zag20.com talked to 4 outside services on a first visit.E6E5E8E7
An AI agent used the site and saw 2 of 4 claimed features working.E85E87E85E86E89E90
On-chain / smart contracts: binding a Solana agent key by signature (npx zag bind --chain …), with only the signature go: The bind step is a CLI command that needs an agent private key and a signature, and I could not run either in the browser. The 'Agent – one command' tab button timed out when clicked, so I couldn't see the CLI instructions on the page.E85E87
Live data / analytics: trades stream in real time; indexer and market data are live: The page called several /api endpoints (status, market stats, listings, trades, candles, holders). The indexed block height went from 3,537,974 to 3,537,975, matching the chain tip, and the supply panel filled in with '277,208 / 10.00M, 285 mints, 65 holders'. /api/status returned live JSON with the height and RPC sources. No trades had happened yet, so I couldn't see the trade stream itself work.E85E86E89E90
A working app / platform: CLI reads your tier from /api/address/<addr>, attaches fee outputs and broadcasts: GET /api/address/test returned JSON with tier 'C', quota limits, a 120-block cooldown and fee output addresses, which is the tier-lookup service the CLI is said to read. Minting and broadcasting need a wallet and payment, so I did not test them.E84
Tech check: the site claims on-chain / smart contracts, live data / analytics and a working app / platform, and its public page shows matching evidence.E79E80E50E51E52
We saw no known analytics or advertising services load on the first visit.E1
Its code can ask your wallet to approve token spending, sign structured data (logins, orders or off-chain approvals), send transactions and sign transactions. Read every wallet pop-up before approving.E48E44E45E49
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
On-chain / smart contracts
“…ge with your Solana agent key. Only the signature goes on-chain — never a private key. npx zag bind --chain eip155:56…”E79
Contract calls in its code: aggregate3, query, addrE50E51E52E53
Blockchains named in its code: BNB Smart Chain, Robinhood ChainE77E78
Wallet requests in its code: approve, eth_signTypedData, eth_sendTransactionE48E44E45E49
Evidence found
Live data / analytics
“…DES No trades yet — the first fill will stream here in real time. THREE TIERS Same chain, different doors. Tier is reso…”E80
Live connections: receives a live stream of updates from a serverE18
Calls to its own backend: /api/relay/prices, /api/launch, /api/deploy/ZAGE20E21E22E23
Evidence found
A working app / platform
“…sol-key $SOL_SECRET Mint The CLI reads your tier from /api/address/<addr>, attaches the exact fee outputs and bro…”E81
Calls to its own backend: /api/relay/prices, /api/launch, /api/deploy/ZAGE20E21E22E23
Contract calls in its codeaggregate3, query, addrE50E51E52E53
Talks to AI servicesnone seen
Live connectionsreceives a live stream of updates from a serverE18
What the AI agent tried
An AI agent (claude-opus-5-5) used the site in our sandbox for 8 steps and saw 2 of 4 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.
Couldn't test
On-chain / smart contracts: binding a Solana agent key by signature (npx zag bind --chain …), with only the signature go
The bind step is a CLI command that needs an agent private key and a signature, and I could not run either in the browser. The 'Agent – one command' tab button timed out when clicked, so I couldn't see the CLI instructions on the page.E85E87
Seen working
Live data / analytics: trades stream in real time; indexer and market data are live
The page called several /api endpoints (status, market stats, listings, trades, candles, holders). The indexed block height went from 3,537,974 to 3,537,975, matching the chain tip, and the supply panel filled in with '277,208 / 10.00M, 285 mints, 65 holders'. /api/status returned live JSON with the height and RPC sources. No trades had happened yet, so I couldn't see the trade stream itself work.E85E86E89E90
Seen working
A working app / platform: CLI reads your tier from /api/address/<addr>, attaches fee outputs and broadcasts
GET /api/address/test returned JSON with tier 'C', quota limits, a 120-block cooldown and fee output addresses, which is the tier-lookup service the CLI is said to read. Minting and broadcasting need a wallet and payment, so I did not test them.E84
Not seen working
Extra observation: status indicators on the page disagree with each other
In the same page state, the vault section shows 'GRADUATED / LIVE on Flap' and the mint panel says 'Mint closes: closed — unminted supply burned'. Yet the supply panel shows 'Epoch 1 / 10', '+92,400 in 94 pending', and says plain wallets 'open from epoch 3'. Before the data loaded, supply showed 'Not deployed yet'.E86E89
What it is
The Internet Archive has never saved this site, so it is probably new.E82
The site describes itself as: “ZAG-20: the first agent-gated inscription protocol on Zcash. Live supply, tiers, orderbook and trades.”E2
It's built with React (common tools for building web apps).E9
Notable building blocks in its code: Three.js (3D graphics).E10
In your browser it saves small bits of data in your browser and receives a live stream of updates from a server.E17E18
Paste any of these into the box on the home page to get the contract's report.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for approve, eth_signTypedData, eth_sendTransaction, signTransaction and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E48E44E45E49E50E51
It connects to crypto wallets using WalletConnect / Reown, viem, web3.js, thirdweb and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E11E12E13E14E15E16
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: ZAG-20 — Agent-gated inscriptions on Zcash
page title · https://zag20.com/
E2
Page description: ZAG-20: the first agent-gated inscription protocol on Zcash. Live supply, tiers, orderbook and trades.
page description · https://zag20.com/
E3
Main heading: Mint rights, earned by identity. Settled on Zcash.
page h1 · https://zag20.com/
E4
22 request(s) to zag20.com
types: 17 fetch, 2 script, 1 document
GET https://zag20.com/ · fetch · 22 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 · font · 2 requests · network recording
E7
1 request(s) to raw.githack.com
types: 1 fetch
GET https://raw.githack.com/pmndrs/drei-assets/456060a26bbeb8fdf79326f224b6d99b8bcce736/hdri/potsdamer_platz_1k.hdr · fetch · network recording
E8
1 request(s) to raw.githubusercontent.com
types: 1 fetch
GET https://raw.githubusercontent.com/pmndrs/drei-assets/456060a26bbeb8fdf79326f224b6d99b8bcce736/hdri/potsdamer_platz_1k.hdr · fetch · network recording
E9
React detected by The code reader (react-runtime)
confidence: medium
zag20.com/assets/three-DNFTs5j2.js · “react-runtime” · The code reader analyze-web-bundle 6.4.0
The site says: “…ge with your Solana agent key. Only the signature goes on-chain — never a private key. npx zag bind --chain eip155:56…”
page text · https://zag20.com/ · …ge with your Solana agent key. Only the signature goes on-chain — never a private key. npx zag bind --chain eip155:56…
E80
The site says: “…DES No trades yet — the first fill will stream here in real time. THREE TIERS Same chain, different doors. Tier is reso…”
page text · https://zag20.com/ · …DES No trades yet — the first fill will stream here in real time. THREE TIERS Same chain, different doors. Tier is reso…
E81
The site says: “…sol-key $SOL_SECRET Mint The CLI reads your tier from /api/address/<addr>, attaches the exact fee outputs and bro…”
page text · https://zag20.com/ · …sol-key $SOL_SECRET Mint The CLI reads your tier from /api/address/<addr>, attaches the exact fee outputs and bro…
E82
The Internet Archive has no saved copy of zag20.com
page web archive · https://web.archive.org/web/*/zag20.com
E83
Agent step 1: view
AI agent step 1 · view on /
E84
Agent step 2: go /api/address/test
AI agent step 2 · go on /api/address/test
E85
Agent step 3: go /
AI agent step 3 · go on / · page called GET zag20.com/api/relay/prices, GET zag20.com/api/launch, GET zag20.com/api/status, GET zag20.com/api/signal, GET raw.githack.com/pmndrs/drei-assets/456060a26bbeb8fdf79326f224b6d99b8bcce736/hdri/potsdamer_platz_1k.hdr, GET raw.githubusercontent.com/pmndrs/drei-assets/456060a26bbeb8fdf79326f224b6d99b
E86
Agent step 4: view
AI agent step 4 · view on / · page called GET zag20.com/api/market/ZAG/stats, GET zag20.com/api/market/ZAG/listings, GET zag20.com/api/market/ZAG/trades, GET zag20.com/api/market/ZAG/candles
E87
Agent step 5: click A Agent � one command (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 5 · click on / · page called GET zag20.com/api/relay/prices
E88
Agent step 6: type t1… / tm… Zcash transparent address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 6 · type on /
E89
Agent step 7: click Check
AI agent step 7 · click on / · page called GET zag20.com/api/relay/prices
E90
Agent step 8: go /api/status
AI agent step 8 · go on /api/status
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id VSJzwRys.
WELCOME TO TRENCHCOAT
1 of 3 · What it does
Know the coin before you buy it
Paste any coin address, wallet or X post. We scan it in seconds, free, no sign-up.
Every coin gets a green, yellow or red light and a score out of 100, and every point links to its source.
2 of 3 · How to read a check
Three questions, then the money
Is the tech real? Is the dev legit? Fair launch? Each has its own score and its top reasons.
Who's behind it: the dev's linked wallets, crews that buy launches together, and the launch block by who paid for it.
Money taken out: what the dev and launch-block wallets sold or pulled in the first 24 hours.
3 of 3 · Stay on it
Track coins and wallets
Press Track on any coin or wallet. You'll get a browser notification when the dev sells, liquidity is pulled, the price moves hard, or a tracked wallet trades.
No account: it's tied to this browser. See everything you track under Tracking.