{"uid":"cap_EaopgIF2Bi66CUticu049","slug":"x402check-risk-check-bc5238a5","name":"x402check Risk Check","description":"Pre-payment risk checks for x402 agents and wallets: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Every verdict is an ES256 attestation that states which checks ran.","url":"https://x402check.xyz/v1/risk-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"aud":{"type":"string","maxLength":256,"description":"Audience to bind the attestation to"},"chain":{"type":"string","maxLength":64,"description":"A known CAIP-2 id or alias, e.g. base, ethereum, solana; it must be able to hold the wallet (an EVM address on an eip155 chain)"},"domain":{"type":"string","maxLength":2048,"description":"The site or dApp involved"},"wallet":{"type":"string","maxLength":160,"minLength":1,"description":"The counterparty to check: recipient, spender, operator or pay_to (EVM, Solana, Bitcoin or Tron address, or a CAIP-10 id whose chain can hold it). A mixed-case EVM address must carry a valid EIP-55 checksum"},"context":{"type":"string","maxLength":4096,"description":"The content the agent acted on, verbatim: checked for injected instructions"},"payment":{"type":"object","properties":{"asset":{"type":"string"},"amount":{"type":"string","pattern":"^\\d{1,78}$"},"pay_to":{"type":"string"},"network":{"type":"string"},"resource":{"type":"string","pattern":"^https?://\\S+$","maxLength":512}},"description":"The payment this check is for; the attestation is bound to it","additionalProperties":false},"screening":{"type":"object","required":["sanctions"],"properties":{"sanctions":{"enum":["clean","flagged","unknown"],"type":"string"}},"description":"The caller's own sanctions screening: recorded as asserted, it can only raise risk","additionalProperties":false},"interaction":{"type":"object","required":["type"],"properties":{"type":{"enum":["native_transfer","token_transfer","token_approval","nft_approval","permit_signature","order_signature","message_signature","contract_call"],"type":"string"},"unlimited":{"type":"boolean"}},"description":"What the agent is about to do (type), and whether an approval is unlimited","additionalProperties":false},"transaction":{"type":"object","required":["from"],"properties":{"to":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"data":{"type":"string","pattern":"^0x([0-9a-fA-F]{2})*$"},"from":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"value":{"type":"string","pattern":"^(0x[0-9a-fA-F]{1,64}|\\d{1,78})$"}},"description":"An EVM transaction to simulate before it is signed ($0.005 per simulated item)","additionalProperties":false},"authorization":{"type":"object","required":["pre_authorized"],"properties":{"source":{"type":"string","maxLength":128},"pre_authorized":{"type":"boolean"}},"description":"The caller's pre-authorization: recorded as asserted, it can only raise risk","additionalProperties":false}}},"responseSchema":{"type":"json","example":{"jws":"eyJhbGciOiJFUzI1NiIsImtpZCI6Impldi1hdHRlc3QtdjEiLCJ0eXAiOiJyaXNrLWNoZWNrK2p3dCJ9…","tier":"high","score":40,"checked":true,"evidence":{"onchain":{"activity":"none","is_contract":false},"sanctions":{"list":"ofac-sdn","status":"not_listed"}},"provider":"did:web:x402check.xyz","categories":["approval_to_eoa","unlimited_approval","new_address"],"checked_at":"2026-09-30T12:00:00.000Z","expires_at":"2026-09-30T13:00:00.000Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0035","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0035/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0035","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0035","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Z8utXT4f8NUlhoCr1WgnC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0035","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs pre-payment risk checks (OFAC SDN, phishing/drainer feeds, drainer infrastructure, transaction simulation, injected-instruction analysis) on an address or transaction and returns a signed ES256 attestation with a risk tier and score.","exampleAgentPrompt":"Before you send that 50 USDC payment to 0xAbC123…, run a full risk check on the recipient address — I need to know if it's sanctioned, linked to any drainer or phishing campaign, and get back a signed attestation of the result.","exampleUseCases":[{"title":"Sanctions screening before agent payment","prompt":"Before my x402 agent pays out to 0xDe45…, check whether that address appears on the OFAC SDN list and give me a signed risk attestation so I can log it for compliance."},{"title":"Drainer detection for smart contract approval","prompt":"I'm about to approve a spend limit on contract 0xF9a2…, but it's a new address. Can you simulate the transaction and check if it matches any known drainer or phishing infrastructure before I sign?"},{"title":"Unlimited approval risk flag","prompt":"My wallet is being asked for an unlimited token approval to 0x1234… — screen that address for drainer risk, injected instructions, and check if the approval is going to an EOA, then tell me the risk tier and score."}],"resultDescription":"A JSON object containing a compact JWS (ES256) attestation signed by did:web:x402check.xyz, a risk tier (e.g. 'high'), a numeric risk score, a boolean indicating checks ran, an evidence block with onchain activity and sanctions status, a list of risk categories (e.g. 'unlimited_approval', 'new_address'), and timestamps for when the check ran and when it expires.","failureModes":["Invalid or malformed address input returns a 400 error","Network unavailability of sanctions or phishing feed sources may cause partial check results","Expired attestation if cached result is used beyond expires_at","Unrecognized transaction format may prevent simulation analysis","Rate limiting or quota exhaustion may block checks during high traffic"],"whenToPreferThis":"Use this endpoint when an AI agent or wallet needs a cryptographically verifiable, multi-signal risk verdict before executing or authorizing an on-chain payment — especially in x402 payment flows where auditability and sanctions compliance are required. Prefer it over generic blockchain analytics when you need a single signed attestation covering OFAC SDN, drainer/phishing feeds, live drainer infrastructure monitoring, and transaction simulation together in one call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:35:30.969Z","isFirstParty":false,"canonicalSlug":"x402check-risk-check-bc5238a5"}