devx-tokencheck

Token safety check from the terminal: a honeypot check, rug check and scam token verdict for one token on Base, Ethereum, Arbitrum, Optimism, Polygon, Robinhood Chain or Solana. It is a thin client for the DevX Token Check API, by Made by DevX.

npx devx-tokencheck 0x532f27101965dd16442E59d40670FaF5eBB142E4
npx devx-tokencheck <token-address> --chain ethereum --json

DevX Token Check: BRETT (Brett) on base
Verdict: SAFE  risk 0/100  confidence 0.95  grade BASED
No red flags in on-chain checks
Flags: trading_switch
Simulated trade: buy ok, sell ok
Liquidity: $2,256,996
Reasons:
  [info] Ownership renounced (owner() is the zero/dead address)
  [info] Simulated buy, transfer and sell on uniswap_v3 succeeded with no token tax
Free teaser. Quota: 9/10 left today (resets 2026-10-24T00:00:00.000Z).
Full report ($0.01, --pay) adds: honeypot taxes, pool, gas and revert reason, privileged_functions, holders, ...
Informational only, not financial advice.

Free and paid

• Free (default): 10 teaser checks per UTC day per IP, any token on any supported chain: verdict (safe / caution / danger), 0-100 risk score, confidence, flags, simulated buy/sell ok, liquidity and the top 3 reasons. Base USDC, WETH, DEGEN and AERO are free with the full result and use no quota.
• Paid full report: $0.01 USDC on Base per check, paid with x402. It adds every reason, real buy/sell/transfer tax from the simulated trade, privileged functions, holders, deployer, liquidity pools and source verification. Failed checks are not charged.
• To pay, set DEVX_PRIVATE_KEY (or EVM_PRIVATE_KEY) to a wallet key holding a little USDC on Base. No ETH is needed; the facilitator pays gas.
  • --pay skips the free tier and buys the full report.
  • With a key set, the CLI also pays automatically when the free quota is used up (it prints a notice to stderr). Use --no-pay to stop that.
  • Without a key, nothing is ever paid; when the quota is out the CLI exits with code 4 and says so.

Options

| Option | Meaning | |---|---| | --chain, -c | base (default), ethereum, arbitrum, optimism, polygon, robinhood, solana; aliases eth, arb, op, sol and chain ids work | | --json | Print the service's JSON plus a cli object (source: free or paid, quota, payment) | | --pay | Buy the full report ($0.01) | | --no-pay | Never pay | | --base-url | Override https://tokencheck.madebydevx.com |

Exit codes (handy in scripts and agent tools): 0 safe, 1 caution, 2 danger, 3 error (bad input, network, payment refused or failed), 4 free quota used up and no key.

For AI agents

• Run npx -y devx-tokencheck <address> --chain <chain> --json and read result.verdict, result.risk_score and result.reasons. Branch on the exit code without parsing.
• Errors in --json mode are { "ok": false, "error": "<code>", "message": "..." }, with codes invalid_input, free_quota_exhausted, payment_not_configured, payment_refused, payment_failed, invalid_key, http_error and network_error.
• Treat danger as "do not buy" and caution as "ask or look closer". The result is automated heuristics plus a simulated trade, so it can miss risks and can flag safe tokens.
• Without a CLI, call the HTTP API directly: llms.txt, openapi.json. It works with any x402 v1 or v2 client.

Key safety

• The key is read from the environment only, used in-process to sign one EIP-3009 USDC transferWithAuthorization, and is never written to disk, logged or sent anywhere. Only the signature goes to the API.
• The CLI signs only when the 402 asks for the exact scheme on Base (eip155:8453), the asset is Base USDC, the payee is the DevX address 0xB3cDDccEe6B150c8efFD55B961afc0Ecefe7f247, and the amount is at most $0.01. Anything else is refused without signing.
• The authorization expires within the quote's timeout (5 minutes).
• Use a dedicated low-balance wallet for agents.

Footprint

Plain Node.js ESM, Node 20.19+. Two runtime dependencies (@noble/curves, @noble/hashes) for the signature. The tests check every signature against viem byte for byte.

npm test   # unit + mock server + live production calls (2 free checks, 1 unfunded paid attempt: nothing is charged)

Also by DevX

• ElizaOS plugin: elizaos-plugin-devx-tokencheck
• AgentKit action provider: agentkit-devx-tokencheck
• Web checker with one-click pay: tokencheck.madebydevx.com

Source: github.com/devx-agent/devx-tokencheck. MIT licensed. Informational only, not financial advice.