curl --request POST \
--url https://api.webacy.com/v3/vaults/batch/grades \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"tokens": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth"
},
{
"address": "0x0deFfd509197aAD5207d2A55862835b467E8128F",
"chain": "eth"
}
]
}
'import requests
url = "https://api.webacy.com/v3/vaults/batch/grades"
payload = { "tokens": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth"
},
{
"address": "0x0deFfd509197aAD5207d2A55862835b467E8128F",
"chain": "eth"
}
] }
headers = {
"x-api-key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'x-api-key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
tokens: [
{address: '0xD50DA5F859811A91fD1876C9461fD39c23C747Ad', chain: 'eth'},
{address: '0x0deFfd509197aAD5207d2A55862835b467E8128F', chain: 'eth'}
]
})
};
fetch('https://api.webacy.com/v3/vaults/batch/grades', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.webacy.com/v3/vaults/batch/grades",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'tokens' => [
[
'address' => '0xD50DA5F859811A91fD1876C9461fD39c23C747Ad',
'chain' => 'eth'
],
[
'address' => '0x0deFfd509197aAD5207d2A55862835b467E8128F',
'chain' => 'eth'
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.webacy.com/v3/vaults/batch/grades"
payload := strings.NewReader("{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.webacy.com/v3/vaults/batch/grades")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.webacy.com/v3/vaults/batch/grades")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"schema_version": "3.0",
"results": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth",
"ok": true,
"composite": {
"grading_scheme": "v2",
"grade": "F",
"stars": 1,
"score": 98.5,
"contributors": {
"smart_contract": {
"score": 0,
"weight": 0.2
},
"operational_governance": {
"score": 0,
"weight": 0.2
},
"asset_collateral": {
"score": 10,
"weight": 0.15
},
"market_liquidity": {
"score": 35,
"weight": 0.2
},
"counterparty": {
"score": 0,
"weight": 0.1
},
"hack_exploit_history": {
"score": 0,
"weight": 0.15
},
"chain_infrastructure": {
"score": 0,
"weight": 0
}
},
"upstream_risk": 98.5,
"clamped_by_upstream": true
}
},
{
"address": "0x0000000000000000000000000000000000000000",
"chain": "eth",
"ok": false,
"error_code": "NOT_FOUND"
}
]
}{
"x402Version": 1,
"error": "payment required"
}{
"message": "Payment service temporarily unavailable"
}Batch vault ratings
Returns the v3 composite grade (letter + 0–100 risk score + per-category contributors) for up to 100 vaults in one request. Vault addresses travel in the POST body because the list is variable-length and may include non-EVM addresses; the endpoint is read-only. Per-vault failures are reported in-band as { ok: false, error_code } (HTTP 200) so a single bad address never fails the whole batch. POLARITY: scores 0–100, higher = worse.
CU cost: 1 CU × token count (v3-vault-grades-batch).
curl --request POST \
--url https://api.webacy.com/v3/vaults/batch/grades \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"tokens": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth"
},
{
"address": "0x0deFfd509197aAD5207d2A55862835b467E8128F",
"chain": "eth"
}
]
}
'import requests
url = "https://api.webacy.com/v3/vaults/batch/grades"
payload = { "tokens": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth"
},
{
"address": "0x0deFfd509197aAD5207d2A55862835b467E8128F",
"chain": "eth"
}
] }
headers = {
"x-api-key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'x-api-key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
tokens: [
{address: '0xD50DA5F859811A91fD1876C9461fD39c23C747Ad', chain: 'eth'},
{address: '0x0deFfd509197aAD5207d2A55862835b467E8128F', chain: 'eth'}
]
})
};
fetch('https://api.webacy.com/v3/vaults/batch/grades', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.webacy.com/v3/vaults/batch/grades",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'tokens' => [
[
'address' => '0xD50DA5F859811A91fD1876C9461fD39c23C747Ad',
'chain' => 'eth'
],
[
'address' => '0x0deFfd509197aAD5207d2A55862835b467E8128F',
'chain' => 'eth'
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.webacy.com/v3/vaults/batch/grades"
payload := strings.NewReader("{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.webacy.com/v3/vaults/batch/grades")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.webacy.com/v3/vaults/batch/grades")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"tokens\": [\n {\n \"address\": \"0xD50DA5F859811A91fD1876C9461fD39c23C747Ad\",\n \"chain\": \"eth\"\n },\n {\n \"address\": \"0x0deFfd509197aAD5207d2A55862835b467E8128F\",\n \"chain\": \"eth\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"schema_version": "3.0",
"results": [
{
"address": "0xD50DA5F859811A91fD1876C9461fD39c23C747Ad",
"chain": "eth",
"ok": true,
"composite": {
"grading_scheme": "v2",
"grade": "F",
"stars": 1,
"score": 98.5,
"contributors": {
"smart_contract": {
"score": 0,
"weight": 0.2
},
"operational_governance": {
"score": 0,
"weight": 0.2
},
"asset_collateral": {
"score": 10,
"weight": 0.15
},
"market_liquidity": {
"score": 35,
"weight": 0.2
},
"counterparty": {
"score": 0,
"weight": 0.1
},
"hack_exploit_history": {
"score": 0,
"weight": 0.15
},
"chain_infrastructure": {
"score": 0,
"weight": 0
}
},
"upstream_risk": 98.5,
"clamped_by_upstream": true
}
},
{
"address": "0x0000000000000000000000000000000000000000",
"chain": "eth",
"ok": false,
"error_code": "NOT_FOUND"
}
]
}{
"x402Version": 1,
"error": "payment required"
}{
"message": "Payment service temporarily unavailable"
}ok: true with a composite, or ok: false with an error_code (NOT_FOUND, INVALID_ADDRESS, UNSUPPORTED_CHAIN, or UPSTREAM_ERROR) — so one bad vault can’t sink the request.Authorizations
Query Parameters
Grading scheme to pin — selects the letter-grade band table. Default v2 (the standard 11-band scale: no E, adds C+). v1 is frozen and deprecated. Independent of the API version (v3) and of framework_version. Unknown values return 400 with the supported list.
v1, v2 Body
Up to 100 { address, chain } tuples — the vaults to grade.
1 - 100 elementsShow child attributes
Show child attributes
