token-risk

AI-agent-payable on-chain intelligence — DeFi pool safety (yield + TVL + contract-security) and token/contract risk. Pay-per-call in USDC on Base via x402. No account, no KYC, no gas. Bytecode-only — never executes untrusted input.

Endpoints

EndpointPriceWhat you get
GET /defi-pool/top?chain=base&stablecoin=true$0.02 Yield screener. Best Base/Ethereum pools ranked by risk-adjusted APY (discounted for volatility, incentive-share, TVL, outliers, IL). "Where should my capital go right now." Filters: chain, stablecoin, min TVL.
GET /defi-pool?pool=<defillama_id>$0.02 Flagship. DeFi pool pre-deposit check: live APY + TVL (DefiLlama) + on-chain security read of the underlying token contracts (verified/proxy/mint/pause/owner/rug). One call before a yield agent deposits.
GET /defi-pool/deep?pool=<id>$0.06 + 30d yield stability (volatility/drawdown) + deep contract-control analysis of underlying tokens
GET /token-risk?address=0x&chain=base$0.02 Proxy/mint/pause/blacklist/setFee selectors, Sourcify-verified source, honeypot heuristics → risk_score 0-10, risk_band, flags[]
GET /token-risk/deep?address=0x$0.05 + contract-control: owner()/admin, renounced?, EOA-vs-multisig owner, proxy implementation
GET /token-risk/batch?addresses=0x,0x$0.05 Up to 10 addresses, one scan each (portfolio)

Chains: base, ethereum. Settlement: 0xa600bD74CB55958A79B535b4741fD66681Fc3e8c (USDC on Base).

Pay

Unpaid calls return HTTP 402 with an x402 challenge (base64 JSON in the payment-required header). Pay with any x402 client, then retry. See /.well-known/x402.json.

Use from an LLM agent (MCP)

One-command install, no package account:
uvx --from https://5-9-107-124.nip.io/pip/token_risk_mcp-0.2.0-py3-none-any.whl token-risk-mcp
Details: /.well-known/mcp.json.

Discovery: x402.json · bazaar · agent.json · llms.txt · openapi.json