> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mandate.md/llms.txt
> Use this file to discover all available pages before exploring further.

# Check address risk

> Run a risk assessment against a target address using the Aegis security scanner. Returns a risk level and warnings.



## OpenAPI

````yaml /openapi.json post /api/risk/check
openapi: 3.1.0
info:
  title: Mandate API
  version: 1.2.0
  description: >-
    Non-custodial agent wallet policy layer. Enforces spend limits, allowlists,
    and approval workflows for AI agent transactions without ever receiving
    private keys.
  contact:
    name: Mandate
    url: https://mandate.md
    email: support@mandate.md
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
servers:
  - url: https://app.mandate.md
    description: Production
security: []
tags:
  - name: Registration
    description: >-
      Agent registration and claiming. No auth required for register; Sanctum
      auth for claim.
  - name: Agent API
    description: >-
      Endpoints authenticated with a runtime key (Bearer mndt_live_... or
      mndt_test_...). Used by agents to validate transactions, post events, and
      poll status.
  - name: Intent Lifecycle
    description: >-
      Post transaction hashes after broadcast and poll intent status until
      confirmed.
  - name: Dashboard
    description: >-
      Dashboard endpoints for human operators. Authenticated via Sanctum
      (cookie-based session).
  - name: Policies
    description: >-
      Policy management for agents. List, create, and view policy
      configurations.
  - name: Approvals
    description: Approval queue for transactions that require human review.
paths:
  /api/risk/check:
    post:
      tags:
        - Agent API
      summary: Check address risk
      description: >-
        Run a risk assessment against a target address using the Aegis security
        scanner. Returns a risk level and warnings.
      operationId: checkRisk
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RiskCheckRequest'
            example:
              to: '0x71C7656EC7ab88b098defB751B7401B5f6d8976F'
              chainId: 84532
              calldata: 0x
              value: '0'
      responses:
        '200':
          description: Risk assessment result.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RiskCheckResponse'
              example:
                risk_level: SAFE
                degraded: false
                warnings: []
                toxic_score: 0
                simulation: null
        '401':
          description: Invalid or missing runtime key.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Invalid request parameters.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationError'
      security:
        - RuntimeKeyAuth: []
components:
  schemas:
    RiskCheckRequest:
      type: object
      required:
        - to
        - chainId
      properties:
        to:
          type: string
          pattern: ^0x[a-fA-F0-9]{40}$
          description: Target address to assess.
        chainId:
          type: integer
          description: Chain ID for context.
        calldata:
          type: string
          description: Hex-encoded calldata (optional).
        value:
          type: string
          description: Native token value in wei (optional).
        from:
          type: string
          pattern: ^0x[a-fA-F0-9]{40}$
          description: Sender address (optional).
    RiskCheckResponse:
      type: object
      required:
        - risk_level
        - degraded
        - warnings
      properties:
        risk_level:
          type: string
          enum:
            - SAFE
            - LOW
            - MEDIUM
            - HIGH
            - CRITICAL
          description: Assessed risk level.
        degraded:
          type: boolean
          description: >-
            True if the risk service was unavailable and a degraded result was
            returned.
        warnings:
          type: array
          items:
            type: string
          description: List of warning messages from the risk assessment.
        toxic_score:
          type:
            - integer
            - 'null'
          description: Numeric toxicity score from address screening.
        simulation:
          description: Transaction simulation result, if available.
          type:
            - object
            - 'null'
    ErrorResponse:
      type: object
      required:
        - error
      properties:
        error:
          type: string
          description: Human-readable error message.
    ValidationError:
      type: object
      required:
        - message
        - errors
      properties:
        message:
          type: string
          description: Summary error message.
        errors:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
          description: Per-field validation errors.
  securitySchemes:
    RuntimeKeyAuth:
      type: http
      scheme: bearer
      description: >-
        Runtime key issued at agent registration. Prefixed with `mndt_live_`
        (mainnet) or `mndt_test_` (testnet). Pass as `Authorization: Bearer
        mndt_test_...`.

````