alchemy-api

Warn

Audited by Runlayer on Mar 7, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
86%
Files
84
Flagged
31
Chunks
92
Flagged Files (31)
alchemy-api/references/data-simulation-api.mdMEDIUM
85.8%

Malicious tool definition detected

alchemy-api/SKILL.mdMEDIUM
85.5%

Malicious tool definition detected

Quick category overview: - **Node**: JSON-RPC, WebSocket, Debug, Trace, Enhanced APIs, Utility - **Data**: NFT, Portfolio, Prices, Simulation, Token, Transfers - **Webhooks**: Address Activity, Custom (GraphQL), NFT Activity, Payloads, Signatures - **Solana**: JSON-RPC, DAS, Yellowstone gRPC (streaming), Wallets - **Wallets**: Account Kit, Bundler, Gas Manager, Smart Wallets - **Rollups**: L2/L3 deployment overview - **Recipes**: 10 end-to-end integration workflows - **Operational**: Auth, Rate

alchemy-api/references/recipes-simulate-transaction.mdMEDIUM
85.3%

Malicious tool definition detected

## Example (curl) ```bash curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"alchemy_simulateAssetChanges","params":[{"from":"0x00000000219ab540356cbb839cbe05303d7705fa","to":"0xA0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","data":"0x"},"latest"]}' ``` ## Output - Simulated asset changes and execution details.

alchemy-api/references/operational-auth-and-keys.mdMEDIUM
85.2%

Malicious tool definition detected

## Example Usage ```bash export ALCHEMY_API_KEY="..." curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"eth_blockNumber","params":[]}' ``` ## Related Files - `operational-jwt-and-header-auth.md` - `operational-allowlists.md` ## Official Docs - [Create an API Key](https://www.alchemy.com/docs/create-an-api-key) - [Access Keys](https://www.alchemy.com/docs/how-to-create-access-keys)

alchemy-api/references/node-json-rpc.mdMEDIUM
85.0%

Malicious tool definition detected

alchemy-api/references/recipes-get-token-metadata.mdMEDIUM
84.5%

Malicious tool definition detected

alchemy-api/references/webhooks-verify-signatures.mdMEDIUM
81.2%

Malicious tool definition detected

- Enforce replay protection if provided (timestamp or nonce). ## Related Files - `webhooks-webhook-payloads.md` - `webhooks-details.md` ## Official Docs - [Notify API FAQ](https://www.alchemy.com/docs/reference/notify-api-faq)

alchemy-api/references/solana-rpc.mdMEDIUM
80.1%

Malicious tool definition detected

alchemy-api/references/recipes-get-transfers-history.mdMEDIUM
78.2%

Malicious tool definition detected

## Example (curl) ```bash curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"alchemy_getAssetTransfers","params":[{"fromBlock":"0x0","toBlock":"latest","fromAddress":"0x00000000219ab540356cbb839cbe05303d7705fa","category":["erc20","erc721","erc1155"],"withMetadata":true,"maxCount":"0x3e8"}]}' ``` ## Output - Transfer events with metadata and timestamps.

alchemy-api/references/recipes-get-token-balances.mdMEDIUM
77.4%

Malicious tool definition detected

alchemy-api/references/recipes-webhook-address-activity.mdMEDIUM
77.0%

Malicious tool definition detected

const payload = JSON.parse(rawBody); // Process payload.activity return new Response("ok"); } ``` ## Output - Real-time activity events for your addresses. ## Related Files - `webhooks-address-activity.md` - `webhooks-verify-signatures.md` ## Official Docs - [Notify API Quickstart](https://www.alchemy.com/docs/reference/notify-api-quickstart)

alchemy-api/references/recipes-get-nft-metadata.mdLOW
71.4%

Malicious tool definition detected

## Example (curl) ```bash curl -s "https://eth-mainnet.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY/getNFTMetadata?contractAddress=0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d&tokenId=1" ``` ## Example (TypeScript) ```ts const url = new URL( `https://eth-mainnet.g.alchemy.com/nft/v3/${process.env.ALCHEMY_API_KEY}/getNFTMetadata` ); url.searchParams.set("contractAddress", "0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d"); url.searchParams.set("tokenId", "1"); const res = await fetch(url.toString()); const jso

alchemy-api/references/node-debug-api.mdLOW
70.4%

Malicious tool definition detected

alchemy-api/references/node-trace-api.mdLOW
69.7%

Tool passed security scan

alchemy-api/references/solana-das-api.mdLOW
68.2%

Tool passed security scan

alchemy-api/references/data-portfolio-apis.mdLOW
67.0%

Tool passed security scan

alchemy-api/references/recipes-get-portfolio.mdLOW
66.2%

Tool passed security scan

alchemy-api/references/recipes-get-nft-ownership.mdLOW
66.1%

Tool passed security scan

alchemy-api/references/recipes-get-prices-current-historical.mdLOW
64.0%

Tool passed security scan

alchemy-api/references/operational-best-practices.mdLOW
63.4%

Tool passed security scan

alchemy-api/references/recipes-subscribe-pending-txs.mdLOW
62.5%

Tool passed security scan

alchemy-api/references/data-token-api.mdLOW
61.0%

Tool passed security scan

alchemy-api/references/solana-grpc-best-practices.mdLOW
60.5%

Tool passed security scan

alchemy-api/references/operational-jwt-and-header-auth.mdLOW
59.6%

Tool passed security scan

alchemy-api/references/operational-roles-and-sso.mdLOW
58.7%

Tool passed security scan

alchemy-api/references/node-overview.mdLOW
57.9%

Tool passed security scan

alchemy-api/references/operational-rate-limits-and-compute-units.mdLOW
57.8%

Tool passed security scan

alchemy-api/references/data-nft-api.mdLOW
55.8%

Tool passed security scan

alchemy-api/references/operational-alerts.mdLOW
55.3%

Tool passed security scan

alchemy-api/references/skill-map.mdLOW
55.0%

Tool passed security scan

alchemy-api/references/node-utility-api.mdLOW
54.0%

Tool passed security scan

Passed Files (53)Click to expand
alchemy-api/references/data-overview.mdOK
49.3%

Tool passed security scan

alchemy-api/references/ecosystem-viem.mdOK
47.2%

Tool passed security scan

alchemy-api/references/operational-request-logs.mdOK
46.8%

Tool passed security scan

alchemy-api/references/ecosystem-hardhat.mdOK
44.4%

Tool passed security scan

alchemy-api/references/data-transfers-api.mdOK
43.8%

Tool passed security scan

alchemy-api/references/operational-allowlists.mdOK
43.6%

Tool passed security scan

alchemy-api/references/operational-overview.mdOK
42.4%

Tool passed security scan

alchemy-api/references/webhooks-webhook-payloads.mdOK
41.6%

Tool passed security scan

alchemy-api/references/ecosystem-solana-web3js.mdOK
40.5%

Tool passed security scan

alchemy-api/references/operational-pricing-and-plans.mdOK
39.4%

Tool passed security scan

alchemy-api/references/solana-grpc-subscribe-blocks.mdOK
37.9%

Tool passed security scan

alchemy-api/references/data-prices-api.mdOK
36.3%

Tool passed security scan

alchemy-api/references/ecosystem-spl-token.mdOK
36.1%

Tool passed security scan

alchemy-api/references/operational-sandbox.mdOK
36.0%

Tool passed security scan

alchemy-api/references/webhooks-address-activity.mdOK
35.8%

Tool passed security scan

alchemy-api/references/ecosystem-wagmi.mdOK
35.6%

Tool passed security scan

alchemy-api/references/webhooks-details.mdOK
33.7%

Tool passed security scan

alchemy-api/references/wallets-gas-manager.mdOK
33.7%

Tool passed security scan

alchemy-api/references/ecosystem-ethers.mdOK
32.6%

Tool passed security scan

alchemy-api/references/operational-dashboard-tools.mdOK
32.6%

Tool passed security scan

alchemy-api/references/wallets-account-kit.mdOK
31.7%

Tool passed security scan

alchemy-api/references/solana-overview.mdOK
31.6%

Tool passed security scan

alchemy-api/references/wallets-solana-notes.mdOK
31.0%

Tool passed security scan

alchemy-api/references/node-websocket-subscriptions.mdOK
30.3%

Tool passed security scan

alchemy-api/references/operational-supported-networks.mdOK
28.6%

Tool passed security scan

alchemy-api/references/ecosystem-web3js.mdOK
28.3%

Tool passed security scan

alchemy-api/references/ecosystem-metaplex.mdOK
25.8%

Tool passed security scan

alchemy-api/references/node-enhanced-apis.mdOK
24.7%

Tool passed security scan

alchemy-api/references/wallets-bundler.mdOK
24.3%

Tool passed security scan

alchemy-api/references/solana-grpc-details.mdOK
24.3%

Tool passed security scan

alchemy-api/references/ecosystem-anchor.mdOK
23.5%

Tool passed security scan

alchemy-api/references/solana-grpc-subscribe-accounts.mdOK
23.5%

Tool passed security scan

alchemy-api/references/rollups-details.mdOK
22.7%

Tool passed security scan

alchemy-api/references/wallets-smart-wallets.mdOK
22.3%

Tool passed security scan

alchemy-api/references/webhooks-nft-activity.mdOK
22.2%

Tool passed security scan

alchemy-api/references/ecosystem-foundry.mdOK
21.3%

Tool passed security scan

alchemy-api/references/solana-grpc-subscribe-transactions.mdOK
20.6%

Tool passed security scan

alchemy-api/references/wallets-wallet-apis.mdOK
20.5%

Tool passed security scan

alchemy-api/references/wallets-supported-chains.mdOK
19.9%

Tool passed security scan

alchemy-api/references/solana-wallets.mdOK
19.8%

Tool passed security scan

alchemy-api/references/solana-grpc-subscribe-slots.mdOK
19.4%

Tool passed security scan

alchemy-api/references/ecosystem-rainbowkit.mdOK
18.9%

Tool passed security scan

alchemy-api/references/wallets-details.mdOK
17.5%

Tool passed security scan

alchemy-api/references/webhooks-overview.mdOK
16.8%

Tool passed security scan

alchemy-api/references/wallets-overview.mdOK
14.6%

Tool passed security scan

alchemy-api/references/solana-grpc-examples.mdOK
14.5%

Tool passed security scan

alchemy-api/references/recipes-overview.mdOK
13.7%

Tool passed security scan

alchemy-api/references/solana-grpc-subscribe-request.mdOK
13.6%

Tool passed security scan

alchemy-api/references/rollups-overview.mdOK
12.3%

Tool passed security scan

alchemy-api/references/webhooks-custom-webhooks.mdOK
11.2%

Tool passed security scan

alchemy-api/references/ecosystem-overview.mdOK
10.4%

Tool passed security scan

alchemy-api/references/solana-grpc-overview.mdOK
8.9%

Tool passed security scan

alchemy-api/references/webhooks-webhook-types.mdOK
8.0%

Tool passed security scan

Audit Metadata
Max File Score
86%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
84
Files Flagged
31
Chunks Analyzed
92
Analyzed
Mar 7, 2026, 04:52 AM
Security Audit — runlayer — alchemy-api