Argus Intelligence
by @sooyoon-eth
Free onchain intel and risk scanner. Basically free for most users with 35 free queries a day, then only costs $0.03/query. Token analysis, address risk, sma...
clawhub install argusπ About This Skill
name: argus-free-onchain-intel description: Free onchain intel and risk scanner. Basically free for most users with 35 free queries a day, then only costs $0.03/query. Token analysis, address risk, smart money tracking, AML compliance, and prompt injection detection. version: 1.9.2 requires: env: - ARGUS_ENDPOINT bins: - curl os: [darwin, linux, win32] primaryEnv: ARGUS_ENDPOINT cost: 0.03 costCurrency: USDC costNetwork: base category: blockchain-intelligence tags: - blockchain - crypto - risk-assessment - aml - compliance - security - prompt-injection - x402 - stripe-credits - a2a - webhooks author: Failsafe Security Inc. homepage: https://getfailsafe.com repository: https://github.com/sooyoon-eth/argus-skill
ARGUS Intelligence Skill
Free onchain intel and risk scanner.
Quick Start
export ARGUS_ENDPOINT="https://argus.getfailsafe.com"Test with free tier (35 queries/day, 1-min cooldown between queries)
curl -X POST $ARGUS_ENDPOINT/api/v1/free/query \
-H "Content-Type: application/json" \
-d '{"query": "Is this address safe: 0x742d35Cc...", "agentId": "my-agent"}'
Free quota is tracked per agentId. Check remaining quota:
curl "$ARGUS_ENDPOINT/api/v1/free/status?agentId=my-agent"
Services
Free Tier (No Payment)
| Endpoint | Description |
|----------|-------------|
| POST /api/v1/free/query | 35 intelligence queries/day per agentId (1-min cooldown) |
| GET /api/v1/free/status?agentId=X | Check remaining free queries |
| GET /api/v1/threats | Public threat feed |
| GET /api/v1/security/patterns | Attack pattern documentation |
Intelligence ($0.03 USDC)
| Endpoint | Description |
|----------|-------------|
| POST /api/v1/token/analyze | Token risk scoring and market data |
| POST /api/v1/address/risk | AML/KYT compliance screening |
| POST /api/v1/compliance/check | OFAC sanctions and blacklist checks |
| POST /api/v1/smart-money/track | Whale and institutional tracking |
| POST /api/v1/entity/investigate | Entity forensics |
| GET /api/v1/market/scan | Market overview |
Prompt Security ($0.03 USDC)
| Endpoint | Description |
|----------|-------------|
| POST /api/v1/security/prompt-check | Detect prompt injection attacks |
| POST /api/v1/security/prompt-check/batch | Batch checking (10% off for 10+) |
Social Verification ($0.03 USDC)
| Endpoint | Description |
|----------|-------------|
| POST /api/v1/social/verify | Username/project legitimacy + threat actor check |
Note: verification uses pattern analysis and known threat actor databases.
Response includes data_source: "pattern_analysis_only" for transparency.
Webhooks ($0.03/month)
| Endpoint | Description |
|----------|-------------|
| POST /api/v1/webhooks/register | Subscribe to real-time event alerts |
| GET /api/v1/webhooks | List your active webhooks |
| DELETE /api/v1/webhooks/:id | Remove a webhook |
Valid webhook events:
address_activity, token_risk_change, threat_detected, compliance_flag,
whale_movement, liquidity_change, watchlist_alert
Webhook secret is returned once at registration β store it immediately. Webhooks are disabled after 5 consecutive delivery failures.
Usage Examples
Token Analysis
curl -X POST $ARGUS_ENDPOINT/api/v1/token/analyze \
-H "Content-Type: application/json" \
-d '{"token": "ETH", "chain": "ethereum"}'
Address Risk
curl -X POST $ARGUS_ENDPOINT/api/v1/address/risk \
-H "Content-Type: application/json" \
-d '{"address": "0x742d35Cc6634C0532925a3b844Bc454e4438f44e"}'
Prompt Security
curl -X POST $ARGUS_ENDPOINT/api/v1/security/prompt-check \
-H "Content-Type: application/json" \
-d '{"prompt": "User input to validate", "context": "defi"}'
Response:
{
"is_safe": false,
"risk_score": 75,
"risk_level": "suspicious",
"recommendation": "REVIEW",
"attack_types": ["prompt_injection"],
"details": "Detected social engineering pattern"
}
is_safe is false whenever attack_types is non-empty, regardless of risk_score.
recommendation is at minimum REVIEW when any attack is detected.
Social Verification
curl -X POST $ARGUS_ENDPOINT/api/v1/social/verify \
-H "Content-Type: application/json" \
-d '{"username": "suspicious_user", "platform": "twitter"}'
Response:
{
"verified": false,
"risk_level": "high",
"flags": ["known_threat_actor"],
"data_source": "pattern_analysis_only",
"analysis_note": "Username matched known threat actor database"
}
Register Webhook
curl -X POST $ARGUS_ENDPOINT/api/v1/webhooks/register \
-H "Content-Type: application/json" \
-d '{
"url": "https://your-agent.com/argus-events",
"agentId": "my-agent",
"events": ["threat_detected", "address_activity"]
}'
A2A (Agent-to-Agent)
ARGUS supports the A2A protocol. Query it directly with natural language:
# Discover capabilities
curl https://argus.getfailsafe.com/.well-known/agent.jsonSend an A2A message (blockchain queries are routed automatically)
curl -X POST $ARGUS_ENDPOINT/message \
-H "Content-Type: application/json" \
-d '{
"type": "inquiry",
"content": "Is 0x742d35Cc6634C0532925a3b844Bc454e4438f44e safe?",
"agentId": "my-agent"
}'
Free-tier quota applies to A2A blockchain queries. Responses include watermark with upgrade options.
Payment
Option 1 β Stripe (easiest, no crypto needed)
1. Buy 20 credits for $9 at https://buy.stripe.com/4gM28r6zseQlbJp72d4F202
2. Pass X-Stripe-Token: header with each request
curl -X POST $ARGUS_ENDPOINT/api/v1/token/analyze \
-H "Content-Type: application/json" \
-H "X-Stripe-Token: sk_argus_xxxx" \
-d '{"token": "0xabc...", "chain": "ethereum"}'
Option 2 β x402 (USDC on Base)
For paid endpoints, ARGUS returns 402 Payment Required with payment instructions.
1. Send USDC to treasury on Base network
2. Create payment proof: base64({"txHash":"0x...","paymentId":"...","from":"0x..."})
3. Retry with X-Payment-Proof header
Treasury (Base): 0x8518E91eBcb6bE76f478879720bD9759e01B7954
Treasury (Solana): Ntx61j81wkQFLT5MGEKvMtazxH4wh6iXUNMtidgxXYH
Configuration
export ARGUS_ENDPOINT="https://argus.getfailsafe.com"
Response Format
All intelligence endpoints return JSON with:
recommendation: ALLOW, REVIEW, BLOCK, or REJECTrisk_score: 0β100 (lower is safer)confidence: 0β100%is_safe: boolean β false whenever attack_types is non-emptyRate Limits
Support
π‘ Examples
export ARGUS_ENDPOINT="https://argus.getfailsafe.com"Test with free tier (35 queries/day, 1-min cooldown between queries)
curl -X POST $ARGUS_ENDPOINT/api/v1/free/query \
-H "Content-Type: application/json" \
-d '{"query": "Is this address safe: 0x742d35Cc...", "agentId": "my-agent"}'
Free quota is tracked per agentId. Check remaining quota:
curl "$ARGUS_ENDPOINT/api/v1/free/status?agentId=my-agent"
βοΈ Configuration
export ARGUS_ENDPOINT="https://argus.getfailsafe.com"