---
title: "Custom wallet-list scoring (up to 200 addresses)"
method: POST
path: "/wallet-list/score"
tags: ["Wallet"]
---

# Custom wallet-list scoring (up to 200 addresses)

`POST /wallet-list/score`

## Request

- Base URL: `https://madeonsol.com/api/v1`
- URL: `https://madeonsol.com/api/v1/wallet-list/score`
- Auth: HTTP bearer

Enterprise only. Scores an arbitrary, customer-supplied list of Solana wallets on real FIFO cost-basis trading performance — not membership in our pre-tracked KOL/alpha lists (any wallet works, same as `GET /wallet/{address}/pnl`). Each wallet gets a transparent 0-100 `score` (50% win rate on closed positions + 50% profit factor, capped 5x — see `score_methodology` in the response), the full PnL summary, and the same reputation flags as `/wallet/batch/classify`.

**Live-compute cap**: PnL is the expensive half of `/pnl` (up to 50k paginated trades + FIFO). Up to 200 wallets per call, but only the first 25 UNCACHED wallets are computed inline per request — the rest come back `status: "not_computed"`. Cached wallets (recently scored, or recently looked up via `/wallet/{address}/pnl`) are always free regardless of the cap. Resubmit a `not_computed` address alone, or call again shortly, to pick up its score once warm.

## Request body

- object
  - `wallets` string[], required

## Response `200`

OK

- object
  - `wallets` object[]
    - `address` string
    - `status` 'scored' | 'no_trades' | 'not_computed'
    - `score` integer, nullable: 0-100. null when there are no closed positions to score (open-only, no_trades, or not_computed).
    - `pnl` object, nullable: Same shape as GET /wallet/{address}/pnl's `summary` block. null unless status is "scored".
    - `reputation` object
      - `is_sniper` boolean
      - `is_bundler` boolean
      - `is_dumper` boolean
      - `is_kol` boolean
      - `kol_name` string, nullable
      - `bot_confidence` 'none' | 'low' | 'medium' | 'high', nullable
    - `cache_hit` boolean, nullable
    - `computed_at` string, date-time, nullable
    - `cache_age_seconds` integer, nullable: Seconds since computed_at (source age survives a cache hit)
    - `message` string: Present only when status is "not_computed".
  - `count` integer
  - `scored` integer
  - `cached` integer
  - `computed_now` integer
  - `no_trades` integer
  - `not_computed` integer
  - `max_wallets` integer
  - `max_live_compute` integer
  - `score_methodology` string
  - `as_of` string, date-time

## Other responses

- `400`: Invalid body — not an array of 1-200 base58 addresses
- `401`: Missing or invalid API key, or an expired free-tier key. Authentication-stage error: no `X-RateLimit-*` headers, no `_rid`.
- `403`: Requires the Enterprise contract tier (hand-sold — see /pricing#enterprise)
- `429`: Too many requests. Every 429 carries `Retry-After`. A quota 429 (`rate_limit_exceeded`, with `X-RateLimit-*`), a heavy-query concurrency 429 (`error_kind` `concurrency`/`capacity`), or the per-IP authentication-failure block (30 failed auths/min; plain `error` + `retry_after_seconds`, no `X-RateLimit-*`).
- `500`: Unexpected server error from the route (`Internal server error`, with `_rid`). Safe to retry with backoff. A failed API-key lookup is a 503 `auth_backend_unavailable`, never a 500.
- `503`: The API-key or subscription lookup could not be answered (authentication stage). Retryable and not your fault: it is never counted as a failed authentication. Honour `Retry-After`; no `X-RateLimit-*`, no `_rid`.

---

[API](https://skmtc.dev/madeonsol/apis/madeonsol-api.md) · [All operations](https://skmtc.dev/madeonsol/apis/madeonsol-api/llms.txt) · [OpenAPI document](https://skmtc.dev/madeonsol/apis/madeonsol-api/revisions/96ce84657f55?raw)