See the wallets
they try to hide.

Same engine that runs inside the FINNPUTER Trade bot — now exposed as a paid endpoint anything can call. A request comes in, the server answers HTTP 402 — Payment Required, the caller's wallet pays the exact amount, the request retries, and the scan comes back. No account, no API key, no subscription. Payment is the access.

The two that matter most — because they catch what a snapshot can't:

npm install x402-solana @solana/web3.js bs58

import { createX402Client } from "x402-solana/client";
import { Keypair } from "@solana/web3.js";
import bs58 from "bs58";

// the wallet your agent pays from — needs a little USDC and a little SOL
const kp = Keypair.fromSecretKey(bs58.decode(process.env.PAYER_SECRET));
const wallet = {
  address: kp.publicKey.toString(),
  signTransaction: async (tx) => { tx.sign([kp]); return tx; },
};

// amount is a safety cap in atomic USDC — never signs more than this
const client = createX402Client({ wallet, network: "solana", amount: BigInt(1_000_000) });

// just fetch. the 402 → pay → retry handshake happens inside.
// /scan       = deep,  0.02 USDC, ~90s, clusters + forwards
// /scan/quick = quick, 0.005 USDC, ~3s, contract + holders + locks
const res = await client.fetch("https://api.finnputerdex.com/scan", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ mint }),
});

const { scan, paid, settled } = await res.json();

What comes back — real output, trimmed (BRO, 15 Jul 2026). RugCheck scored this token risk 1, "Good", 0 risks listed:

{
  "scan": {
    "locked": {
      "locked_supply_pct_min": 14.85,
      "locked_holder_count": 6,
      "by_locker": { "Streamflow Vault": { "supply_pct": 14.85, "holders": 6 } },
      "unlock_dates_known": false,
      "coverage_gaps": [
        "rugcheck did not run a locker scan for this token",
        "only the top 20 holders were checked on-chain",
        "1 more locker account(s) exist below the top holders (Printr Stake Pool)",
        "no unlock dates were supplied"
      ]
    },
    "bundles": {
      "bundle_detected": true, "bundle_pattern_strength": 3,
      "clusters": [{ "type": "timing", "wallet_count": 7,
                    "window_seconds": 8, "supply_pct": 0.5 }],
      "forwards": [], "forward_count": 0,
      "lp_wallets_excluded": 1
    },
    "risk": {
      "score": 75, "level": "LOW",
      "warnings": ["Bundle patterns detected (strength 3/5)"],
      "passes": ["Mint Authority revoked", "LP locked",
                  "At least 14.8% of supply locked via Streamflow Vault (unlock date unknown)"]
    }
  },
  "paid": "0.02 USDC", "settled": true, "depth": "deep"
}

Note what the verdict is not: this token scores LOW. Seven wallets buying in three seconds is a signal, not a conviction — and the report says which checks it could not complete rather than implying a clean bill of health.

Not building an agent? The same scan is built into the FINNPUTER Trade bot — run it on any mint straight from Telegram, before you buy.

Scan first. Then ape.

One request. A few cents. The flags in front of you before you commit.