# Solana Token Risk API (RugScore)

> Pay-per-call risk report for any Solana SPL token: mint/freeze authority, top-holder concentration, liquidity/volume signals. Built for AI agents. Returns JSON.

## Endpoints
- GET https://solrisk.rugscore.workers.dev/demo?mint=<MINT> — FREE preview score, no payment.
- GET https://solrisk.rugscore.workers.dev/check?mint=<MINT> — PAID, 0.01 USDC on Solana via x402.

## How an agent pays (x402, standard)
1. GET /check?mint=<MINT> with no payment → HTTP 402 + a 'payment-required' header (base64 x402 requirements) and 'www-authenticate: x402 ...'.
2. Build a USDC transfer of 0.01 (mint EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v) to 4teE9PVdarXK67Xm88uyTFQLwxQDkQMkJMV1f5KMBkfK on Solana, sign it, base64-encode the signed tx.
3. Re-GET /check?mint=<MINT> with header X-PAYMENT: <base64 envelope {x402Version,scheme:"exact",network:"solana",payload:{transaction:<base64 signed tx>}}>. We broadcast + verify on-chain, then return the risk report JSON.

Discovery: https://solrisk.rugscore.workers.dev/.well-known/x402  ·  OpenAPI: https://solrisk.rugscore.workers.dev/openapi.json