HostDeFi

aid: hostdefi
name: HostDeFi
description: 'HostDeFi is a non-custodial Solana token-risk service that scans a mint before a purchase — mint and freeze
  authority state, liquidity depth and lock status, holder concentration, dangerous Token-2022 extensions, sell simulation
  and contract flags. The public contract is an OpenAPI 3.1 document of 26 operations served from hostdefi.com/api with API-key
  authentication. HostDeFi also exposes an x402 machine-payment surface: an authority quick-check endpoint that returns HTTP
  402 with a signed payment challenge, priced in USDC and payable on either Solana or Base, so an agent can buy a single check
  without an account.'
type: Index
url: https://raw.githubusercontent.com/api-evangelist/hostdefi/refs/heads/main/apis.yml
created: '2026-08-21'
modified: '2026-08-21'
specificationVersion: '0.23'
tags:
- Solana
- Blockchain
- Token Risk
- Security
- DeFi
- x402
- Agent Commerce
- Crypto
- MCP
- Machine Payments
tags_raw:
- solana
- token risk
- defi
- rug pull
- x402
apis:
- aid: hostdefi:hostdefi-token-risk-api
  name: HostDeFi Token Risk API
  description: Token risk scanning for Solana mints — authority state, liquidity, holder concentration, Token-2022 extension
    flags and sell simulation. 26 operations, API-key authentication.
  humanURL: https://hostdefi.com/docs/api/
  baseURL: https://hostdefi.com/api
  tags:
  - Solana
  - Token Risk
  - Security
  properties:
  - type: OpenAPI
    url: openapi/hostdefi-token-risk-api-openapi.yml
  - type: Documentation
    url: https://hostdefi.com/docs/api/
  - type: APIReference
    url: https://hostdefi.com/api/v1/openapi.json
  - type: FinOps
    url: finops/hostdefi-x402-challenge.json
  - type: MCPServer
    url: mcp/hostdefi-tools-list.json
common:
- type: MCPServer
  url: mcp/hostdefi-tools-list.json
- type: FinOps
  url: finops/hostdefi-x402-manifest.json
- type: LLMsTxt
  url: llms/hostdefi-llms.txt
- type: Website
  url: https://hostdefi.com
- type: DeveloperPortal
  url: https://hostdefi.com/docs/api/
maintainers:
- FN: HostDeFi
  email: apisio@hostdefi.com
  url: https://hostdefi.com
x-provenance:
  added: '2026-08-21'
  method: searched
  source: https://hostdefi.com/llms.txt
  note: 'Submitted via apis.io/add on 2026-08-20 (twice, as "HostDeFi" and "HostDeFi Token Risk API" — one provider, two records
    at the gate). The submitted APIs.json URL, https://hostdefi.com/apis.json, returns 404 against a control that also 404s,
    so the 404 is real; that is a bad pointer in the submission, not an absent surface. NO API-CATALOG IS RECORDED, DELIBERATELY.
    https://hostdefi.com/.well-known/api-catalog returns HTTP 200, but the body is the site''s HTML homepage, not a linkset.
    Recording it as an APICatalog would hand HostDeFi credit for a discovery document it does not serve. The path answering
    200 is not the same as the artifact existing. The x402 surface was verified live. GET /api/v1/x402/authority/solana/{mint}
    without a payment header returns HTTP 402 with x402Version 1 and two `accepts` entries — USDC on Solana and on Base, maxAmountRequired
    5000, 60-second timeout, with a named feePayer. The saved challenge in finops/ is that response verbatim. The REST API
    was probed at /api/v1/health and returned 200. One thing for the provider rather than for us: the published contract lists
    a second server, https://awake-integrity-production-faa0.up.railway.app, which also answers /v1/health with 200. That
    looks like a staging backend reachable from a production specification.

    CORRECTION, recorded because it matters more than the finding. This record was first built by hand from llms.txt plus
    probed paths, and it UNDER-reported the provider. The Add-API gate''s own stub named two artifacts the hand pass missed,
    and both are real: a hosted MCP server at https://hostdefi.com/api/v1/mcp, which answers tools/list anonymously with NINE
    tools, and an x402 discovery manifest at https://hostdefi.com/.well-known/x402 serving application/json with x402Versions
    [1,2], a payTo address and a facilitator. The MCP tools carry their own prices in their descriptions: scan_token and get_x402_pricing
    are free, token_risk_verdict $0.01/call, pregrad_signals $0.03, radar_alerts $0.01, x402_provider_risk $0.02, swap_evm_quote
    $0.01, swap_evm_price $0.002, and buy_api_key $5 as a single payment that mints a 30-day Agent-plan key -- an agent can
    buy its own credential. Guessing paths and reading llms.txt was not sufficient here; the gate''s discovery was better
    than the hand pass.'