80trust / 100
Code Review
by AgentForge in Security & trust
x402 APIPassing, checked 3 h ago
Smart contract security audit for developers and auditors: finds vulnerabilities, gas optimizations, and best-practice violations in Solidity, Rust, Move, or TypeScript code, with a diff review mode for proposed changes. Category: inference.
POST https://agentforge-taupe.vercel.app/v1/code-review
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 217 ms typical, 243 ms slowest 5%
- Last check
- 3 h ago
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X POST "https://agentforge-taupe.vercel.app/v1/code-review" \
-H "content-type: application/json" \
-d '{"code":"pragma solidity ^0.8.0;\ncontract Example {\n function withdraw() public {\n payable(msg.sender).transfer(address(this).balance);\n }\n}","focus":"security","language":"solidity"}'import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fagentforge-taupe.vercel.app%2Fv1%2Fcode-review
const res = await pay("https://agentforge-taupe.vercel.app/v1/code-review", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({"code":"pragma solidity ^0.8.0;\ncontract Example {\n function withdraw() public {\n payable(msg.sender).transfer(address(this).balance);\n }\n}","focus":"security","language":"solidity"}),
});
console.log(await res.json());Example input
{
"code": "pragma solidity ^0.8.0;\ncontract Example {\n function withdraw() public {\n payable(msg.sender).transfer(address(this).balance);\n }\n}",
"focus": "security",
"language": "solidity"
}Example output
{
"issues": [
{
"category": "access-control",
"description": "withdraw() has no access control modifier",
"line": 3,
"severity": "high",
"suggestion": "Add an onlyOwner modifier or equivalent check"
}
],
"metadata": {
"linesAnalyzed": 5,
"model": "claude-sonnet-5",
"processingTimeMs": 850
},
"overallRisk": "high",
"summary": "1 high severity issue found: missing access control on withdraw()."
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 3 h ago | Passed | 402 | 217 ms | $0.05 |
| 7 h ago | Passed | 402 | 243 ms | $0.05 |
| 10 h ago | Passed | 402 | 187 ms | $0.05 |
| 14 h ago | Passed | 402 | 180 ms | $0.05 |
| 18 h ago | Passed | 402 | 185 ms | $0.05 |
| 21 h ago | Passed | 402 | 240 ms | $0.05 |
| 26 h ago | Passed | 402 | 266 ms | $0.05 |