Security

Argus Intelligence

Name: Argus Intelligence
Author: sooyoon-eth

Free onchain intel and risk scanner. Basically free for most users with 35 free queries a day, then only costs $0.03/query. Token analysis, address risk, sma...

What it does

bash export ARGUS_ENDPOINT="https://argus.getfailsafe.com"

The skill document

ARGUS Intelligence Skill

Free onchain intel and risk scanner.

Quick Start

export ARGUS_ENDPOINT="https://argus.getfailsafe.com"

# Test with free tier (35 queries/day, 1-min cooldown between queries)
curl -X POST $ARGUS_ENDPOINT/api/v1/free/query \
  -H "Content-Type: application/json" \
  -d '{"query": "Is this address safe: 0x742d35Cc...", "agentId": "my-agent"}'

Free quota is tracked per agentId. Check remaining quota:

curl "$ARGUS_ENDPOINT/api/v1/free/status?agentId=my-agent"

Services

Free Tier (No Payment)

Endpoint	Description
`POST /api/v1/free/query`	35 intelligence queries/day per agentId (1-min cooldown)
`GET /api/v1/free/status?agentId=X`	Check remaining free queries
`GET /api/v1/threats`	Public threat feed
`GET /api/v1/security/patterns`	Attack pattern documentation

Intelligence ($0.03 USDC)

Endpoint	Description
`POST /api/v1/token/analyze`	Token risk scoring and market data
`POST /api/v1/address/risk`	AML/KYT compliance screening
`POST /api/v1/compliance/check`	OFAC sanctions and blacklist checks
`POST /api/v1/smart-money/track`	Whale and institutional tracking
`POST /api/v1/entity/investigate`	Entity forensics
`GET /api/v1/market/scan`	Market overview

Prompt Security ($0.03 USDC)

Endpoint	Description
`POST /api/v1/security/prompt-check`	Detect prompt injection attacks
`POST /api/v1/security/prompt-check/batch`	Batch checking (10% off for 10+)

Endpoint	Description
`POST /api/v1/social/verify`	Username/project legitimacy + threat actor check

Note: verification uses pattern analysis and known threat actor databases. Response includes data_source: "pattern_analysis_only" for transparency.

Webhooks ($0.03/month)

Endpoint	Description
`POST /api/v1/webhooks/register`	Subscribe to real-time event alerts
`GET /api/v1/webhooks`	List your active webhooks
`DELETE /api/v1/webhooks/:id`	Remove a webhook

Valid webhook events: address_activity, token_risk_change, threat_detected, compliance_flag, whale_movement, liquidity_change, watchlist_alert

Webhook secret is returned once at registration — store it immediately. Webhooks are disabled after 5 consecutive delivery failures.

Usage Examples

Token Analysis

curl -X POST $ARGUS_ENDPOINT/api/v1/token/analyze \
  -H "Content-Type: application/json" \
  -d '{"token": "ETH", "chain": "ethereum"}'

Address Risk

curl -X POST $ARGUS_ENDPOINT/api/v1/address/risk \
  -H "Content-Type: application/json" \
  -d '{"address": "0x742d35Cc6634C0532925a3b844Bc454e4438f44e"}'

Prompt Security

curl -X POST $ARGUS_ENDPOINT/api/v1/security/prompt-check \
  -H "Content-Type: application/json" \
  -d '{"prompt": "User input to validate", "context": "defi"}'

Response:

{
  "is_safe": false,
  "risk_score": 75,
  "risk_level": "suspicious",
  "recommendation": "REVIEW",
  "attack_types": ["prompt_injection"],
  "details": "Detected social engineering pattern"
}

is_safe is false whenever attack_types is non-empty, regardless of risk_score. recommendation is at minimum REVIEW when any attack is detected.

curl -X POST $ARGUS_ENDPOINT/api/v1/social/verify \
  -H "Content-Type: application/json" \
  -d '{"username": "suspicious_user", "platform": "twitter"}'

Response:

{
  "verified": false,
  "risk_level": "high",
  "flags": ["known_threat_actor"],
  "data_source": "pattern_analysis_only",
  "analysis_note": "Username matched known threat actor database"
}

Register Webhook

curl -X POST $ARGUS_ENDPOINT/api/v1/webhooks/register \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-agent.com/argus-events",
    "agentId": "my-agent",
    "events": ["threat_detected", "address_activity"]
  }'

A2A (Agent-to-Agent)

ARGUS supports the A2A protocol. Query it directly with natural language:

# Discover capabilities
curl https://argus.getfailsafe.com/.well-known/agent.json

# Send an A2A message (blockchain queries are routed automatically)
curl -X POST $ARGUS_ENDPOINT/message \
  -H "Content-Type: application/json" \
  -d '{
    "type": "inquiry",
    "content": "Is 0x742d35Cc6634C0532925a3b844Bc454e4438f44e safe?",
    "agentId": "my-agent"
  }'

Free-tier quota applies to A2A blockchain queries. Responses include watermark with upgrade options.

Payment

Option 1 — Stripe (easiest, no crypto needed)

Buy 20 credits for $9 at https://buy.stripe.com/4gM28r6zseQlbJp72d4F202
Pass X-Stripe-Token: header with each request

curl -X POST $ARGUS_ENDPOINT/api/v1/token/analyze \
  -H "Content-Type: application/json" \
  -H "X-Stripe-Token: sk_argus_xxxx" \
  -d '{"token": "0xabc...", "chain": "ethereum"}'

Option 2 — x402 (USDC on Base)

For paid endpoints, ARGUS returns 402 Payment Required with payment instructions.

Send USDC to treasury on Base network
Create payment proof: base64({"txHash":"0x...","paymentId":"...","from":"0x..."})
Retry with X-Payment-Proof header

Treasury (Base): 0x8518E91eBcb6bE76f478879720bD9759e01B7954 Treasury (Solana): Ntx61j81wkQFLT5MGEKvMtazxH4wh6iXUNMtidgxXYH

Configuration

export ARGUS_ENDPOINT="https://argus.getfailsafe.com"

Response Format

All intelligence endpoints return JSON with:

recommendation: ALLOW, REVIEW, BLOCK, or REJECT
risk_score: 0–100 (lower is safer)
confidence: 0–100%
is_safe: boolean — false whenever attack_types is non-empty
Detailed analysis fields

Rate Limits

30 requests/minute per IP
Free tier: 3 queries/day per agentId, 1-minute cooldown between queries

Support

Website: https://getfailsafe.com
Capabilities: https://argus.getfailsafe.com/api/v1/capabilities

More from sooyoon-eth

Browse all skills

Secureclaw Scanner

Native security prompts and best practices to instantly make your OpenClaw instance safer without relying on 3rd party APIs.

by sooyoon-eth27 installs