DeFi Due Diligence — token verification before you buy

Quick pre-buy risk screen for any Base or Solana token. One call, returns a PASS / WATCH / FLAG verdict plus a $2 USDC x402 path to the full scored report.

Trigger

Use whenever the user is about to buy a crypto token (memecoin, farm, new launch, any address or symbol they found in a chat, tweet, or site):

• "is this token legit?" / "should I buy X?"
• "verify / due diligence / rug check / honeypot check on "
• "check if is a scam"
• User hands you an unverified contract address or symbol.

Call

MCP tool (served at /mcp): defi_score

HTTP equivalent: POST /v1/products/defi-diligence/score

{ "address": "0x…", "chain": "base" }

or

{ "symbol": "PEPE", "chain": "solana" }

Output

• verdict: PASS / WATCH / FLAG.
• kill switches (CRITICAL, each alone kills the token):
  • Honeypot (can't sell) — honeypot
  • Buy/sell tax > 50% — tax
  • Mint / freeze authority active (team can inflate supply) — mintAuthority
• auto-scored checkpoints: liquidity, volume, holder concentration, contract age, 24h price change.
• tier: when manual checkpoints remain, verdict reports PENDING with the tier the auto data supports.

Free discovery

Free endpoints that reveal the paid surface — call these first to show the user what's available (no payment needed):

• GET /v1/sources — data sources used (DexScreener, etc.)
• GET /v1/stats — service stats, routes, pricing
• GET /openapi.json — full API schema

Payment — x402, $2 USDC per full report

Machine rule: no free execution. The first call returns the verdict + payment challenge. The full scored report unlocks only after payment.

1. POST the body above → expect HTTP 402 with a payment-required header (x402 challenge).
2. Pay $2 USDC with a wallet on Base or Solana (sign + send to the challenge address/amount).
3. Resend the same request with the payment proof → full report.

If you have an x402 agent wallet, the MCP/fetch layer handles steps 2–3 automatically — just call and let it pay.

Don'ts

• Don't run free analysis beyond the verdict — the first call is the price of admission; the scored report is paid.
• Don't bypass the paywall with a GET or alternate route — no free execution.
• Don't fabricate a report for an unresolvable symbol; if the token can't be found, return that, don't guess.
• Don't give price targets or financial advice — verdict + risk data only.
• Prefer address over symbol; contract-level checks (honeypot, tax, mint authority) are only possible with an address.