x402janus

# x402janus — Wallet Security for AI Agents **Nothing passes the gate unchecked.** The security layer AI agents call before every financial transaction. Scans wallets, traces approval chains, detects drainers, builds revoke transactions — all paid via x402 micropayment. No API key. No account. No setup. ## Why This Exists AI agents are getting wallets and transacting autonomously. Most have no idea what they've approved or who can drain them. x402janus is the gate — forensic analysis that any agent can call before making a financial decision. **Score: 3.240** on ClawHub — the highest-rated security skill for autonomous agents. ## Quick Start ```bash # Install clawhub install x402janus cd skills/x402janus && npm install # Free scan (no wallet required) JANUS_API_URL=https://x402janus.com \ npx tsx scripts/scan-wallet.ts 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 --tier free --json # Paid scan ($0.01 USDC via x402) JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/scan-wallet.ts 0xYOUR_TARGET --tier quick --json ``` **Exit codes for automation:** - `0` — safe (health ≥ 75) → proceed with transaction - `1` — medium risk (50–74) → flag for review - `2` — high risk (< 50) → halt transaction - `3` — critical (< 25) → block and alert ## Setup ```bash cd skills/x402janus && npm install ``` | Variable | Required | Description | |----------|----------|-------------| | `JANUS_API_URL` | Yes | `https://x402janus.com` | | `PRIVATE_KEY` | Paid tiers only | Agent wallet key for x402 payment signing | | `THIRDWEB_CLIENT_ID` | No | thirdweb client ID (default: `x402janus-skill`) | ## Commands ### 1. Scan a Wallet The primary command. Returns risk score, findings, approvals, and pre-built revoke transactions. ```bash # Free tier — no payment required JANUS_API_URL=https://x402janus.com \ npx tsx scripts/scan-wallet.ts <address> --tier free --json # Quick scan — $0.01 USDC JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/scan-wallet.ts <address> --tier quick --json # Standard scan — $0.05 USDC (AI threat analysis) JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/scan-wallet.ts <address> --tier standard --json # Deep scan — $0.25 USDC (full graph + drainer fingerprinting) JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/scan-wallet.ts <address> --tier deep --chain base --json ``` **Output:** ```json { "address": "0x...", "scannedAt": "2026-03-04T...", "payer": "0x...", "coverageLevel": "basic", "summary": { "totalTokensApproved": 3, "unlimitedApprovals": 2, "highRiskApprovals": 0, "healthScore": 80 }, "approvals": [...], "recommendations": [...], "revokeTransactions": [...] } ``` ### 2. List Approvals ```bash # All approvals with risk flags JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/list-approvals.ts <address> --format json # High-risk only npx tsx scripts/list-approvals.ts <address> --risk high,critical --format json # Unlimited approvals only npx tsx scripts/list-approvals.ts <address> --unlimited-only --format json ``` ### 3. Revoke Approval ```bash # Dry run — outputs calldata JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/revoke-approval.ts <wallet> <token> <spender> --json # Execute on-chain (sends real transaction) JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/revoke-approval.ts <wallet> <token> <spender> --execute --json ``` ⚠️ `--execute` sends a real transaction. Confirm with user before executing. ### 4. Start Monitoring ```bash # Webhook alerts JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/start-monitoring.ts <address> --webhook https://your-webhook.com --json # Telegram alerts npx tsx scripts/start-monitoring.ts <address> --telegram @username --json ``` ## Agent Integration Pattern ```bash #!/bin/bash # Pre-transaction security gate RESULT=$(JANUS_API_URL=https://x402janus.com PRIVATE_KEY=$PRIVATE_KEY \ npx tsx scripts/scan-wallet.ts "$TARGET_WALLET" --tier quick --json 2>/dev/null) EXIT=$? if [ $EXIT -eq 0 ]; then echo "✅ Wallet safe — proceeding with transaction" # ... execute your trade/transfer/approval elif [ $EXIT -eq 1 ]; then echo "⚠️ Medium risk — requesting human review" # ... alert human operator else echo "🚫 High risk detected — blocking transaction" # ... halt and report fi ``` ## Pricing | Tier | Price | Speed | Coverage | |------|-------|-------|----------| | **Free** | $0.00 | <5s | Address validation, basic checksum, tier preview | | **Quick** | $0.01 USDC | <3s | Deterministic risk score, approval list, revoke txs | | **Standard** | $0.05 USDC | <10s | + AI threat analysis, deeper historical lookback | | **Deep** | $0.25 USDC | <30s | + Full graph analysis, drainer fingerprinting, anomaly detection | All payments settle via x402 micropayment (EIP-3009 TransferWithAuthorization) on Base. Your agent signs once, the Thirdweb facilitator settles USDC on-chain. No account needed. ## How x402 Payment Works 1. Agent calls the scan endpoint 2. Server returns HTTP 402 with payment requirements 3. thirdweb x402 SDK signs the payment authorization from agent wallet 4. SDK retries with payment header automatically 5. Facilitator verifies and settles USDC on Base 6. Scan result returned No gas needed for payments (facilitator pays). Agent wallet only needs USDC on Base. ## ACP Marketplace Also available via the Virtuals ACP marketplace for agent-to-agent hiring: **https://app.virtuals.io/acp/agent-details/14804** 6 offerings: scan (quick/standard/deep), approvals listing, revoke (single/batch). ## API Endpoints (Direct) For agents that prefer raw HTTP over the skill scripts: ```bash # Free scan curl -X POST "https://x402janus.com/api/guardian/scan/0xADDRESS?tier=free" # Paid scan (x402 handles payment automatically via SDK) # Or manually: server returns 402 → sign payment → retry with header # Health check curl "https://x402janus.com/api/guardian/status" # Skill documentation (machine-readable) curl "https://x402janus.com/api/skill-md" ``` ## Wallet Requirements For paid tiers, the agent wallet (`PRIVATE_KEY`) needs: - **USDC on Base** — $0.01–$0.25 per scan - **ETH on Base** — only needed for `--execute` on revoke (not for scan payments) ## Safety - Free tier requires no key - Paid tiers use thirdweb x402 signing — private key never logged or returned - All scripts validate addresses before requests - Revoke transactions are dry-run by default (`--execute` required for on-chain) - x402 payments are exact amounts — facilitator cannot take more than specified - Rate limiting: 10 free scans per IP window ## Links - **Product**: https://x402janus.com - **ACP Marketplace**: https://app.virtuals.io/acp/agent-details/14804 - **GitHub**: https://github.com/consensus-hq/agent-pulse - **X**: [@x402janus](https://x.com/x402janus)