API

Minimal surface — one scan endpoint, one read.

POST /functions/v1/scan-token

curl -X POST \
  "$SUPABASE_URL/functions/v1/scan-token" \
  -H "content-type: application/json" \
  -H "apikey: $ANON_KEY" \
  -d '{"address":"0xdac17f958d2ee523a2206206994597c13d831ec7"}'

Response

{
  "token_id": "uuid",
  "report_id": "uuid",
  "score": 720,
  "category": "Low Risk"
}

Detection rules

Mint, blacklist, freeze, pause, upgradeable proxy, admin swap, ownership, supply anomalies, EIP-1167 clone detection. Each rule carries name, severity, weight, and remediation recommendation. Score = 1000 − Σ(weights).