{"role":"proxy admin","power":"can replace all contract code","holder":"0x...","controller":{"kind":"EOA","risk":"single"}}],"symbol":"USDC","address":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","chainId":8453,"verdict":"SINGLE KEY: at least one power ends at an EOA (one on-chain signer)","proxyType":"transparent (EIP-1967 admin slot)","worstRisk":"single","upgradeable":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_sB-sa0xbxOTt0ZflEFvA6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns who holds privileged roles (upgrade, mint, pause) on a smart contract and assesses whether those powers are secured by a single EOA, multisig, or timelock","exampleAgentPrompt":"Can you check whether the USDC contract at 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 on Base is controlled by a single key or a proper multisig — I want to know who can actually upgrade or pause it?","exampleUseCases":[{"title":"Pre-investment DeFi security audit","prompt":"Before I put money into this protocol, can you check if the contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum is one stolen key away from being drained? I want to know all the admin roles and whether they're controlled by a real multisig or just someone's wallet."},{"title":"Stablecoin issuer key security review","prompt":"Who has the power to mint or pause the USDT contract on Polygon — is it an EOA, a Safe, or does it go through a timelock? Pull the full role breakdown for 0xc2132D05D31c914a87C6611C10748AEb04B58e8F on chain 137."},{"title":"Protocol upgrade governance check","prompt":"I'm writing a report on Arbitrum DeFi governance. Can you tell me whether the proxy admin for 0xFF970A61A04b1cA14834A43f5dE4533eBDDB5CC8 on Arbitrum (chain 42161) is a single key or a proper multisig with a timelock?"}],"resultDescription":"Returns a JSON object with the contract name, symbol, chain, proxy type, upgradeability flag, a list of privileged roles (each with role name, power description, holder address, and controller kind/risk), an overall worst-risk level, and a plain-English verdict string indicating whether the contract is one key away from compromise.","failureModes":["Contract address not found or invalid hex format returns an error","Unsupported chain ID returns an error listing valid chains","Contract not in the 480-token dataset may return limited or no role data","Non-upgradeable contracts may return empty roles list","Payment not received or insufficient USDC results in 402 response"],"whenToPreferThis":"Choose this endpoint when you need a fast, structured assessment of who holds privileged on-chain powers for a specific DeFi contract — especially when evaluating protocol security risk before investing, integrating, or reporting. It covers 480 DeFi tokens across 15+ chains and specifically identifies whether control ends at a dangerous single EOA, a threshold Safe, or a timelock. Prefer this over generic block explorer lookups when you want a pre-interpreted risk verdict rather than raw on-chain data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T22:15:29.351Z","isFirstParty":false,"canonicalSlug":"onekeyaway-defi-contract-control-check-7ec3ce03"}