Approvals Wallet
by approvals-wallet in Onchain & crypto
Standing-state audit of a wallet's live ERC-20 token approvals. Indexes every approval the address ever granted, filters to those still live on-chain, flags unlimited, stale, scam-listed and canonical spenders, estimates money-at-risk, and returns a ranked revoke plan with ready calldata plus a 0-100 risk and allow, warn or block verdict. Risk indicators, not advice.
https://api.agentstools.dev/approvals/wallet- Price
- $0.02
- per call in USDC
- Uptime
- 100%
- last 30 days
- Response time
- 71 ms
- 112 ms slowest 5%
- Last check
- Passed
- 53 min ago, next any minute now
Reliability
How to call it
GET https://api.agentstools.dev/approvals/wallet
Each call costs $0.02 in USDC on Base, paid with the request over x402.
Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.
Example request
From the listing.
GET https://api.agentstools.dev/approvals/wallet?address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045&network=baseParameters
| Parameter | Type | Required | Description |
|---|---|---|---|
address | string | Yes | 0x wallet address to audit (the owner) |
include_revoke_plan | boolean | No | Include the ordered revoke plan (default true) |
limit | integer | No | Max distinct approvals to check (default/cap 40) |
network | string | No | EVM network to audit (default base) One of: base, ethereum, arbitrum, optimism, polygon. |
Example response
The provider's example. We can't check it without paying.
Example response, 37 lines
{
"address": "0xd8dA…6045",
"approvals": [
{
"allowance": "1157920…9935",
"flags": [
"unlimited"
],
"money_at_risk_usd": 812.4,
"priority_score": 55,
"revoke": {
"data": "0x095ea7b3…",
"to": "0x8335…2913",
"value": "0x0"
},
"scam_spender": false,
"spender": "0x1111…1111",
"spender_allowlisted": false,
"stale": false,
"token": "0x8335…2913",
"token_symbol": "USDC",
"unlimited": true
}
],
"disclaimer": "Automated on-chain risk indicators, not advice.",
"kind": "wallet-approvals",
"network": "base",
"risk_score": 55,
"status": "ok",
"summary": {
"live_approvals": 2,
"scam_spenders": 0,
"stale": 1,
"unlimited": 1
},
"verdict": "warn"
}Call it from code
The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.02.
curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i 'https://api.agentstools.dev/approvals/wallet?address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045&network=base'
# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - 'https://api.agentstools.dev/approvals/wallet?address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045&network=base' \
| grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decodeJavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
// Pays at most $0.02 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.02" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.02 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.agentstools.dev%2Fapprovals%2Fwallet
const res = await pay("https://api.agentstools.dev/approvals/wallet?address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045&network=base");
console.log(res.status, await res.text());Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
# Pays at most $0.02 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.02"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))
with x402_requests(client) as session:
res = session.get("https://api.agentstools.dev/approvals/wallet?address=0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045&network=base")
print(res.status_code, res.text)Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 53 min ago | Passed | 402 | 89 ms | $0.02 |
| 5 h ago | Passed | 402 | 24 ms | $0.02 |
| 10 h ago | Passed | 402 | 88 ms | $0.02 |
| 14 h ago | Passed | 402 | 71 ms | $0.02 |
| 18 h ago | Passed | 402 | 33 ms | $0.02 |
Show 10 older checks
| 22 h ago | Passed | 402 | 82 ms | $0.02 |
| 27 h ago | Passed | 402 | 85 ms | $0.02 |
| 31 h ago | Passed | 402 | 106 ms | $0.02 |
| 34 h ago | Passed | 402 | 87 ms | $0.02 |
| 38 h ago | Passed | 402 | 87 ms | $0.02 |
| 42 h ago | Passed | 402 | 112 ms | $0.02 |
| 46 h ago | Passed | 402 | 71 ms | $0.02 |
| 2 days ago | Passed | 402 | 93 ms | $0.02 |
| 2 days ago | Passed | 402 | 26 ms | $0.02 |
| 2 days ago | Passed | 402 | 27 ms | $0.02 |