# Token Security API > Live smart-contract risk and safety analysis for crypto tokens and wallet addresses — the on-chain due-diligence check to run before you buy a token or interact with an address, powered by the public GoPlus Security data, no key, nothing stored. The token endpoint scans an ERC-20-style contract on any supported chain and returns whether it is a honeypot, its buy and sell tax, whether it is mintable or has a hidden or privileged owner who can pause trading or take back ownership, whether it is open-source or a proxy, and its holder and LP-holder counts. The address endpoint screens a wallet address against twenty risk signals — cybercrime, money laundering, phishing, sanctions, stealing attacks, honeypot-related addresses and more — and reports exactly which, if any, are flagged. The chains endpoint lists the 40+ supported blockchains. Catch scam tokens, honeypots and tainted addresses before they cost you. This is the real-time contract-security and risk-screening cut of crypto — distinct from the historical exploit database, the price and the on-chain APIs in the catalogue. ## Authentication All requests require your oanor API key in the `x-oanor-key` header. Get one at https://www.oanor.com/developer/keys. ```bash curl -H "x-oanor-key: oanor_live_…" "https://api.oanor.com/tokensecurity-api/..." ``` ## Pricing - **Free** (Free) — 13,000 calls/Mo, 3 req/s - **Builder** ($10/Mo) — 175,000 calls/Mo, 10 req/s - **Pro** ($28/Mo) — 780,000 calls/Mo, 28 req/s - **Scale** ($64/Mo) — 2,750,000 calls/Mo, 65 req/s ## Endpoints ### Token #### `GET /v1/token` — Token contract security scan **Parameters:** - `contract` (query, required, string) — Token contract address Example: `0xdac17f958d2ee523a2206206994597c13d831ec7` - `chain` (query, optional, string) — GoPlus chain id (default 1=Ethereum) Example: `1` **Example:** ```bash curl -H "x-oanor-key: $KEY" \ "https://api.oanor.com/tokensecurity-api/v1/token?contract=0xdac17f958d2ee523a2206206994597c13d831ec7&chain=1" ``` **Response:** ```json { "data": { "chain": "1", "source": "GoPlus", "buy_tax": 0, "contract": "0xdac17f958d2ee523a2206206994597c13d831ec7", "is_proxy": false, "sell_tax": 0, "is_in_dex": true, "cannot_buy": false, "token_name": "Tether USD", "is_honeypot": false, "is_mintable": true, "hidden_owner": false, "holder_count": 14781635, "token_symbol": "USDT", "total_supply": 97070655229.72336, "is_anti_whale": false, "owner_address": "0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828", "self_destruct": false, "is_blacklisted": true, "is_open_source": true, "is_whitelisted": false, "cannot_sell_all": null, "lp_holder_count": null, "lp_total_supply": null, "trading_cooldown": false, "transfer_pausable": true, "slippage_modifiable": true, "owner_change_balance": true, "honeypot_same_creator": false, "can_take_back_ownership": false }, "meta": { "timestamp": "2026-06-11T16:46:44.139Z", "request_id": "9fca1541-5274-4f97-a4f6-c6aa93486529" }, "status": "ok", "message": "Token security retrieved successfully", "success": true } ``` ### Address #### `GET /v1/address` — Wallet address risk screening **Parameters:** - `address` (query, required, string) — Wallet address Example: `0xdAC17F958D2ee523a2206206994597C13D831ec7` - `chain` (query, optional, string) — GoPlus chain id (default 1) Example: `1` **Example:** ```bash curl -H "x-oanor-key: $KEY" \ "https://api.oanor.com/tokensecurity-api/v1/address?address=0xdAC17F958D2ee523a2206206994597C13D831ec7&chain=1" ``` **Response:** ```json { "data": { "note": "flagged lists the set risk signals; an empty list means no risk signals were found for this address.", "chain": "1", "flags": { "mixer": false, "reinit": false, "fake_kyc": false, "gas_abuse": false, "cybercrime": false, "fake_token": false, "sanctioned": false, "blacklist_doubt": false, "financial_crime": false, "stealing_attack": false, "contract_address": true, "money_laundering": false, "phishing_activities": false, "blackmail_activities": false, "darkweb_transactions": false, "fake_standard_interface": false, "honeypot_related_address": false, "malicious_mining_activities": false, "number_of_malicious_contracts_created": false }, "risky": false, "source": "GoPlus", "address": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "flagged": [], "data_source": null, "is_contract": true }, "meta": { "timestamp": "2026-06-11T16:46:44.686Z", "request_id": "026d3121-e930-44d7-b765-4f4dc52e063e" }, "status": "ok", "message": "Address security retrieved successfully", "success": true } ``` ### Chains #### `GET /v1/chains` — Supported blockchains **Example:** ```bash curl -H "x-oanor-key: $KEY" \ "https://api.oanor.com/tokensecurity-api/v1/chains" ``` **Response:** ```json { "data": { "count": 42, "chains": [ { "id": "1", "name": "Ethereum" }, { "id": "56", "name": "BSC" }, { "id": "42161", "name": "Arbitrum" }, { "id": "137", "name": "Polygon" }, { "id": "solana", "name": "Solana" }, { "id": "204", "name": "opBNB" }, { "id": "324", "name": "zkSync Era" }, { "id": "59144", "name": "Linea Mainnet" }, { "id": "8453", "name": "Base" }, { "id": "5000", "name": "Mantle" }, { "id": "130", "name": "Unichain" }, { "id": "48900", "name": "Zircuit Mainnet" }, { "id": "534352", "name": "Scroll" }, { "id": "10", "name": "Optimism" }, { "id": "43114", "name": "Avalanche" }, { "id": "25" …(truncated, see openapi.json for full schema) ``` ### Meta #### `GET /v1/meta` — Service metadata **Example:** ```bash curl -H "x-oanor-key: $KEY" \ "https://api.oanor.com/tokensecurity-api/v1/meta" ``` **Response:** ```json { "data": { "note": "chain is a GoPlus chain id (1=Ethereum, 56=BSC, 137=Polygon, 42161=Arbitrum, solana). Booleans come from the upstream's 0/1 flags; taxes are fractions (0.05 = 5%).", "source": "GoPlus Security (api.gopluslabs.io/api/v1, live)", "service": "tokensecurity-api", "endpoints": { "GET /v1/meta": "This document.", "GET /v1/token": "Token contract security — honeypot, taxes, mintable, owner privileges, holders (chain=1&contract=0x...).", "GET /v1/chains": "Supported blockchains (id, name).", "GET /v1/address": "Wallet risk screening across 20 signals — which are flagged (chain=1&address=0x...)." }, "description": "Live smart-contract risk and safety analysis for crypto tokens and wallet addresses, from GoPlus Security. The token endpoint scans a token contract on any supported chain and returns whether it is a honeypot, its buy/sell tax, whether it is mintable or has a privileged/hidden owner who can pause trading or reclaim ownership, whether it is open-source or a proxy, and holder/LP counts. The address endpoint screens a wallet against twenty risk signals (cybercrime, money laundering, phishing, sanctions, stealing attacks, honeypot-related…) and reports which are flagged. The chains endpoint lists supported blockchains. Live, no key, nothing stored. The real-time contract-security / risk-screening cut of crypto — distinct from the historical exploit-da …(truncated, see openapi.json for full schema) ``` --- Marketplace page: https://www.oanor.com/api/tokensecurity-api OpenAPI spec: https://www.oanor.com/api/tokensecurity-api/openapi.json