79trust / 100

Risk Check

by x402check in Security & trust

x402 APIPassing, checked 4 h ago

Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.

POST https://x402check.xyz/v1/risk-check

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
760 ms typical, 1.1 s slowest 5%
Last check
4 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://x402check.xyz/v1/risk-check" \
  -H "content-type: application/json" \
  -d '{"chain":"base","context":"Permit2 signature: unlimited USDC allowance to this spender","domain":"https://app.example-dapp.org","interaction":{"type":"permit_signature","unlimited":true},"wallet":"0x7a3e8f0c2b1d4e5f6a7b8c9d0e1f2a3b4c5d6e7f"}'
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:43114",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fx402check.xyz%2Fv1%2Frisk-check
const res = await pay("https://x402check.xyz/v1/risk-check", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"chain":"base","context":"Permit2 signature: unlimited USDC allowance to this spender","domain":"https://app.example-dapp.org","interaction":{"type":"permit_signature","unlimited":true},"wallet":"0x7a3e8f0c2b1d4e5f6a7b8c9d0e1f2a3b4c5d6e7f"}),
});
console.log(await res.json());

Example input

{
  "chain": "base",
  "context": "Permit2 signature: unlimited USDC allowance to this spender",
  "domain": "https://app.example-dapp.org",
  "interaction": {
    "type": "permit_signature",
    "unlimited": true
  },
  "wallet": "0x7a3e8f0c2b1d4e5f6a7b8c9d0e1f2a3b4c5d6e7f"
}

Example output

{
  "categories": [
    "approval_to_eoa",
    "unlimited_approval",
    "new_address"
  ],
  "checked": true,
  "checked_at": "2026-09-30T12:00:00.000Z",
  "evidence": {
    "onchain": {
      "activity": "none",
      "is_contract": false
    },
    "sanctions": {
      "list": "ofac-sdn",
      "status": "not_listed"
    }
  },
  "expires_at": "2026-09-30T13:00:00.000Z",
  "jws": "eyJhbGciOiJFUzI1NiIsImtpZCI6Impldi1hdHRlc3QtdjEiLCJ0eXAiOiJyaXNrLWNoZWNrK2p3dCJ9…",
  "provider": "did:web:x402check.xyz",
  "score": 40,
  "tier": "high"
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
4 h agoPassed402739 ms$0.001
7 h agoPassed402760 ms$0.001
11 h agoPassed4021.1 s$0.001
15 h agoPassed402710 ms$0.001
18 h agoPassed402760 ms$0.001
22 h agoPassed402590 ms$0.001
26 h agoPassed402702 ms$0.001
29 h agoPassed402897 ms$0.001
34 h agoPassed4021.2 s$0.001