○

token-risk

Verification PAYMENT-READY

payment-ready until 2026-09-11

Static on-chain token/contract risk scanner (bytecode-only, safe): proxy/upgradeability, owner/mint/pause/blacklist/setFee selectors, Sourcify-verified source, honeypot heuristics. Deep tier adds contract-control analysis: owner()/admin readout, ownership-renounced?, EOA-vs-multisig owner, proxy implementation. USDC on Base via x402.

Pay from $0.01 to $0.05 per request in USDC on Base, settled onchain via the x402 protocol, no signup, no API key needed.

measured since 2026-08-12 (start of our harvest window) · $0.26 all-time · settled via coinbase

BASE URL https://5-9-107-124.nip.io │ WEBSITE https://5-9-107-124.nip.io │ ENDPOINTS 2 │ NETWORK Base │ ASSET USDC │ MEMBER SINCE 2026-07-21 │ MONITORED SINCE 2026-07-21

VERDICT

ranking generation 3

mixed 73/100 #59 of 64 in Verification by measured score

What the score read on this service: status offline, 99.7% uptime 30d, 1087ms response p95, x402 compliance 14 of 14, $0.01 price against the category, on-chain traction measured. Each of those is measured, and each is published in full below.

The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.

It is a score inside Verification, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 64 listings, this one among them. That set is wider than the 64 the position above is counted against, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.

Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.

ALTERNATIVES IN VERIFICATION

Other Verification services in this directory, ordered by the same measured score. The figures are ours: 30-day uptime from our own probes, 30-day settlement volume read on-chain (a conservative undercount, and null where we cannot measure it, never a zero).

Ranked alternative x402 services in the same category, with band, measured score, 30-day uptime and 30-day on-chain settlement volume
SERVICE	BAND	SCORE	UPTIME 30D	VOL 30D
Rubric Protocol — Post-Quantum AI Attestation	strong	99	100%	---
Hermes Plant	strong	96	100%	---
probe402	strong	96	100%	---
ACE — Autonomous Commerce Engine by Black Knight Technologies	strong	95	100%	---
TrustFetch	strong	95	100%	---

5 of 63 other ranked services in Verification

ASSESSMENT

updated 5h ago

The parts the verdict above is computed from, each with its proof. Click any chip. Measured values stay read-only; unknown is honest, and an unknown is never counted as a zero.

reliability 99.7%

uptime 24h: 87.5%
uptime 7d: 98.8%
uptime 30d: 99.7%
uptime 90d: 99.8%
response p95: 1087ms
avg response: 576ms
total checks: 2,741

Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.

compliance A (14/14)

14 of 14 x402 conformance checks pass. Full checklist below.

jump to compliance checklist

price $0.01 to $0.05 (p45 in Verification)

price (min): $0.01
price (max): $0.05
category percentile (min): p45 in Verification
category percentile (max): p37 in Verification
endpoints / prices: 2 / 2
model: tiered
stability: 0%

risk clean

No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.

domain age: -
registrar: -
hosting: custom
domain created: ---

Identity facts, not a risk score.

traction $0.23 30d · 6 buyers

volume 30d: $0.23
buyers 30d: 6
settlements 30d: 16
measured since: 2026-08-12 (start of our harvest window)
last settlement: 2026-09-04
top buyer share: 26% of 30d volume
trend 7d vs 30d: 2.24x the 30d daily rate
networks: eip155:8453
volume all-time: $0.26
settlements all-time: 18
median settlement 30d: $0.01
max settlement 30d: $0.05
settled via: coinbase ($0.23, 16 tx)

Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.

Top buyer share is a concentration signal, not part of the ranking score.

CHANGES

3 in 30d

Payout, price, and schema changes detected on this service's x402 wire. A payout rotation at an unchanged price shows up here even when nothing else moves. Full feed at /changes.

changes payout address changed 24d ago (3 in 30d)

payout address changed · 24d ago

payout removed 0xC49e5374F0072abC0b4c134B2fd413d87aA6354A

payout added 0xa600bD74CB55958A79B535b4741fD66681Fc3e8c

payout address changed · 24d ago

payout removed 0xa600bD74CB55958A79B535b4741fD66681Fc3e8c

payout added 0xC49e5374F0072abC0b4c134B2fd413d87aA6354A

price changed · 24d ago

GET /token-risk · eip155:8453 · USDC: 20000 → 10000

Amounts are on-wire atomic units in the named asset.

see all changes for this service

WHAT IT DOES

ai-derived

No AI synthesis has been produced for this service yet.

ENDPOINTS

Service endpoints with HTTP method, path, description, pricing, and network
METHOD	PATH	DESCRIPTION	PRICE	NETWORK	ASSET	402 CHANNEL
GET	/token-risk		$0.01	Base	USDC	header
GET	/token-risk/deep		$0.05	Base	USDC	header

2 endpoints

REQUEST / RESPONSE EXAMPLE

An unpaid request to GET /token-risk returns HTTP 402 with the payment terms. Settle onchain via your facilitator, then retry with the X-Payment header.

// request

curl -i 'https://5-9-107-124.nip.io/token-risk'

// 402 response (captured by monitor) · 2 payloads · click to expand

[
  {
    "error": "Payment required",
    "accepts": [
      {
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "payTo": "0xa600bD74CB55958A79B535b4741fD66681Fc3e8c",
        "amount": "50000",
        "scheme": "exact",
        "network": "eip155:8453",
        "maxTimeoutSeconds": 300
      }
    ],
    "resource": {
      "url": "https://5-9-107-124.nip.io/token-risk/deep",
      "tags": [
        "risk",
        "security",
        "token",
        "control"
      ],
      "mimeType": "",
      "description": "Deep contract-control analysis (owner/admin/renounced/proxy).",
      "serviceName": "token-risk-deep"
    },
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "type": "http",
            "method": "GET",
            "queryParams": {
              "chain": "base",
              "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
            }
          },
          "output": {
            "type": "json",
            "example": {
              "chain": "base",
              "flags": [],
              "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
              "risk_band": "low",
              "risk_score": 0
            }
          }
        },
        "schema": {
          "type": "object",
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "required": [
            "input"
          ],
          "properties": {
            "input": {
              "type": "object",
              "required": [
                "type",
                "method"
              ],
              "properties": {
                "type": {
                  "type": "string",
                  "const": "http"
                },
                "method": {
                  "enum": [
                    "GET",
                    "HEAD",
                    "DELETE"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "type": "object",
                  "required": [
                    "chain"
                  ],
                  "properties": {
                    "chain": {
                      "enum": [
                        "base",
                        "ethereum"
                      ],
                      "type": "string"
                    },
                    "address": {
                      "type": "string",
                      "pattern": "^0x[0-9a-fA-F]{40}$"
                    }
                  }
                }
              },
              "additionalProperties": false
            },
            "output": {
              "type": "object",
              "required": [
                "type"
              ],
              "properties": {
                "type": {
                  "type": "string"
                },
                "example": {
                  "type": "object"
                }
              }
            }
          }
        }
      }
    },
    "x402Version": 2
  },
  {
    "error": "Payment required",
    "accepts": [
      {
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "payTo": "0xa600bD74CB55958A79B535b4741fD66681Fc3e8c",
        "amount": "10000",
        "scheme": "exact",
        "network": "eip155:8453",
        "maxTimeoutSeconds": 300
      }
    ],
    "resource": {
      "url": "https://5-9-107-124.nip.io/token-risk",
      "tags": [
        "risk",
        "security",
        "token"
      ],
      "mimeType": "",
      "description": "Static on-chain token/contract risk scan (bytecode heuristics).",
      "serviceName": "token-risk"
    },
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "type": "http",
            "method": "GET",
            "queryParams": {
              "chain": "base",
              "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
            }
          },
          "output": {
            "type": "json",
            "example": {
              "chain": "base",
              "flags": [],
              "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
              "risk_band": "low",
              "risk_score": 0
            }
          }
        },
        "schema": {
          "type": "object",
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "required": [
            "input"
          ],
          "properties": {
            "input": {
              "type": "object",
              "required": [
                "type",
                "method"
              ],
              "properties": {
                "type": {
                  "type": "string",
                  "const": "http"
                },
                "method": {
                  "enum": [
                    "GET",
                    "HEAD",
                    "DELETE"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "type": "object",
                  "required": [
                    "chain"
                  ],
                  "properties": {
                    "chain": {
                      "enum": [
                        "base",
                        "ethereum"
                      ],
                      "type": "string"
                    },
                    "address": {
                      "type": "string",
                      "pattern": "^0x[0-9a-fA-F]{40}$"
                    }
                  }
                }
              },
              "additionalProperties": false
            },
            "output": {
              "type": "object",
              "required": [
                "type"
              ],
              "properties": {
                "type": {
                  "type": "string"
                },
                "example": {
                  "type": "object"
                }
              }
            }
          }
        }
      }
    },
    "x402Version": 2
  }
]

OVER TIME

All charts use the 30d selector; each series spans only the dates it has data for. Every series is also served as JSON at /api/v1/services/token-risk/price, /scores, /volume and /buyers. On-chain volume and distinct buyers are measured over the service's settlement address and are a conservative undercount (only settlements that reach a measured facilitator are counted). The on-chain series roll up hourly, so the latest day can be up to about an hour behind; distinct buyers are counted per payout address, so a service that settles to more than one address is an upper bound.

UPTIME

30d UPTIME 99.6%

RESPONSE TIME

AVG RESP 576ms

PRICE (captured 402, USD)

Median across 2 endpoints. Use the selector to isolate one.

SUB-SCORES (uptime + x402 compliance)

checklist grew 11->14 on 2026-07-28; a step here is a metric change, not a regression

PILLARS OVER TIME (measured)

price percentile in Verification

site signals present (of 6)

Measured site and economics pillars from the assessment history, so the latest value shown elsewhere on this page reads as a point on a trend rather than a permanent state.

VOLUME (on-chain settlement, USD)

DISTINCT BUYERS

COMPLIANCE

14/14 checks pass · grade A

last 402 captured 2026-08-12 · last up 2026-09-04

402 payload captured
accepts[] array present
payTo address recoverable
payTo at accepts[0].payTo (conformant shape)
payTo is a valid on-chain address
atomic price declared
atomic price in a sane range
asset (token) address declared
network resolves to CAIP-2
payment scheme declared
served over HTTPS
declares the current x402 version (2)
EIP-712 domain parameters present on every EVM entry
x402 v2 envelope delivered in the payment-required header

SITE PILLARS

homepage reachable
openapi doc
pricing page
llms.txt
robots.txt
terms page

recent checks (18) live · click to expand

TIME STATUS RESP CAUSE

18:33:00 UTC ○ DOWN 49ms network: fetch failed

16:32:00 UTC ○ DOWN 102ms network: fetch failed

15:31:00 UTC ○ DOWN 32ms network: fetch failed

15:00:20 UTC ○ DOWN 708ms network: fetch failed

14:44:07 UTC ○ DOWN 387ms network: fetch failed

14:28:13 UTC ○ DOWN 569ms network: fetch failed

14:12:11 UTC ○ DOWN 824ms network: fetch failed

13:56:11 UTC ○ DOWN 458ms network: fetch failed

13:40:12 UTC ○ DOWN 234ms network: fetch failed

13:24:13 UTC ○ DOWN 228ms network: fetch failed

13:08:13 UTC ● OK 376ms

12:52:14 UTC ● OK 679ms

12:36:11 UTC ● OK 693ms

12:20:11 UTC ● OK 437ms

12:04:10 UTC ● OK 453ms

11:48:10 UTC ● OK 500ms

11:32:08 UTC ● OK 448ms

11:16:12 UTC ● OK 464ms

EMBED THIS BADGE

Show that token-risk is monitored on x402-list. Paste this on your site or README, it links back to this live listing.

status

token-risk uptime on x402-list — live uptime

// HTML

<a href="https://x402-list.com/services/token-risk?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/token-risk.svg" alt="token-risk listed on x402-list" height="28">
</a>

// Markdown

[![token-risk on x402-list](https://x402-list.com/badge/token-risk.svg)](https://x402-list.com/services/token-risk?utm_source=badge&utm_medium=referral&utm_campaign=embed)

// HTML · live uptime variant

<a href="https://x402-list.com/services/token-risk?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/token-risk.svg?data=uptime" alt="token-risk uptime on x402-list" height="28">
</a>

RUN THIS SERVICE?

Keep this listing accurate: propose changes to the name, description, website, category or add new endpoints to monitor. Ownership is verified with a domain proof and every change is reviewed manually; measured data stays read-only.

[ update this listing ]

Earn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.

[ verify this service ($0.25) ]

To request delisting, email info@x402-list.com or update your listing at /services/token-risk/update.