Spot token risks.
Before you trade.
Honeypots, privileged controls, taxes and liquidity.
Readable insights for people. Structured evidence for agents.
Known risks and unknown checks, clearly separated.
Detailed JSON for 0.001 USDC per request via x402.
Versioned signals, sources and timestamps.
Scan results
Ready to scanOne request.
Structured evidence.
Get a free summary without signing in. Detailed reports include check-level evidence, source status and market context.
GET /api/v1/scan?address=0x… Detailed report: GET /api/v1/report?address=0x…
Checking payment availability…
How does x402 work?
An agent requests the detailed API and receives payment requirements. An x402 client signs the exact USDC payment and retries. The server verifies and settles before releasing the report. This page never pays automatically.
Beyond the score:
what was checked.
Risk scores follow transparent rules. Missing evidence is never treated as a clean check.
- Honeypot detection: +80 and critical risk band
- Full-sell restriction / balance modification: +35 each
- Additional signals: taxes, liquidity and privileges
- Holder samples may include pools and exchanges
- Insufficient evidence means an unknown rating
Sources and limitations
Data comes from GoPlus Security, Honeypot.is and DEX Screener. Not every DEX or new token is supported. Outages, simulation limits, liquidity removal and future privilege changes may affect results. This is not a security audit or investment recommendation.
Full scoring rules
Honeypot 80; full-sell restriction 35; blacklist 15; pausable transfers 15; minting 10; balance changes 35; hidden owner 20; ownership recovery 15; tax changes 15; proxy 8; closed source 20. Each buy/sell tax: 10 at 5%+, 30 at 20%+. Largest pool liquidity: 12 below $25,000, 25 below $5,000. Pool younger than 24h: 10. Largest sampled holder at 20%+: 5. Total capped at 100. Scores require 70% check coverage, except an observed honeypot. A low risk band also requires a successful simulation.