All tools / Token Safety

Token Safety

Observe dated Base contract signals, OFAC address matches and bounded public verification facts before deciding what further review is needed.

Read scope and schemas

Who it’s for

Agents and operators inspecting a Base token contract.

Price

Basic: 0.02 USDC. Deep: 0.05 USDC.

Paid calls use x402 with USDC on Base. Read the quote before authorizing payment; examples below do not pay automatically.

Know the limits

Assessment is incomplete. Sellability, full owner/mint/blacklist/proxy behavior, liquidity custody and locks, holders and qualified non-OFAC scam coverage remain unassessed. Never interpret this as safe-to-buy, a full audit or investment advice.

A 30-second integration

Examples use placeholders. Plain requests to paid tools return a payment challenge, not a paid result. Free Lint can perform an unpaid public probe. Inspect the response status and evidence scope before using any result.

curl

curl -i https://api.spendpreflight.com/v1/token-check \
  -H 'Content-Type: application/json' \
  -d '{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"}'

MCP

Connect to https://api.spendpreflight.com/mcp. Call the existing tool:

{
  "name": "check_token",
  "arguments": {
    "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
  }
}

SDK / JavaScript

Use standard fetch alongside the SpendPreflight SDK; the example does not invent a dedicated exported method.

// Node.js SDK integration: use your explicitly budgeted fetch.
// Plain fetch below never signs or pays. There is no dedicated
// spendpreflight SDK helper for this operation.
const response = await fetch('https://api.spendpreflight.com/v1/token-check', {
  method: 'POST', headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"})
});
console.log(response.status, await response.text());

Frequently asked questions

Does deep mean a complete audit?

No. Deep adds bounded public verification facts. The response still has assessment_complete:false and explicit unassessed areas.

Which chain is supported?

These contract signals support Base only. RPC failures and rate limits return unavailable rather than an invented assessment.

Authoritative OpenAPI schemas · What this service stores · Practical guides