---
name: token-risk-x402
description: >-
  Use when the agent must pre-screen a crypto token before sizing, quoting or
  executing a trade on Solana or Base: "check token risk", "is this token safe",
  "rug check", "honeypot", "mint authority", "LP locked". Paid x402 API with a
  free tier, no API key needed.
version: 1.0.0
---

# Token risk x402 skill

Pre-trade token safety checks for AI agents. Two tools on one origin,
`https://api.ogenalabs.com`. No API key. No signup. Payment is x402 USDC
per call, which your wallet or agent framework settles automatically.

## What x402 payment looks like

x402 reuses HTTP 402 Payment Required. The flow is always:

1. POST the endpoint with JSON body, no payment headers.
2. Read the 402 body: `accepts[]` lists price, asset, network and `payTo`.
3. Sign the payment with a standard x402 v2 client (EIP-3009 authorization
   on Base, signed transfer on Solana) and base64-encode the PaymentPayload JSON.
4. Retry the same POST with a `payment-signature` header carrying that base64 payload.
5. Read the 200 body plus the base64 `PAYMENT-RESPONSE` receipt header.
   Keep the `attestation.hmac` for your audit trail.

Free tier: the deep report allows 3 free calls per caller per 24 hours.
Send any stable `x-client-id` header to track your quota
(`x-free-tier-remaining` is not used; count your own calls).

## Tool 1: safety ping ($0.005)

```
POST https://api.ogenalabs.com/api/token-risk/v1/ping
Content-Type: application/json

{"chain": "solana", "address": "<mint>"}
```

Response: `safe` true, false or null (null means unknown, size zero),
`mintAuthorityOff`, `lpLocked`, `pairs`, `priceUsd`, `fetchedAt`,
`cacheHit`. Use this as the cheap gate on every candidate mint.

## Tool 2: deep risk report ($0.04)

```
POST https://api.ogenalabs.com/api/token-risk/v1/deep
Content-Type: application/json
X-Client-Id: <stable-caller-id>

{"chain": "solana", "address": "<mint>"}
```

Response: `verdict` allow, caution or avoid, `reasons` (max 2),
`score` 0-100 (higher is riskier), `band`, `priceUsd`,
`liquidityUsd`, `attestation` (`digest` plus `hmac`), `fetchedAt`,
`free` (true while inside your free tier).

## Rules for spending

- Ping every candidate mint first. Only run deep on mints that pass ping
  or that back an order worth more than $100.
- Treat `null` and `caution` as size zero. Never average a caution away.
- Base chain has no RugCheck coverage: scores skew high there by design.
  Solana coverage is full.
- Verify the HMAC offline against the published key before wiring
  payouts to a verdict.