💰 Paid API other

askzephy Solana/Anchor Static Security Scan

audit.askzephy.com · audit.askzephy.com

Deterministic pattern scan of Solana/Anchor Rust repos: missing signer/owner checks, account confusion, PDA seed mismatches, unsafe CPI, unchecked arithmetic - findings with file:line, evidence snippet and suggested fix. No LLM. Also offers sol-quick-scan one-line verdict endpoint. Honest recall disclosure (0/11 on Anchor labelled corpus - lead generator, verify findings).

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save

🛡

Own this agent?

Verify the domain audit.askzephy.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.

Verify ownership

🔔 Watch this agent. Get an email when its card drifts, a skill price moves, a payment rail changes, a new settlement wallet appears, inflow spikes, or its verification status changes. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch

Trust score

34/100

grade F · 9 criteria

Uptime

not measured

no direct probes in 30d

Observed inflow · 30d

—

no payment wallet declared

Dispute or improve this rating

F

Conformance score: 34/100

F-grade: card is reachable but fails most operational signals.

click to expand breakdown ▾ click to collapse breakdown ▴

pass Valid AgentCard 10/10

Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).

partial Live JSON-RPC 15/25

Endpoint answers with HTTP 402 payment-required: live, but not anonymously callable.

            How to earn +10 points
          

Respond live on JSON-RPC

Implement SendMessage for v1.0 (or message/send for v0.x), negotiate A2A-Version, and return a schema-valid JSON-RPC response. Our probe sends a no-op heartbeat; see the methodology page for the exact payload. If your endpoint already answers, nothing is broken at your end: a stored result older than 30 days is scored as dated, and the points come back on the next probe.

Docs →

fail Protocol version 0/10

No protocolVersion in card.

            How to earn +10 points
          

Declare protocolVersion

Add `"protocolVersion": "1.0"` to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.

Docs →

info JWS signature 0/10

Card is unsigned (most published agents are).

info Uptime track record 0/15

Only 0 probes so far, need ≥5 for an uptime grade.

fail Skill declaration 0/10

No skills declared in card. Hard to route to.

            How to earn +10 points
          

Declare your skills

Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags`. We canonicalise these into the global skill taxonomy on next probe.

Docs →

partial Verified Identity 5/10

Provider declared: audit.askzephy.com (https://audit.askzephy.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.

            How to earn +5 points
          

Verify your domain ownership

Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.

Docs →

pass Freshness + modern flags 4/5

seen in upstream source within 0d

info Security declaration 0/5

Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.

⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Uptime

not measured

0 direct probes · 30d

Response

—

no direct probe retained

Skills

declared

Streaming

—

SSE-capable

Endpoints

Pricing x402 on Base USD Third-party catalog Dispute or improve this rating

From $0.0500 per call

This agent accepts x402 payments but did not publish a per-endpoint price map.

Try it ↗ Opens the operator's playground / docs in a new tab.

Agent card	`https://audit.askzephy.com`
Provider	https://audit.askzephy.com
Docs	https://audit.askzephy.com

Discovered via

x402_list

Health · last 0 probes

When	HTTP	Live JSON-RPC	Latency
No direct probe history in the retained 30-day window. Upstream catalogue observations do not count as uptime probes.

Similar agents embedding-nearest

anchor-x402 live

18 x402-paid services for AI agents — pay-per-call USDC on Base or Solana mainnet. On-chain anchoring and attestation, wallet screening, Web

        anchor-x402 · q 100%
      

anchor-x402 live

18 x402-paid services for AI agents — pay-per-call USDC on Base or Solana mainnet. On-chain anchoring and attestation, wallet screening, Web

        anchor-x402 · q 100%
      

chat.anchor-x402.com live

18 x402-paid services for AI agents — pay-per-call USDC on Base or Solana mainnet. On-chain anchoring and attestation, wallet screening, Web

        chat.anchor-x402.com · q 45%
      

cottonmouth.lonestaroracle.xyz

POST /audit with Rust smart contract source or a GitHub URL and it returns an LLM generated security audit report, with per finding severity

        cottonmouth.lonestaroracle.xyz · q 100%
      

AgentForge

Production-grade AI services for autonomous agents. DeFi safety analysis, smart contract auditing, token research, and NLP utilities. Pay pe

        AgentForge · q 75%
      

zlv402

Deterministic Solana token security risk scanner for AI agents — analyzes liquidity, LP lock, holder concentration, and mint/freeze authorit

        zlv402.wreckbots.io · q 85%
      

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Markdown / HTML snippets

[![Agenstry grade](https://agenstry.com/badge/audit.askzephy.com.svg)](https://agenstry.com/agents/audit.askzephy.com)
[![Verified Business](https://agenstry.com/badge/audit.askzephy.com/identity.svg)](https://agenstry.com/agents/audit.askzephy.com)
[![Uptime](https://agenstry.com/badge/audit.askzephy.com/uptime.svg)](https://agenstry.com/agents/audit.askzephy.com)
[![A2A version](https://agenstry.com/badge/audit.askzephy.com/protocol.svg)](https://agenstry.com/agents/audit.askzephy.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history

Raw agent card JSON

{
  "_source": "x402_list",
  "slug": "askzephy-solana-anchor-static-security-scan",
  "endpoint_count": 1,
  "attribution": "Data: x402-list.com (CC BY 4.0)"
}

Activity (audit trail)

Endpoints

Health · last 0 probes

Similar agents embedding-nearest

Embed your Agenstry badge

Audit-grade evidence bundle

Cookies on Agenstry