> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cryptechtoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Token Security Flags

> Active opcode inspection for hidden mint, blacklist, proxy, and fee modification risks

# Token Security Checklist

Returns deterministic bytecode evaluation flags for a specific token address. Verifies whether contract owners have retained dangerous administrator powers.

***

### Parameters

**address** `string` *required*

The token contract address.

**chain** `string` (default: ethereum)

Target blockchain network (`ethereum`, `bsc`, `polygon`, `arbitrum`, `base`, `solana`).

***

### Key Security Flags Inspected

| Security Flag | Safe State | Threat Implication |
| :- | :-: | :- |
| `is_honeypot` | `false` | Sell transactions are actively blocked or reverted by the contract. |
| `is_mintable` | `false` | Contract creator can mint arbitrary tokens, causing immediate hyperinflation. |
| `can_take_back_ownership` | `false` | Ownership can be stealth-reclaimed after a public renouncement transaction. |
| `is_proxy` | `false` | Contract code can be upgraded behind a proxy to introduce malicious functions. |
| `has_blacklist` | `false` | Owner can freeze arbitrary wallet addresses and confiscate balances. |
| `slippage_modifiable` | `false` | Trading taxes can be elevated to 99% after initial trading opens. |

***

### Code Examples

```bash cURL theme={null}
curl -X GET "https://api.cryptechtoday.com/api/v1/token/0x514910771AF9Ca656af840dff83E8264EcF986CA/security?chain=ethereum" \
  -H "X-API-Key: YOUR_API_KEY"
```

```python Python theme={null}
import requests

address = "0x514910771AF9Ca656af840dff83E8264EcF986CA"
headers = {"X-API-Key": "YOUR_API_KEY"}
res = requests.get(f"https://api.cryptechtoday.com/api/v1/token/{address}/security", headers=headers)
sec = res.json()

print(f"Honeypot: {sec.get('is_honeypot')}")
print(f"Mintable: {sec.get('is_mintable')}")
print(f"Proxy: {sec.get('is_proxy')}")
```

```typescript TypeScript theme={null}
import axios from 'axios';

const address = '0x514910771AF9Ca656af840dff83E8264EcF986CA';
const { data } = await axios.get(
  `https://api.cryptechtoday.com/api/v1/token/${address}/security`,
  { headers: { 'X-API-Key': process.env.CRYPTECH_API_KEY } }
);

console.log('Contract Security Passed:', !data.is_honeypot && !data.is_mintable);
```


## Related topics

- [Analyze Token](https://docs.cryptechtoday.com/api-reference/analyze-token.md)
- [Introduction](https://docs.cryptechtoday.com/index.md)
- [Holder Concentration](https://docs.cryptechtoday.com/api-reference/token-holders.md)
- [Quickstart](https://docs.cryptechtoday.com/quickstart.md)
- [Recent Audits](https://docs.cryptechtoday.com/api-reference/recent-scans.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.