Published by TOSScoin Research

Security Screening for Memecoins: RugCheck & Sniffer Tools

Key Findings

Sources:
- Swagger UI: https://api.rugcheck.xyz/swagger/index.html
- Raw spec: https://api.rugcheck.xyz/swagger/doc.json
Finding: doc.json is directly queryable and lists security/reporting endpoints, including:
- /v1/tokens/{id}/report
- /v1/tokens/{id}/report/summary
- /v1/bulk/tokens/report
- /v1/bulk/tokens/summary
- /v1/tokens/{id}/lockers
- /v1/stats/new_tokens, /v1/stats/trending, /v1/stats/verified
Why it matters: This enables automated token triage and watchlist generation without manual UI clicks.

Source: https://api.rugcheck.xyz/swagger/doc.json
Finding: dto.TokenCheckSummary includes fields like score, score_normalised, lpLockedPct, risks[], and token type/program metadata.
Why it matters: These fields can be converted into hard "go / no-go / watch" rules for investment decisions.

Source: path details in doc.json for /v1/tokens/{id}/report/summary
Finding: Query params include cacheOnly and refresh (refresh marked for paid API keys).
Why it matters: Gives a cost-aware polling strategy (cache checks during frequent scans, refresh only for shortlisted tokens).

Source: https://solsniffer.gitbook.io/solsniffer-user-guide/product-snif-tokens/token-sniffer
Finding: Solsniffer describes Snifscore-based token security analysis and explicitly notes API service availability.
Why it matters: Provides a second security signal layer for cross-validation (avoid single-provider blind spots).

Build a pre-investment checklist: RugCheck summary score + LP lock % + key risk flags.
Use RugCheck bulk endpoints for daily sweeps of candidate meme lists.
Cross-check finalists with Solsniffer score signals before committing.
Escalate only tokens that pass both structural-risk and concentration-risk thresholds.