Skip to main content
GET
Returns a composite risk score (0–100) for any ERC-20 token, aggregated from 10 on-chain and off-chain signals. Use this to screen tokens before display, trading, or sweep operations.
Supported chains: ethereum, arbitrum, base, optimism, polygon, bsc. HyperEVM and Solana are not supported by this endpoint.

Auth

Optional X-API-Key header. Unauthenticated requests share a stricter rate limit.

Cache

Results are cached for 1 hour per (address, chain) pair. Newly deployed tokens may show incomplete data until signals stabilize.

Path parameters

string
required
ERC-20 token contract address (42-character hex).

Query parameters

string
default:"ethereum"
required
Chain the token is deployed on. One of: ethereum, arbitrum, base, optimism, polygon, bsc

Risk levels

Signals

Simulates a buy and sell transaction pair. Detects if the sell is blocked by contract logic or reverts unconditionally.
Checks Etherscan/block explorer verification status. Unverified contracts receive a score penalty.
Detects mint, pause, blacklist, and upgradeable functions that give the owner unilateral control over the token supply or transfers.
Checks whether the primary liquidity pool LP tokens are locked in a time-lock contract. Unlocked liquidity = potential rug-pull risk.
Analyzes top-holder concentration. Score penalized when top 10 wallets hold > 80% of supply (excluding known burn/dead addresses).
Detects buy/sell tax via simulation. Taxes above 10% are flagged; above 30% are a strong red flag.
Measures total USD liquidity in the primary DEX pool. Low-liquidity tokens are more susceptible to price manipulation.
New tokens (< 7 days) receive a time-based penalty. Risk normalizes after 30 days of on-chain history.
Checks for linked website, Twitter/X, and Telegram in on-chain metadata or known registries. No social presence increases score.
Falls back to GoPlus Security API data when native signals are inconclusive. Weighted as a supporting signal, not primary.

Response fields

string
Contract address (lowercased)
string
Chain identifier
string
Token symbol
string
Token name
integer
Composite score 0–100 (higher = riskier)
string
safe, caution, or high
object
Per-signal breakdown.
boolean
Whether this result was served from the 1-hour cache
string
ISO 8601 timestamp