> ## Documentation Index > Fetch the complete documentation index at: https://docs.webacy.com/llms.txt > Use this file to discover all available pages before exploring further. # List ERC-4626 Vaults with Risk Scores > Returns a paginated list of ERC-4626 vaults with risk scores, filtering, sorting, and ecosystem aggregates. Supports both offset-based and cursor-based pagination. Each item includes a standard `risk` field compatible with the format used by other Webacy risk endpoints. ## OpenAPI ````yaml GET /vaults openapi: 3.0.1 info: title: Risk Score API description: API definition for Webacy Risk Scores version: 1.2.0 servers: - url: https://api.webacy.com description: Webacy Risk Score API (Production) - url: https://api-development.webacy.com description: Webacy Risk Score API (Development) - url: http://0.0.0.0:3030/api/v1/risk-score description: Webacy Risk Score API - Local security: - api_key: [] tags: - name: Threat Risks description: Analyze addresses for security threats and malicious activity - name: Sanction Checks description: Check addresses against OFAC and other sanction lists - name: Approval Risks description: Analyze token approvals and associated risks - name: Transaction Risks description: Assess risk details for blockchain transactions - name: Exposure Risk description: Understand risk profile and exposure of addresses - name: Contract Risk description: Real-time smart contract security analysis - name: URL Risks description: Analyze URLs for phishing and security threats - name: API Usage description: Monitor and manage API consumption - name: Holder Analysis description: Token holder distribution and sniper detection - name: Address Poisoning description: Detect address poisoning attack patterns - name: Token Analysis description: Comprehensive token security and market analysis - name: Pool Analysis description: Liquidity pool data and analysis - name: Transaction Scanning description: Scan and simulate transactions for risks - name: trading-lite description: Lightweight trading risk assessment - name: RWA & Pegged Tokens description: >- Real-world asset and pegged-token analytics (supply flows, mint/burn velocity) - name: Vault Risk v3 description: >- Webacy-native v3 vault risk surface — composite grade, categories, coverage, and the framework taxonomy (RFC-019). - name: RWA Risk v3 description: >- Webacy-native v3 RWA / stablecoin risk surface — composite grade, structural-health criteria, and batch (RFC-019). paths: /vaults: get: tags: - Vault Risk summary: List ERC-4626 Vaults with Risk Scores description: >- Returns a paginated list of ERC-4626 vaults with risk scores, filtering, sorting, and ecosystem aggregates. Supports both offset-based and cursor-based pagination. Each item includes a standard `risk` field compatible with the format used by other Webacy risk endpoints. operationId: listVaults parameters: - name: chain in: query description: Filter by blockchain network required: false schema: type: string enum: - eth - arb - base - opt - pol - bsc example: eth - name: tier in: query description: Filter by risk tier required: false schema: type: string enum: - low - medium - high - critical - unknown - name: protocol in: query description: Filter by underlying protocol required: false schema: type: string enum: - morpho - aave - compound - euler - spark - fluid - beefy - yearn - name: contractType in: query description: Filter by vault contract type required: false schema: type: string enum: - erc4626_vault - strategy_vault - lending_wrapper - bridge_vault - name: underlying in: query description: Filter by underlying asset symbol (max 20 chars) required: false schema: type: string example: USDC - name: underlyingRisk in: query description: Filter by underlying asset risk tier required: false schema: type: string enum: - battle_tested - medium_risk - high_risk - crypto - unknown - name: minTvl in: query description: Minimum TVL in USD required: false schema: type: number minimum: 0 example: 1000000 - name: minScore in: query description: Minimum risk score (0-100) required: false schema: type: number minimum: 0 maximum: 100 - name: maxScore in: query description: Maximum risk score (0-100) required: false schema: type: number minimum: 0 maximum: 100 - name: attentionNeeded in: query description: Filter to vaults needing attention only required: false schema: type: boolean - name: riskFlags in: query description: Comma-separated risk tag keys to filter by (max 500 chars) required: false schema: type: string example: vault-high-looping,vault-upgradeable - name: riskFlagsMode in: query description: 'How to combine risk flags: any (OR) or all (AND)' required: false schema: type: string enum: - any - all - name: q in: query description: Search by vault name, symbol, or address (max 100 chars) required: false schema: type: string example: Morpho - name: sort in: query description: Sort key required: false schema: type: string enum: - score_desc - score_asc - tvl_desc - tvl_asc - apy_desc - looping_desc - name_asc - name: page in: query description: Page number for offset-based pagination (1-indexed) required: false schema: type: integer minimum: 1 default: 1 - name: pageSize in: query description: Results per page for offset-based pagination (max 500) required: false schema: type: integer minimum: 1 maximum: 500 default: 50 - name: cursor in: query description: >- Opaque cursor from previous response for cursor-based pagination. When present, offset-based params (page, pageSize) are ignored. required: false schema: type: string - name: limit in: query description: Results per request for cursor-based pagination (max 500) required: false schema: type: integer minimum: 1 maximum: 500 default: 100 responses: '200': description: Paginated list of vaults with risk scores and ecosystem aggregates content: application/json: example: items: - metadata: address: '0x0deFfd509197aAD5207d2A55862835b467E8128F' chain: eth name: Usual Boosted USDC symbol: bbUSDC protocol: morpho contract_type: erc4626_vault tvl_usd: 245000000 underlying_symbol: USDC underlying_address: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48' underlying_risk_tier: battle_tested apy: 0.078 looping_rate: 0.12 listing_verdict: safe_to_list attention_needed: false exit_recommendation: false score_delta_vs_prev: -2 last_scored_at: '2026-03-31T16:43:01.093Z' risk: score: 18 count: 2 medium: 2 high: 0 overallRisk: 18 issues: - score: 18 tags: - type: vault_governance_risk key: vault-low-timelock name: Low Timelock description: Timelock shorter than recommended severity: 4 categories: vault_governance_risk: key: vault_governance_risk name: Governance & Access Control description: >- Risk factors related to ownership model, admin controls, and timelock configuration. tags: vault-low-timelock: true tokens: [] pagination: total: 1420 page: 1 pageSize: 50 totalPages: 29 aggregates: generated_at: '2026-03-31T16:43:01.093Z' total_count: 1420 tier_counts: low: 320 medium: 480 high: 390 critical: 180 unknown: 50 total_tvl_usd: 12500000000 attention_count: 45 chain_counts: eth: 620 arb: 280 base: 210 opt: 120 pol: 110 bsc: 80 protocol_counts: morpho: 450 aave: 320 compound: 180 euler: 150 spark: 120 fluid: 80 beefy: 70 yearn: 50 highest_risk: [] largest_tvl: [] filtered_tier_counts: low: 320 medium: 480 high: 390 critical: 180 unknown: 50 stale: false '400': description: Invalid query parameter value '401': $ref: '#/components/responses/UnauthorizedError' security: - api_key: [] components: responses: UnauthorizedError: description: Authorization information is missing or invalid content: application/json: example: message: Unauthorized securitySchemes: api_key: type: apiKey in: header name: x-api-key ````