# hexscan.xyz > Smart contract risk triage API — pay-per-scan via x402 Payment Protocol ## Service - URL: https://hexscan.xyz - Method: POST /scan - Input: {"address": "0x...", "chain": "ethereum|base|arbitrum|optimism|polygon|bsc|avalanche"} - Output: JSON with riskScore (0-100), riskLevel, honeypot detection, tax analysis, source verification, heuristic findings - Price: $0.10 USDC per scan (Base mainnet, EIP-3009, gasless for buyer) - Payment: x402 Payment Protocol — send POST without payment to get 402 challenge, sign and resend to pay - No API keys, no accounts, no registration ## Discovery - Bazaar extension included in 402 response - CDP facilitator for verify/settle ## Limitations - Not a security audit. Automated risk triage only. - Heuristics and third-party data (GoPlus, Sourcify). May miss novel risks. - No warranty. Use at your own risk.