IRONCLAD Documentation

Autonomous AI security agent protecting the x402 payment ecosystem on Base. 5 skills, 1 API, zero exploits.

Quick Start

Option 1 — MCP (Claude Desktop / Claude Code)

{
  "mcpServers": {
    "ironclad": {
      "command": "npx",
      "args": ["-y", "@ironclad-agent/mcp-server"],
      "env": {
        "IRONCLAD_API_URL": "https://ironclads.app"
      }
    }
  }
}

Option 2 — Direct API

curl -X POST https://ironclads.app/api/v1/scan-transaction \
  -H "Content-Type: application/json" \
  -d '{"to_address":"0x7a3f...9e2d","value":"500000000000000000"}'

Option 3 — Bankr Skill

> install the ironclad skill from https://github.com/ironclad-agent/skills

Option 4 — XMTP

Send a message to IRONCLAD's XMTP address:

scan 0x7a3f...9e2d
rug 0xdead...beef
trust 0x1234...abcd

Authentication

Public tier requires no authentication. Rate limited to 3 scans/day per IP.

For premium tiers, hold $ICLAD in your wallet and pass these headers:

X-Wallet-Address: 0xYourWallet...
X-Wallet-Signature: 0xSignedMessage...

scan-transaction

POST /api/v1/scan-transaction

Simulates a transaction on forked Base chain state and returns a security verdict.

Request

Response

{
  "safe": false,
  "risk_score": 72,
  "verdict": "BLOCK",
  "signals": [
    {
      "type": "UNLIMITED_APPROVAL",
      "severity": "CRITICAL",
      "detail": "Unlimited approval to unverified 0xdead..."
    }
  ],
  "gas_estimate": 127403,
  "simulated_block": 28491203,
  "scan_time_ms": 187
}

Verdicts

check-agent-trust

POST /api/v1/check-agent-trust

Returns KYA (Know Your Agent) trust score and profile for any wallet.

Request

Response

{
  "trust_score": 34,
  "tier": "SUSPICIOUS",
  "factors": {
    "wallet_age_days": 2,
    "tx_count": 7,
    "code_verified": false,
    "social_linked": false,
    "world_id": false
  },
  "recommendations": [
    "Wallet is only 2 days old",
    "No verified social profiles"
  ]
}

Trust Tiers

detect-rug

POST /api/v1/detect-rug

Analyzes a token contract for rug pull indicators and honeypot patterns.

Request

Response

{
  "rug_risk_score": 78,
  "verdict": "CRITICAL",
  "signals": [
    { "signal": "hidden_mint", "weight": 35, "detail": "Owner can mint unlimited tokens" },
    { "signal": "no_liquidity_lock", "weight": 30, "detail": "LP tokens not locked" }
  ],
  "liquidity_info": { "total_usd": 12400, "locked": false },
  "deployer_history": { "address": "0xbad...", "previous_rugs": 3 }
}

Risk Levels

trace-funds

POST /api/v1/trace-funds

Traces fund flow from a transaction or address across chains.

Request

* Provide tx_hash OR address

Response

{
  "flow": [
    { "from": "0xvictim...", "to": "0xattacker...", "amount": "50 ETH", "chain": "base" },
    { "from": "0xattacker...", "to": "0xmixer...", "amount": "50 ETH", "chain": "base" }
  ],
  "endpoints": ["0xmixer..."],
  "known_entities": [
    { "address": "0xmixer...", "name": "Tornado Cash", "type": "mixer" }
  ]
}

monitor-contract

POST /api/v1/monitor-contract

Sets up continuous monitoring with webhook alerts.

Request

Alert Types

ownership_change    — Owner transferred or renounced
proxy_upgrade       — Implementation contract changed
large_transfer      — Unusual token movement
liquidity_removal   — LP tokens withdrawn
approval_spike      — Unusual number of approvals
self_destruct       — Contract self-destructed

MCP Server

Connect IRONCLAD as an MCP tool server to any compatible AI agent.

npx (one command)

npx @ironclad-agent/mcp-server

Claude Desktop config

{
  "mcpServers": {
    "ironclad": {
      "command": "npx",
      "args": ["-y", "@ironclad-agent/mcp-server"],
      "env": {
        "IRONCLAD_API_URL": "https://ironclads.app"
      }
    }
  }
}

MCP Tools exposed

Bankr Skill

Install IRONCLAD as a skill in any Bankr-powered agent:

> install the ironclad skill from https://github.com/ironclad-agent/skills

Once installed, your agent can use all 5 skills via natural language:

"Scan this transaction before I execute: 0x7a3f...9e2d, 0.5 ETH"
"Check the trust score of 0x1234...abcd"
"Is this token a rug pull? 0xdead...beef"

XMTP Commands

Send commands directly to IRONCLAD via XMTP encrypted messaging:

$ICLAD Tiers

Pricing

Pricing details will be available after $ICLAD token launch on Bankr. All skills are currently free during beta.