RugMunch Scanner

The scanner is RMI's core defense: point it at a token, get back every red flag the platform can find — as an explainable score, not a black box. Two generations are live:

• Scanner v2 (/api/v2/scanner/*) — structured, per-engine endpoints with async status polling.
• x402 tool scanners (/api/v1/x402-tools/*) — single-call security tools like rugshield, trial-eligible and pay-per-call.

Chains: Solana, Ethereum, Base, BSC, Arbitrum, Optimism, Polygon, Avalanche, Fantom, Gnosis, TRON, Bitcoin and more. Provider data is served by DataBus — dozens of upstream providers with automatic failover, so a dead source never empties your scan.

✅ Live-platform facts on this page verified against production on 2026-08-24.

The scoring model

Every rating is a 0–100 score built from five weighted categories, each with its own sub-checks. The response ships the full breakdown — categories, flags, and green flags — so you always know why a token scored what it did.

Category	Max points	What it measures
Contract safety	25	Verification, honeypot status, mintability, transfer restrictions, hidden backdoors
Liquidity safety	25	LP locked/burned %, lock duration, removable liquidity
Holder analysis	20	Holder count, top-10 concentration, bundle/sniper activity
Deployer reputation	15	Prior launches, rug history, wallet age, known-scammer flags
Trading activity	15	Volume authenticity, wash-trading signals, MEV patterns

Grade thresholds

Grade	Score	Meaning
A	80–100	🟢 Safe
B	65–79	🟢 Low risk
C	50–64	🟡 Medium risk
D	35–49	🟠 High risk
F	0–34	🔴 Extreme risk

Two design rules make the scores trustworthy:

• Confidence discipline — every derived field carries one of four confidence tiers (deterministic → crowdsourced_unverified). Merging data can only lower certainty; underinclusion beats overclaiming.
• Honest gaps — missing data renders as missing. The scanner never fabricates zeros to fill holes, and the transaction classifier returns unknown rather than guessing.

Fast scan: one call, one verdict

curl -X POST https://rugmunch.io/api/v1/x402-tools/rugshield \
  -H "Content-Type: application/json" \
  -H "X-Client-ID: my-app" \
  -d '{"address": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1o", "chain": "solana"}'

Returns: overall score (0–100), grade, category breakdown, and explicit red flags. Score interpretation is in the Quickstart.

Scanner v2: per-engine endpoints

Endpoint	What it does
POST /api/v2/scanner/token/scan	Start a multi-engine scan (async)
GET /api/v2/scanner/token/scan/{chain}/{address}/status	Poll scan status
GET /api/v2/scanner/token/full/{chain}/{address}	Full combined report
GET /api/v2/scanner/token/risk/{chain}/{address}	Risk score only
GET /api/v2/scanner/token/holders/{chain}/{address}	Holder concentration analysis
GET /api/v2/scanner/token/liquidity/{chain}/{address}	Liquidity depth + lock status
GET /api/v2/scanner/token/price/{chain}/{address}	Price + market snapshot
POST /api/v2/scanner/wallet/scan	Scan a wallet instead of a token

# Kick off a multi-engine scan
curl -X POST https://rugmunch.io/api/v2/scanner/token/scan \
  -H "Content-Type: application/json" \
  -d '{
    "address": "0xTokenAddress",
    "chain": "ethereum",
    "engines": ["honeypot", "deployer", "holders", "market", "security", "social"]
  }'

# Poll until done
curl https://rugmunch.io/api/v2/scanner/token/scan/ethereum/0xTokenAddress/status

# Or fetch a finished full report directly
curl https://rugmunch.io/api/v2/scanner/token/full/ethereum/0xTokenAddress

Specialist x402 scanner tools

Each is a separate tool with its own price and free trial (discover all of them: GET /api/v1/x402-tools/discovery):

Tool	Detects
honeypot_check	Buy/sell restrictions, hidden fees, unsellable tokens
audit / comprehensive_audit	Contract-level vulnerability analysis (100-point forensic exam)
dev_reputation / deployer_history	Deployer history across prior launches
rug_pull_predictor	Predictive exit-scam modeling from liquidity + holder + social signals
rug_imminence	AI early-warning fusing 7 signals for imminent rugs
launch_fairness	Sniped distributions, bundled allocations, bot activity (0–100 fairness score)
bundler_detect	Bundled sniper buys at launch
wash_trading / wash_trade_detect	Artificial volume, self-trading circles
mev_detect / mev_protection	Sandwich attacks, frontrunning exposure
flash_loan_detect	Flash-loan attack surface
whale / whale_accumulation	Large-wallet positioning
liquidity_verify	LP lock/burn verification
clone_detect	Cloned contracts and impersonation tokens
urlcheck	Phishing domains and wallet drainers

curl -X POST https://rugmunch.io/api/v1/x402-tools/honeypot_check \
  -H "Content-Type: application/json" \
  -d '{"address": "0xTokenAddress", "chain": "bsc"}'

Scan history & webhooks

# Recent scans across the platform
curl https://rugmunch.io/api/v1/scanner/recent

# Subscribe to scanner webhooks (HTTP callback)
curl -X POST https://rugmunch.io/api/v1/scanner/webhooks \
  -H "Content-Type: application/json" \
  -d '{"url": "https://your-service.example/hook", "events": ["scan_complete"]}'

Self-hosting the engine

The scanning engine itself is open source (MIT) as RugMunch Scanner — block-zero launch forensics, deployer lineage, smart-money cohorts, and the 0–100 rater, designed to run on your own data stack (it pairs naturally with Lite Chain Indexer):

git clone https://git.rugmunch.io/RugMunchMedia/rugmunch-scanner.git
cd rugmunch-scanner && pip install -e ".[dev]"

python - <<'EOF'
import asyncio
from rugmunch_scanner.scoring.token_rater import TokenRater

async def main():
    rater = TokenRater(use_reranker=False)
    result = await rater.rate("0xYourTokenAddress", "ethereum")
    print(result.total_score, result.grade)

asyncio.run(main())
EOF

The managed platform at rugmunch.io layers proprietary enrichment, more chains, and the x402 billing layer on top.

Reading results

1. Start with the tier — Critical/High means stop and verify manually.
2. Read the red flags, not just the score — a 75 with an unlocked LP and a concentrated holder set is worse than a 70 with clean structure.
3. Cross-check with RugMaps — deployer clusters and funding paths often reveal coordination a single-token scan can't see.

tip

Free trials apply per tool (fingerprint or wallet-gated). After trials, each call is billed via x402 — typical scanner tools are $0.01–$0.25. Calls that return no data are not charged. See x402 Payments.