HexScan

HexScan Scan API

The Scan API from HexScan — 1 operation(s) for scan.

GitHub OpenAPI

Operations 2

POST /scan Scan a token contract for security risks #
GET /scan Get payment challenge (same as POST without body) #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/hexscan-xyz/openapi/hexscan-xyz-scan-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/hexscan-xyz:hexscan-xyz-scan-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

hexscan-xyz-scan-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: HexScan Token Security Scanner Scan API
  version: 1.0.0
  description: Is this token safe to buy? Honeypot detection, rug-pull and scam check for any ERC-20 token. Risk score 0-100 from our on-chain checks plus GoPlus. Not an audit. $0.10/scan via x402.
  contact:
    name: HexScan
    url: https://hexscan.xyz
    email: rowan@basecradle.com
servers:
- url: https://hexscan.xyz
tags:
- name: Scan
paths:
  /scan:
    post:
      summary: Scan a token contract for security risks
      description: Check any ERC-20 token for honeypot, rug-pull, tax analysis, source verification, and on-chain checks. Risk score 0-100 from our on-chain checks plus GoPlus. Not an audit.
      x402:
        price: $0.10 USDC
        network: eip155:8453
        asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
        payTo: '0x841Ef35b7b7ee4C820BFF040369a8Ade4741b45d'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                address:
                  type: string
                  description: ERC-20 contract address (0x...)
                  example: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48'
                chain:
                  type: string
                  description: Blockchain name
                  enum:
                  - ethereum
                  - base
                  - arbitrum
                  - optimism
                  - polygon
                  - bsc
                  - avalanche
                  example: ethereum
              required:
              - address
              - chain
      responses:
        '200':
          description: Risk triage result
          content:
            application/json:
              schema:
                type: object
                properties:
                  riskScore:
                    type: integer
                    minimum: 0
                    maximum: 100
                    description: Composite risk score
                  riskLevel:
                    type: string
                    enum:
                    - MINIMAL
                    - LOW
                    - MEDIUM
                    - HIGH
                    - CRITICAL
                  tokenName:
                    type: string
                    nullable: true
                  tokenSymbol:
                    type: string
                    nullable: true
                  findings:
                    type: array
                    items:
                      type: object
                      properties:
                        severity:
                          type: string
                          enum:
                          - LOW
                          - MEDIUM
                          - HIGH
                          - CRITICAL
                        title:
                          type: string
                        description:
                          type: string
                        confidence:
                          type: number
                        source:
                          type: string
                  summary:
                    type: string
                  settleTx:
                    type: string
                    nullable: true
                    description: On-chain settlement transaction hash
        '400':
          description: Invalid payment format
        '402':
          description: Payment required -- x402 challenge in headers
        '500':
          description: Internal error
      tags:
      - Scan
      operationId: postScan
      x-operation-id-source: derived
    get:
      summary: Get payment challenge (same as POST without body)
      responses:
        '402':
          description: Payment required -- x402 challenge
      tags:
      - Scan
      operationId: getScan
      x-operation-id-source: derived