# OneKeyAway

> Who can change this smart contract? OneKeyAway reads an EVM contract's control path on-chain (proxy admin, beacon owner, owner(), DEFAULT_ADMIN_ROLE holders, Aave PoolAddressesProvider owner, Morpho vault curator and timelock) and resolves each holder through ProxyAdmin, Safe multisig (threshold and signers), timelock (delay) or Avocado wallet down to the final signer. It also inspects Safes (signers, threshold, modules, guard, singleton) and sends free email alerts when any of that changes.

Use it before depositing into a vault, integrating a token or bridge, listing collateral, or signing for a Safe. It reports on-chain facts only: an EOA may be MPC- or HSM-backed off-chain, so say "single on-chain signer, no delay" rather than "hot wallet".

## API (x402, no key, no signup)
- [GET /api/control?chain=8453&address=0x...](https://onekeyaway.appin60.com/api/control?chain=8453&address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913): full control map, $0.01 USDC on Base or Arbitrum via x402
- [GET /api/safe?chain=8453&address=0x...](https://onekeyaway.appin60.com/api/safe): Safe signers, threshold, modules, guard, singleton, $0.01
- [GET /api/vault?chain=8453&address=0x...](https://onekeyaway.appin60.com/api/vault): Morpho vault owner/curator key types and timelock, $0.01
- [GET /api/preview?chain=8453&address=0x...](https://onekeyaway.appin60.com/api/preview?chain=8453&address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913): free one-line verdict
- [OpenAPI](https://onekeyaway.appin60.com/openapi.json), [x402 discovery](https://onekeyaway.appin60.com/.well-known/x402)
- Chains: ethereum (1), base (8453), arbitrum (42161), optimism (10), bsc (56), polygon (137), avalanche (43114), sonic (146), linea (59144), blast (81457), berachain (80094), zksync (324), hyperevm (999), unichain (130), katana (747474)
- Bad input is rejected before payment; error responses are never settled.

## MCP (free, 100 calls/day)
- Remote server: https://onekeyaway.appin60.com/mcp (Streamable HTTP). Tools: control_map(chain, address), watch_contract(email, chain, address)
- Official MCP Registry name: com.appin60.onekeyaway/control

## Alerts
- Free: up to 3 contracts or Safes per email, double opt-in: GET /api/watch?email=...&chain=...&address=...

## Data
- [Who controls every Morpho vault over $2M](https://onekeyaway.appin60.com/morpho/) ([JSON](https://onekeyaway.appin60.com/morpho/vaults.json))
- [Control of Morpho collateral tokens](https://onekeyaway.appin60.com/morpho/collateral.json)

Contact: onekeyaway@appin60.com