WalletTriage
GET api.wallettriage.com/scan
Why an agent can trust this route.
Sonar evidence is advisory. Paid delivery is shown as verified only when paid probes are available; otherwise route estimates use the unpaid handshake as a clearly labeled proxy.
Observed outcomes
WalletTriage — real-time wallet risk check: dangerous ERC20 approvals cross-referenced with a live exploit threat feed. Returns risk_score (0-100), risk_level and actionable findings.
Resource: api.wallettriage.com/scan
Network: eip155:8453 · Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 · Pay to: 0x93835CF2bD459e72B577Ed944E33578d8529Dacc
Payment methods: — · Last validation: 2026-09-13 23:06:32.232+00
{
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"address"
],
"properties": {
"chain": {
"enum": [
"eth",
"base",
"polygon",
"arbitrum",
"optimism",
"bsc",
"avalanche"
],
"type": "string",
"description": "Chain to scan (Moralis name). Defaults to eth if omitted. One of: eth, base, polygon, arbitrum, optimism, bsc, avalanche."
},
"address": {
"type": "string",
"description": "EVM wallet address to assess (0x-prefixed, 40 hex chars)."
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"required": [
"address",
"chain",
"risk_score",
"risk_level",
"findings",
"stateless"
],
"properties": {
"chain": {
"type": "string"
},
"address": {
"type": "string"
},
"caveats": {
"type": "array",
"items": {
"type": "string"
},
"description": "Present when coverage was limited (e.g. live feed tracking 0 active exploit entities). Absent = no caveats."
},
"summary": {
"type": "object"
},
"findings": {
"type": "array",
"items": {
"type": "object"
},
"description": "Actionable findings (medium+); worst-first."
},
"stateless": {
"type": "boolean"
},
"checked_at": {
"type": "string"
},
"risk_level": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"risk_score": {
"type": "number",
"description": "0-100; higher is riskier."
},
"threat_feed": {
"type": "object",
"description": "Provenance of the live exploit feed this verdict was evaluated against: state (ok|stale|missing|error), updated_at, entities. A degraded feed is refused with 503 BEFORE payment; paid responses always disclose feed state."
}
}
}
}
},
"paymentRequirements": [
{
"raw": {
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x93835CF2bD459e72B577Ed944E33578d8529Dacc",
"amount": "10000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x93835CF2bD459e72B577Ed944E33578d8529Dacc",
"scheme": "exact",
"network": "eip155:8453",
"amountAtomic": "10000"
}
]
}Source catalog records are retained separately from live endpoint observations. Sonar score, uptime, and latency are advisory metrics. CDP indexing is not inferred from validation.