trenchcoat
Free · no sign-up
Website report · 29 h ago

canonpad.site

“CanonPad: build the tool, launch its coin”

Template-written 35 evidence items Code reader analysed 5 scripts
What this means for you

CanonPad talked to 2 outside services on a first visit.E7E6

  • An AI agent used the site and saw 1 of 1 claimed features working.E30E31E32E33E34
  • Live data / analytics: On the Launch Watch page I clicked Run, which sent POST /api/tool-run and returned a fresh $ASOL result in 221 ms. The figures (cap 129,643, 415 holders) differed from the stored alert (129,091, 380 holders). Boost Watch's Run also responded, showing '0 new coins, first run: learning the list'. Both pages list timestamped alerts, and afterwards the homepage run counters went up (Launch Watch 4→5, E30E31E32E33E34
  • Also noticed, Homepage combined coin check runs without a wallet: I clicked 'Use an example' on the homepage, which filled in the Bonk address and ran the combined check. In 691 ms it returned market cap, a creator address, top-holder share (29.81%), website and flags.E35
  • Also noticed, Chain stats and feeds refresh between page loads: The header slot number, TPS and SOL price, plus the 'What changed' feed, showed new values when I reloaded the page. Each load sent calls to /api/pulse, /api/tape and /api/alerts.E29E32E34
  • Tech check: the site claims live data / analytics, and its public page shows matching evidence.E27E10E11E12
  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Live data / analytics

“…stings around the clock, checks each one and raises an alert. 4 runs9h ago Agents Boost Watch Running Raises an ale…”E27

Calls to its own backend: /api/projects, /api/alerts, /api/project/full-checkE10E11E12E13

Calls its own backend /api/projects, /api/alerts, /api/project/full-checkE10E11E12E13
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 7 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

Live data / analytics

On the Launch Watch page I clicked Run, which sent POST /api/tool-run and returned a fresh $ASOL result in 221 ms. The figures (cap 129,643, 415 holders) differed from the stored alert (129,091, 380 holders). Boost Watch's Run also responded, showing '0 new coins, first run: learning the list'. Both pages list timestamped alerts, and afterwards the homepage run counters went up (Launch Watch 4→5, E30E31E32E33E34

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Homepage combined coin check runs without a wallet

I clicked 'Use an example' on the homepage, which filled in the Bonk address and ran the combined check. In 691 ms it returned market cap, a creator address, top-holder share (29.81%), website and flags.E35

Noticed

Chain stats and feeds refresh between page loads

The header slot number, TPS and SOL price, plus the 'What changed' feed, showed new values when I reloaded the page. Each load sent calls to /api/pulse, /api/tape and /api/alerts.E29E32E34

What it is

  • The Internet Archive has never saved this site, so it is probably new.E28
  • The site describes itself as: “Launching a coin takes seconds. Building something real behind it never did. Describe your idea to Claude, and CanonPad turns it into a work”E2
  • In your browser it can copy text to your clipboard.E8
  • It has sections such as /x, /tools, /canon, /tape, /lab and /leaderboard.E26
  • While loading, it called 7 endpoints on its own servers, such as /api/projects, /api/alerts, /api/project/full-check and 4 more.E10E11E12E13

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E6

How key features work

Loading its content

Its content loads from its own API while you browse (/api/projects, /api/alerts, /api/project/full-check, /api/pulse and 2 more).E10E11E12E13E14

/api/projects/api/alerts/api/project/full-check/api/pulse/api/tape/api/canon

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Pages and API calls

Pages it links to

//x/tools/canon/tape/lab/leaderboard/explore/about/docs/build/p/architecture/changelog/status/risks/terms

Endpoints

Called while loading (seen) or named in the code (code).

canonpad.site/api/projectsseenE10
canonpad.site/api/alertsseenE11
canonpad.site/api/project/full-checkseenE12
canonpad.site/api/pulseseenE13
canonpad.site/api/tapeseenE14
canonpad.site/api/canonseenE15
canonpad.site/api/healthseenE16
/api/requestcodeE17
/api/tool-runcodeE18
/api/sharecodeE19
/api/verifycodeE20
/api/statuscodeE21
/api/projectcodeE22
/api/xraycodeE23
/api/receipts/keycodeE24
/api/coin-statscodeE25

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: CanonPad: build the tool, launch its coin
page title · https://canonpad.site/
E2
Page description: Launching a coin takes seconds. Building something real behind it never did. Describe your idea to Claude, and CanonPad turns it into a working produc
page description · https://canonpad.site/
E3
Site name: CanonPad
page site_name · https://canonpad.site/
E4
Main heading: Tell Claude what to build. It goes live. Give it a coin.
page h1 · https://canonpad.site/
E5
17 request(s) to canonpad.site
types: 9 fetch, 4 script, 2 stylesheet
GET https://canonpad.site/ · fetch · 17 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q8EsLydOxI.woff2 · font · 3 requests · network recording
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
canonpad.site/live.js @ 44:214 · “clipboard.writeText(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
canonpad.site/live.js @ 237:103 · “getContext("2d"” · pattern scan
E10
The page called /api/projects on canonpad.site (GET)
GET https://canonpad.site/api/projects · fetch · network recording
E11
The page called /api/alerts on canonpad.site (GET)
GET https://canonpad.site/api/alerts · fetch · network recording
E12
The page called /api/project/full-check on canonpad.site (GET)
GET https://canonpad.site/api/project/full-check · fetch · network recording
E13
The page called /api/pulse on canonpad.site (GET)
GET https://canonpad.site/api/pulse · fetch · network recording
E14
The page called /api/tape on canonpad.site (GET)
GET https://canonpad.site/api/tape · fetch · network recording
E15
The page called /api/canon on canonpad.site (GET)
GET https://canonpad.site/api/canon · fetch · network recording
E16
The page called /api/health on canonpad.site (GET)
GET https://canonpad.site/api/health · fetch · network recording
E17
Code reader found the endpoint /api/request
how: call:post
canonpad.site/live.js @ 89:20 · “/api/request” · the code reader
E18
Code reader found the endpoint /api/tool-run
how: call:post
canonpad.site/live.js @ 131:20 · “/api/tool-run” · the code reader
E19
Code reader found the endpoint /api/share
how: call:post
canonpad.site/live.js @ 142:20 · “/api/share” · the code reader
E20
Code reader found the endpoint /api/verify
how: call:post
canonpad.site/live.js @ 319:217 · “/api/verify” · the code reader
E21
The code names the endpoint /api/status
canonpad.site/live.js @ 102:40 · “/api/status” · pattern scan
E22
The code names the endpoint /api/project
canonpad.site/live.js @ 151:38 · “/api/project” · pattern scan
E23
The code names the endpoint /api/xray
canonpad.site/live.js @ 258:48 · “/api/xray” · pattern scan
E24
The code names the endpoint /api/receipts/key
canonpad.site/live.js @ 320:72 · “/api/receipts/key” · pattern scan
E25
The code names the endpoint /api/coin-stats
canonpad.site/live.js @ 324:74 · “/api/coin-stats” · pattern scan
E26
35 links to pages on the same site
page links · https://canonpad.site/ · /, /x, /tools, /canon, /tape, /lab, /leaderboard, /explore, /about, /docs, /build, /p
E27
The site says: “…stings around the clock, checks each one and raises an alert. 4 runs9h ago Agents Boost Watch Running Raises an ale…”
page text · https://canonpad.site/ · …stings around the clock, checks each one and raises an alert. 4 runs9h ago Agents Boost Watch Running Raises an ale…
E28
The Internet Archive has no saved copy of canonpad.site
page web archive · https://web.archive.org/web/*/canonpad.site
E29
Agent step 1: view
AI agent step 1 · view on /
E30
Agent step 2: click Agents Launch Watch Running Watches new Solana listings arou
AI agent step 2 · click on /p/launch-watch · page called GET canonpad.site/api/project/launch-watch, GET canonpad.site/api/pulse, GET canonpad.site/api/health
E31
Agent step 3: click Run
AI agent step 3 · click on /p/launch-watch · page called POST canonpad.site/api/tool-run
E32
Agent step 4: go /p/boost-watch
AI agent step 4 · go on /p/boost-watch · page called GET canonpad.site/api/project/boost-watch, GET canonpad.site/api/pulse, GET canonpad.site/api/health
E33
Agent step 5: click Run
AI agent step 5 · click on /p/boost-watch · page called POST canonpad.site/api/tool-run
E34
Agent step 6: go /
AI agent step 6 · go on / · page called GET canonpad.site/api/projects, GET canonpad.site/api/alerts, GET canonpad.site/api/project/full-check, GET canonpad.site/api/pulse, GET canonpad.site/api/tape, GET canonpad.site/api/canon, GET canonpad.site/api/health
E35
Agent step 7: click Use an example
AI agent step 7 · click on / · page called POST canonpad.site/api/tool-run, GET canonpad.site/api/tape

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id GFX9yamk.