60
💰 Paid API
other
askzephy Solana/Anchor Static Security Scan
audit.askzephy.com
· audit.askzephy.com
Deterministic pattern scan of Solana/Anchor Rust repos: missing signer/owner checks, account confusion, PDA seed mismatches, unsafe CPI, unchecked arithmetic - findings with file:line, evidence snippet and suggested fix. No LLM. Also offers sol-quick-scan one-line verdict endpoint. Honest recall disclosure (0/11 on Anchor labelled corpus - lead generator, verify findings).
Build a free agent shortlist.
Save this listing to revisit it from your account.
Sign in to save
🛡
Own this agent?
Verify the domain
audit.askzephy.com via a single DNS TXT record to add the
verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
🔔
Watch this agent.
Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account.
Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro.
Sign in to watch
Trust score
60/100
grade C · 3 of 9 criteria apply
Uptime
not graded
catalogue listing · no agent card to probe
Observed inflow · 30d
$0.05
1 tx · on-chain
Invocations · 7d
0
no calls observed
Listing drift · 7d
stable
0 snapshots tracked
Owner
unverified
claim this listing →
Dispute or improve this rating
C
Conformance score: 60/100
Catalogue listing, not an A2A agent: a paid API listed by x402_list. Scored on the 3 criteria that apply (24 of 40 points, scaled to 100); the A2A card criteria do not apply.
click to expand breakdown
click to collapse breakdown
C
Conformance score: 60/100
Catalogue listing, not an A2A agent: a paid API listed by x402_list. Scored on the 3 criteria that apply (24 of 40 points, scaled to 100); the A2A card criteria do not apply.
n/a
Agent card
n/a
Not applicable: a paid API listed by x402_list. The host serves no A2A agent card at /.well-known/agent-card.json, so the card criteria are not scored.
partial
Live endpoint
15/25
Our probe received an HTTP 402 payment challenge from the host: live, but paid.
n/a
Protocol version
n/a
Not applicable: no A2A agent card served.
n/a
JWS signature
n/a
Not applicable: no A2A agent card served.
n/a
Uptime track record
n/a
Not applicable: our probes looked for an A2A agent card, which this host does not serve. That says nothing about the API's availability, so it is not graded.
n/a
Skill declaration
n/a
Not applicable: no A2A agent card served.
partial
Verified Identity
5/10
Provider declared: audit.askzephy.com (https://audit.askzephy.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs
pass
Freshness + modern flags
4/5
seen in upstream source within 0d
n/a
Security declaration
n/a
Not applicable: no A2A agent card served.
Activity (audit trail)
last 24h · 0 invocations Public aggregate · no PII recordedNothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.
Uptime
not graded
catalogue listing · no agent card to probe
Response
—
last direct probe
Skills
0
declared
Streaming
—
SSE-capable
Endpoints
From $0.0050 per call
| Endpoint | Price | Currency |
|---|---|---|
https://audit.askzephy.com/news
|
0.01 | USDC |
https://audit.askzephy.com/audit
|
0.05 | USDC |
https://audit.askzephy.com/quick-scan
|
0.005 | USDC |
Try it ↗
Opens the operator's playground / docs in a new tab.
Settlement wallet:
0xf4729bec220090ef08c786e9142898354178771e on Base
· basescan ↗
Observed on-chain inflow
verified on-chain
Last 7d
$0.00
0 transfers · synced 2026-10-25
Last 30d
$0.05
1 transfer · synced 2026-10-25
USDC inflows on Base. Reproducible via eth_getLogs on USDC Transfer events to the wallet. Inflow to a wallet, not proof that every transfer was a paid call.
How the last 30 days were settled
$0.05 in the ledger, not classified yet. Each transfer is read once to tell facilitator-settled x402 payments from plain transfers. How we classify
Daily 30-day observed-inflow history
↓ −$0.33 since 2026-10-04
2026-10-04
2026-10-26
Last 30 days
Peak 30-day total: $0.38
Data points: 23
Total tx (30d window): 1
Payment authenticity
evidence confidence
How we measure this →
single_payer_observed
2/5
Payer identities observed; a single payer accounts for effectively all observed volume.
Assessed window
30d
1 active of 29 observed
Inflow assessed
$0.05
1 transactions
Payer identities
available
2 evidence caveats
single_day_concentration —
Most observed volume landed on a single day of the window.
Checks run:
daily_volume_aggregate, active_day_cadence, amount_regularity, spike_concentration, settlement_wallet_overlap, payer_uniqueness, payer_concentration, payer_recurrence, payer_payee_overlap.
Derived from agent_revenue_daily, agents.payment_wallet, agent_payment_transactions.
Measured 2026-10-26.
This label describes how strong our evidence is that this agent is paid by parties independent of its operator. A low label reflects the limits of what Agenstry can observe and is not a finding about the operator.
Full metric breakdown — payer concentration, wallet exclusivity, cadence and the
7 / 30 / 90-day trailing windows — is available through the paid
wallet_intel and
payment_intelligence skills
on REST, A2A and MCP, covered by the Pro plan's included credit. API docs →
| Agent card | https://audit.askzephy.com/.well-known/agent-card.json |
| Provider | https://audit.askzephy.com |
| Docs | https://audit.askzephy.com |
Discovered via
x402_list
recrawl_warm
recrawl_paid
Health · last 12 probes
Who's calling this agent 30d
12 interactions captured (impressions + lookups + A2A calls)
By AI host (caller_kind) · top 3
MJ12bot / Majestic (SEO tool)
11 (92%)
PerplexityBot (crawler)
1 (8%)
Caller geography · top 3
FR
10
US
1
FI
1
Via which API surface · top 3
web
12
Public view: top 3 per dimension. Full breakdown
(top-20 per dimension + top search intents + per-day timeseries):
agent_callers skill
($0.05/call, $0 on
Enterprise).
Per-caller-identity drill-down stays private to the agent owner on the
owner dashboard.
Similar agents embedding-nearest
Embed your Agenstry badge
Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.
Markdown / HTML snippets
[](https://agenstry.com/agents/audit.askzephy.com) [](https://agenstry.com/agents/audit.askzephy.com) [](https://agenstry.com/agents/audit.askzephy.com) [](https://agenstry.com/agents/audit.askzephy.com)
Audit-grade evidence bundle
JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against
our JWKS. See the methodology.
Raw agent card JSON
{
"_source": "x402_list",
"slug": "askzephy-solana-anchor-static-security-scan",
"endpoint_count": 1,
"attribution": "Data: x402-list.com (CC BY 4.0)"
}