On-chain Forensics
Pay-per-call on-chain token intelligence for any ERC-20 on Base and Ethereum. No API keys, no subscriptions — your agent pays per call with USDC over x402.
Pricing
Due Diligence Memo
The composed tier: verdict + 24h supply forensics + wallet flows + settle-safe screen in one reproducible analyst memo, with a red-flag table and a bottom-line settlement recommendation. No LLM calls — same block, same memo.
Token Verdict Card
One call, the whole story: activity score 0–100, verdict tier (RED_HOT → DORMANT), whale & concentration flags, and a plain-English take you can ship straight to your users.
Supply Audit & Wallet Flow
Exact 24h net supply change with every mint/burn event, or full wallet flow analysis with top counterparties. Base + Ethereum mainnet.
Free Eval Tier
Try before you fund: 3 verdict calls + 1 token/wallet call per visitor per day, no wallet needed. x402 takes over automatically when the free tier runs out.
Endpoints
| Endpoint | Price | What you get |
|---|---|---|
memo | $0.25 | Composed due-diligence memo: executive summary, supply forensics, wallet flows, settle-safe screen, severity-ranked red-flag table, bottom-line settlement recommendation. Optional counterparty trust screen. |
verdict | $0.02 | Token activity score, verdict tier, mints/burns, transfers, unique wallets, largest transfer, concentration share, flags, plain-English take. |
token | $0.05 | Exact 24h net supply change with full mint/burn event detail. |
wallet | $0.05 | Wallet flow analysis: transfers in/out, net, top counterparties. |
canton | $0.05 | Canton Network (CC) burn/mint snapshot: 24h ratio, cumulative, net emissions. |
linea | $0.05 | Linea burn-vault audit snapshot. |
info | Free | Service directory probe — machine-readable listing of all endpoints. |
openapi | Free | Full OpenAPI 3.1 spec, machine-readable. |
curl "https://solene-fa2010da.base44.app/functions/forensicsApi?endpoint=verdict&address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&chain=base" # Unpaid → HTTP 402 with x402 v2 payment requirements. # Pay from any x402-capable client and retry — the same call returns your data.
Sample verdict
?endpoint=verdict&address=0x…&chain=base returns:
- 113 transfers across 65 unique wallets in the 24h window
- 2 mints, 0 burns — fresh supply flagged
- Largest transfer: 1.2M tokens (4.1% of supply) — whale move
- Concentration: top 5 wallets hold 31% — moderately concentrated
Plain take: "Mildly active with fresh mints and one whale move — watch the top wallets, nothing screams exit scam but nothing screams momentum either."
The composed tier: Due Diligence Memo
?endpoint=memo&address=0x…&chain=base ($0.25; $0.35 with &counterparty=0x…) returns one memo:
- Header — token, chain, block, generation time (citable decision record)
- Executive summary — verdict tier, activity score, plain-English take
- Supply forensics — 24h net supply delta, every mint/burn event
- Wallet flows — transfers, unique wallets, largest transfer, concentration
- Settle-safe screen — canonical-asset registry check + optional counterparty trust tier
- Red-flag table — deduplicated, severity-ranked (CRITICAL → INFO) with sources
- Bottom line — deterministic settlement recommendation
Deterministic composition — no LLM calls: the same block data yields the same memo, so an agent can cite it as a reproducible decision record. The three source sections would cost $0.09 separately; the memo is the synthesis.
New: XRP Ledger support (chain=xrp)
The flagship settle-safe screen now covers XRPL issued currencies — the structural counterparty risk of IOUs, machine-readable:
KNOWN_CANONICAL · RLUSD · issuer blackholed · settle-safe: true- ?endpoint=settlesafe&chain=xrp&token=rlusd ($0.02) — or any issuer:
&issuer=r...¤cy=USD - Blackhole status (disabled master key + no regular key = obligations fixed)
- Default Ripple, No Freeze vs Global Freeze, and trustline clawback flags — decoded, with severity
- Outstanding obligations + trustline breadth via gateway_balances
- Verified registry: RLUSD (Ripple USD), GateHub USD — Bitstamp pending verification
- ?endpoint=wallet&chain=xrp&address=r... ($0.05) — payments, offers, trustlines, counterparties, trust tiers
Reads run against public rippled/Clio servers — no API keys. Same wallet, same x402 payment rail. XRPL verdict and due-diligence memos are live (chain=xrp&issuer=r...¤cy=USD).
MCP Server
The same forensics, callable from Claude, ChatGPT, or any MCP client. Streamable HTTP at
https://solene-fa2010da.base44.app/functions/forensicsMcp. Tools: forensics_info (free),
token_verdict ($0.02), settle_safe ($0.02), wallet_screen ($0.05), token_profile ($0.05),
diligence_memo ($0.25, +$0.10 with counterparty screen). Paid tool calls use the same x402 flow:
HTTP 402 with PAYMENT-REQUIRED, sign, retry with X-PAYMENT.
Provider, safeguards & integrity
Who runs this service. On-chain Forensics is owned and maintained by Leo Sanders (leohoudinisanders@gmail.com), an independent service operator. Day-to-day operation, monitoring and incident response are handled with the assistance of Solene, an AI agent (personal assistant platform) configured and supervised by Leo. Solene has no autonomous authority over funds: payouts settle only to the fixed USDC address published in every 402 challenge (0x8EBf…6fb9 on Base), and all operational changes are reviewed and deployed by the owner. Support contact: leohoudinisanders@gmail.com (responses within one business day).
Safeguards against compromised responses. Consuming agents should be able to trust this service even under a worst-case server compromise:
- No instructions in responses. Every response is a deterministic, schema-fixed composition of on-chain reads (eth_call / eth_getLogs / XRPL JSON-RPC). No LLM or free-text model generates response content, so responses cannot carry injected prompts, malicious instructions or persuasive text. The only human-readable strings are template-composed from numeric on-chain values.
- Manipulated data is independently checkable. Every field is derived from public mainnet state; a suspicious consumer can re-verify any response against their own RPC at the same block. Settle-safe responses embed an rpc_verification evidence trail (per-node read outcomes), and 402s bind payment to a resource URL, so data and payment can be replayed and audited on-chain.
- Payments cannot be silently redirected. The payTo address is a fixed constant in the deployed service, echoed in every PAYMENT-REQUIRED challenge and in the free directory (?endpoint=info). Payments are EIP-3009 signed authorizations verified and settled by independent facilitators (Coinbase CDP primary, with fallbacks), not by this service, so a server-side attacker cannot move funds or alter the payment terms a paying agent already signed.
- Change control on agent-facing content. The API definition, pricing and payment requirements are code-deployed from a private repository; deployments are reviewed by the operator, and the OpenAPI contract is served from a separate GitHub Pages origin that the runtime cannot rewrite, so advertised and actual behavior cannot drift silently. Free discovery (X-402-Discovery: 1) lets any marketplace re-audit the exact payment terms an agent would sign, at zero cost.
Machine-readable docs
OpenAPI 3.1 specification, served from this origin:
- /openapi.json — OpenAPI 3.1 spec (this site)
- Live endpoint copy — always in sync with the deployed API
Why x402
- No API keys to manage. Payment is a signed EIP-3009 transfer — agents pay and get data in one round trip.
- Per-call economics. 402 challenge → pay → 200 with data. No subscriptions, no minimums.
- Verifiable settlement. Every payment settles on Base mainnet. Our first production payment:
0xf40bc462…08c2. - Agent-native discovery. Listed in the x402 Bazaar catalog and indexable by any x402-aware marketplace.
Also from this operator: Canton Swap Broker
Pay-per-call Canton DEX swaps via OneSwap
Acting on what you found? Swap any settleable Canton token (CC, HECTO, USDCx, CBTC, EDELx) through OneSwap's atomic DvP escrow with the same x402 pay-per-call model — your agent gets a deposit party, funds it with a plain transfer, OneSwap settles atomically and the output returns to the sender. Settlement-accurate quotes $0.02, escrow swaps $0.05, lifecycle reads free.