approval-risk-auditor

Audits an EVM wallet for risky ERC-20/ERC-721 token approvals (unlimited, stale, direct) and returns ready-to-submit revoke transaction calldata.

  • 2 Entrypoints
  • v0.1.0 Version
  • Enabled Payments
agentauditor.highkingflower.com
View Manifest List Entrypoints

Entrypoints

Explore the capabilities exposed by this agent. Invoke with JSON, stream responses when available, and inspect pricing where monetization applies.

audit

Invoke

Audit an EVM wallet for unlimited / stale / risky token approvals and return revoke calldata.

Pricing Invoke: 0.0025
Network base-sepolia
Invoke Endpoint POST /entrypoints/audit/invoke
Invoke
Input Schema 
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "wallet": {
      "type": "string",
      "description": "Owner wallet address to audit (0x…)"
    },
    "chains": {
      "description": "Chain ids to scan. Default [1] (Ethereum mainnet). Multi-chain requires ETHERSCAN_API_KEY.",
      "type": "array",
      "items": {
        "type": "integer",
        "minimum": -9007199254740991,
        "maximum": 9007199254740991
      }
    },
    "mode": {
      "description": "Data source: 'logs' (no API key needed) or 'etherscan' (full history, needs key).",
      "type": "string",
      "enum": [
        "logs",
        "etherscan"
      ]
    }
  },
  "required": [
    "wallet"
  ],
  "additionalProperties": false
}
Output Schema 
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "chain_id": {
      "type": "number"
    },
    "wallet": {
      "type": "string"
    },
    "mode": {
      "type": "string"
    },
    "summary": {
      "type": "object",
      "properties": {
        "total_approvals": {
          "type": "number"
        },
        "unlimited_count": {
          "type": "number"
        },
        "stale_count": {
          "type": "number"
        },
        "high_severity_count": {
          "type": "number"
        }
      },
      "required": [
        "total_approvals",
        "unlimited_count",
        "stale_count",
        "high_severity_count"
      ],
      "additionalProperties": false
    },
    "approvals": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "token": {
            "type": "string"
          },
          "token_symbol": {
            "type": "string"
          },
          "token_decimals": {
            "type": "number"
          },
          "owner": {
            "type": "string"
          },
          "spender": {
            "type": "string"
          },
          "raw_value": {
            "type": "string"
          },
          "value": {
            "type": "string"
          },
          "unlimited": {
            "type": "boolean"
          },
          "last_approved_at": {
            "type": [
              "number",
              "null"
            ]
          },
          "source": {
            "type": "string"
          }
        },
        "required": [
          "token",
          "token_symbol",
          "token_decimals",
          "owner",
          "spender",
          "raw_value",
          "value",
          "unlimited",
          "source"
        ],
        "additionalProperties": false
      }
    },
    "risk_flags": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "approval_index": {
            "type": "number"
          },
          "token": {
            "type": "string"
          },
          "token_symbol": {
            "type": "string"
          },
          "spender": {
            "type": "string"
          },
          "risk": {
            "type": "string"
          },
          "detail": {
            "type": "string"
          },
          "severity": {
            "type": "string"
          }
        },
        "required": [
          "approval_index",
          "token",
          "token_symbol",
          "spender",
          "risk",
          "detail",
          "severity"
        ],
        "additionalProperties": false
      }
    },
    "revoke_tx_data": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "token": {
            "type": "string"
          },
          "spender": {
            "type": "string"
          },
          "to": {
            "type": "string"
          },
          "data": {
            "type": "string"
          },
          "human_readable": {
            "type": "string"
          }
        },
        "required": [
          "token",
          "spender",
          "to",
          "data",
          "human_readable"
        ],
        "additionalProperties": false
      }
    },
    "notes": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  },
  "required": [
    "chain_id",
    "wallet",
    "mode",
    "summary",
    "approvals",
    "risk_flags",
    "revoke_tx_data",
    "notes"
  ],
  "additionalProperties": false
}
Invoke with curl 
curl -s -X POST \
  'http://agentauditor.highkingflower.com/entrypoints/audit/invoke' \
  -H 'Content-Type: application/json' \
  -d '
    {
      "input": {
        "wallet": "<Owner wallet address to audit (0x…)>"
      }
    }
  '

echo

Invoke

Echo a message

Pricing Invoke: 0.0025
Network base-sepolia
Invoke Endpoint POST /entrypoints/echo/invoke
Invoke
Input Schema 
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "text": {
      "type": "string"
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}
Invoke with curl 
curl -s -X POST \
  'http://agentauditor.highkingflower.com/entrypoints/echo/invoke' \
  -H 'Content-Type: application/json' \
  -d '
    {
      "input": {
        "text": "string"
      }
    }
  '

Client Example: x402-fetch

Use the x402-fetch helpers to wrap a standard fetch call and automatically attach payments. This script loads configuration from .env, pays the facilitator, and logs both the response body and the decoded payment receipt. 

import { config } from "dotenv";
import {
  decodeXPaymentResponse,
  wrapFetchWithPayment,
  createSigner,
  type Hex,
} from "x402-fetch";

config();

const privateKey = process.env.PRIVATE_KEY as Hex | string;
const baseURL = process.env.RESOURCE_SERVER_URL as string; // e.g. https://example.com
const endpointPath = process.env.ENDPOINT_PATH as string; // e.g. /weather
const url = `${baseURL}${endpointPath}`; // e.g. https://example.com/weather

if (!baseURL || !privateKey || !endpointPath) {
  console.error("Missing required environment variables");
  process.exit(1);
}

/**
 * Demonstrates paying for a protected resource using x402-fetch.
 *
 * Required environment variables:
 * - PRIVATE_KEY            Signer private key
 * - RESOURCE_SERVER_URL    Base URL of the agent
 * - ENDPOINT_PATH          Endpoint path (e.g. /entrypoints/echo/invoke)
 */
async function main(): Promise<void> {
  // const signer = await createSigner("solana-devnet", privateKey); // uncomment for Solana
  const signer = await createSigner("base-sepolia", privateKey);
  const fetchWithPayment = wrapFetchWithPayment(fetch, signer);

  const response = await fetchWithPayment(url, { method: "GET" });
  const body = await response.json();
  console.log(body);

  const paymentResponse = decodeXPaymentResponse(
    response.headers.get("x-payment-response")!
  );
  console.log(paymentResponse);
}

main().catch((error) => {
  console.error(error?.response?.data?.error ?? error);
  process.exit(1);
});

Manifest

Loading… 
Fetching agent card…