NewBotLabor Agent Preflight

Endpoints (10 live)

• GET /api/celo/token-check — Celo ERC-20 risk check from live chain state. Returns a single verdict (LOW_RISK/CAUTION/HIGH_RISK, summary, oneLiner, reasons) plus market data (DexScreener/GeckoTerminal). Covers owner/renounced, paused, supply, known stablecoins (USDC, USDT, USAT, USDm), proxies (EIP-1967/1822/OZ/1167) with implementation analysis: verified source, risky selectors, upgrade authority (EOA vs Safe/timelock), forwarding to unknown targets. Use before accepting or paying in a token on Celo. (0.003 USDC on Base)
• GET /api/x402/preflight (0.002 USDC on Base)
• GET /api/read (0.002 USDC on Base)
• GET /api/pkg/advisories (0.002 USDC on Base)
• GET /api/base/token-check (0.003 USDC on Base)
• GET /api/base/token-check — Base ERC-20 risk check from live chain state. Returns a single verdict (LOW_RISK/CAUTION/HIGH_RISK, summary, oneLiner, reasons) plus market data (price, liquidity, volume, pools; DexScreener with GeckoTerminal fallback). Covers owner/renounced, paused, supply, proxies (EIP-1967/1822/OZ/1167) with implementation analysis: verified source, mint/pause/blacklist/fee/upgrade selectors, upgrade authority (EOA vs Safe/timelock), forwarding to unknown targets. Use before trading a token. (0.003 USDC on Base)
• GET /api/base/wallet-check — Base wallet snapshot for an address: ETH + USDC balances, nonce/tx count, contract-vs-EOA, and recent USDC Transfer log counts (~50k blocks). Use before paying or escrowing to an unknown address. (0.002 USDC on Base)
• GET /api/pkg/advisories — Verifiable package security status: known vulnerabilities (OSV.dev: GHSA, PYSEC, RUSTSEC, GO, CVE aliases) for an npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems or Packagist package@version, with severity, fixed-in versions, latest registry version and isLatest. Each upstream response is returned with its exact request, fetchedAt and sha256 of the raw bytes so you can re-check after paying; every result's hash is also in the free public log /digests. Omit version to check the latest release. (0.002 USDC on Base)
• GET /api/read — Fetch a public web page and return clean markdown (title, description, main text, links), boilerplate removed. Includes provenance: fetchedAt (ISO UTC), upstream ETag and Last-Modified (when sent), and contentSha256 of the exact upstream body bytes. Cheap web read for LLM agents. (0.002 USDC on Base)
• GET /api/x402/preflight — x402 pre-payment check: fetch any x402 endpoint, decode its 402 (v1 or v2), verify the asset is canonical USDC, price in USD vs your budget, payTo, testnet/mainnet, discovery metadata. Call before paying an unknown endpoint. (0.002 USDC on Base)