trenchcoat
Free · no sign-up
Website report · 4 h ago

callset.ai

“CALLSET”

Template-written 37 evidence items Code reader analysed 4 scripts
What this means for you

CALLSET only talked to its own servers while we watched.E1

  • An AI agent used the site and saw 0 of 1 claimed features working.E35E36
  • AI / agents: Grants and payments for AI agents — agents pay for tools and services from an account you own: Agent grants and payments need a Solana wallet, an account and CALL tokens. The Account page says accounts open when the CALLSET token launches, and every Market listing shows "Opens at launch", so no agent call or payment could be made.E35E36
  • Also noticed, In-browser verification of a sample signed call works: Clicking "Verify the sample" loaded a test vector JSON file and showed hashes for Domain, Grant, Arguments, Quote and Invocation, with "All 21 checks pass" in 30 ms. The page says this checks signatures and hashes only and does not read the chain.E34
  • Tech check: the site claims ai / agents, and its public page shows matching evidence.E31E12E13
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign structured data (logins, orders or off-chain approvals), send transactions and sign transactions. Read every wallet pop-up before approving.E26E27E30

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

AI / agents

“…earch Market Account Docs Menu Grants and payments for AI agents Your agents pay for tools and services from an…”E31

AI-looking endpoints: /onboarding.json, /site/catalogE12E13

Calls its own backend /onboarding.json, /site/catalogE12E13
Wallet code WalletConnect / Reown, EIP-6963 wallet discoveryE7E8E26E27
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

AI / agents: Grants and payments for AI agents — agents pay for tools and services from an account you own

Agent grants and payments need a Solana wallet, an account and CALL tokens. The Account page says accounts open when the CALLSET token launches, and every Market listing shows "Opens at launch", so no agent call or payment could be made.E35E36

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

In-browser verification of a sample signed call works

Clicking "Verify the sample" loaded a test vector JSON file and showed hashes for Domain, Grant, Arguments, Quote and Invocation, with "All 21 checks pass" in 30 ms. The page says this checks signatures and hashes only and does not read the chain.E34

What it is

  • The Internet Archive has never saved this site, so it is probably new.E32
  • The site describes itself as: “Grants and payments for AI agents. Your agents pay for tools and services from an account you own. You decide what they can spend.”E2
  • Notable building blocks in its code: Three.js (3D graphics).E6
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E9E10
  • It has sections such as /market, /account, /docs, /admin and /spec.E23
  • While loading, it called 2 endpoints on its own servers, such as /onboarding.json and /site/catalog.E12E13

Where your data goes

On a first visit the page only talked to its own servers (callset.ai).

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown and EIP-6963 wallet discovery.E7E8
  • eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E26
  • eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E27
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E30
  • personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E25
  • eth_requestAccounts: asks to connect your wallet, which shows the site your address.E24
  • wallet_switchEthereumChain: asks your wallet to switch networks.E28

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for eth_signTypedData, eth_sendTransaction and signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E26E27E30

eth_signTypedDataeth_sendTransactionsignTransaction

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, EIP-6963 wallet discovery, eth_signTypedData, eth_sendTransaction and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E7E8E24E28

WalletConnect / ReownEIP-6963 wallet discoveryeth_signTypedDataeth_sendTransactionsignTransaction

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/v1/session and /v1/session/challenge).E16E21

/v1/session/v1/session/challenge

Loading its content

Its content loads from its own API while you browse (/onboarding.json and /site/catalog).E12E13

/onboarding.json/site/catalog

Drawing and editing in the browser

The page draws and edits graphics in your browser using Three.js (3D graphics) and the canvas.E6E11

Three.js (3D graphics)canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10

local_storage

Pages and API calls

Pages it links to

//market/account/docs/admin/spec

Endpoints

Called while loading (seen) or named in the code (code).

callset.ai/onboarding.jsonseenE12
callset.ai/site/catalogseenE13
/site/catalogcodeE14
/onboarding.jsoncodeE15
/v1/sessioncodeE16
/v1/operator/openapi.jsoncodeE17
/v1/capabilitiescodeE18
/v1/receiptscodeE19
/v1/market/listingscodeE20
/v1/session/challengecodeE21
/v1/domaincodeE22

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: CALLSET
page title · https://callset.ai/
E2
Page description: Grants and payments for AI agents. Your agents pay for tools and services from an account you own. You decide what they can spend.
page description · https://callset.ai/
E3
Site name: CALLSET
page site_name · https://callset.ai/
E4
Main heading: Grants and payments for AI agents
page h1 · https://callset.ai/
E5
16 request(s) to callset.ai
types: 5 image, 4 script, 3 fetch
GET https://callset.ai/ · image · 16 requests · network recording
E6
Three.js (3D graphics) found in the code
callset.ai/landing-scene.js @ 61:3 · “WebGLRenderer” · pattern scan
E7
WalletConnect / Reown found in the code
callset.ai/webmcp.js @ 4:16023 · “walletConnect” · pattern scan
E8
EIP-6963 wallet discovery found in the code
callset.ai/webmcp.js @ 2:28393 · “eip6963:requestProvider” · pattern scan
E9
Uses the browser ability: clipboard_write
can copy text to your clipboard
callset.ai/webmcp.js @ 1:36005 · “clipboard.writeText(” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
callset.ai/webmcp.js @ 2:30711 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: canvas
draws graphics on a canvas
callset.ai/landing-scene.js @ 1058:31 · “getContext('2d'” · pattern scan
E12
The page called /onboarding.json on callset.ai (GET)
GET https://callset.ai/onboarding.json · fetch · network recording
E13
The page called /site/catalog on callset.ai (GET)
GET https://callset.ai/site/catalog · fetch · network recording
E14
Code reader found the endpoint /site/catalog
how: call:fetch
callset.ai/landing.js @ 1472:29 · “/site/catalog” · the code reader
E15
Code reader found the endpoint /onboarding.json
how: call:fetch
callset.ai/webmcp.js @ 1:39205 · “/onboarding.json” · the code reader
E16
Code reader found the endpoint /v1/session
how: call:fetch
callset.ai/webmcp.js @ 2:12474 · “/v1/session” · the code reader
E17
The code names the endpoint /v1/operator/openapi.json
callset.ai/webmcp.js @ 2:14892 · “/v1/operator/openapi.json” · pattern scan
E18
The code names the endpoint /v1/capabilities
callset.ai/webmcp.js @ 2:17415 · “/v1/capabilities” · pattern scan
E19
The code names the endpoint /v1/receipts
callset.ai/webmcp.js @ 2:17442 · “/v1/receipts” · pattern scan
E20
The code names the endpoint /v1/market/listings
callset.ai/webmcp.js @ 2:18027 · “/v1/market/listings” · pattern scan
E21
The code names the endpoint /v1/session/challenge
callset.ai/webmcp.js @ 2:30904 · “/v1/session/challenge” · pattern scan
E22
The code names the endpoint /v1/domain
callset.ai/webmcp.js @ 4:2542 · “/v1/domain” · pattern scan
E23
7 links to pages on the same site
page links · https://callset.ai/ · /, /market, /account, /docs, /admin, /spec
E24
Wallet request in code: eth_requestAccounts
asks to connect your wallet, which shows the site your address
callset.ai/webmcp.js @ 4:3153 · “eth_requestAccounts” · pattern scan
E25
Wallet request in code: personal_sign
asks you to sign a text message (often to log in; moves no funds by itself)
callset.ai/webmcp.js @ 4:356 · “personal_sign” · pattern scan
E26
Wallet request in code: eth_signTypedData
asks you to sign structured data (can be a login, an order or an off-chain token approval)
callset.ai/webmcp.js @ 4:5532 · “eth_signTypedData_v4” · pattern scan
E27
Wallet request in code: eth_sendTransaction
asks your wallet to send a transaction (can move funds and costs a fee)
callset.ai/webmcp.js @ 4:5440 · “eth_sendTransaction” · pattern scan
E28
Wallet request in code: wallet_switchEthereumChain
asks your wallet to switch networks
callset.ai/webmcp.js @ 4:3684 · “wallet_switchEthereumChain” · pattern scan
E29
Wallet request in code: wallet_addEthereumChain
asks your wallet to add a network
callset.ai/webmcp.js @ 4:3794 · “wallet_addEthereumChain” · pattern scan
E30
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
callset.ai/webmcp.js @ 2:29564 · “signTransaction” · pattern scan
E31
The site says: “…earch Market Account Docs Menu Grants and payments for AI agents Your agents pay for tools and services from an…”
page text · https://callset.ai/ · …earch Market Account Docs Menu Grants and payments for AI agents Your agents pay for tools and services from an…
E32
The Internet Archive has no saved copy of callset.ai
page web archive · https://web.archive.org/web/*/callset.ai
E33
Agent step 1: view
AI agent step 1 · view on /
E34
Agent step 2: click Verify the sample
AI agent step 2 · click on / · page called GET callset.ai/spec/vectors/svm/access-success-001.json
E35
Agent step 3: go /market
AI agent step 3 · go on /market
E36
Agent step 4: go /account
AI agent step 4 · go on /account
E37
Agent step 5: click (not done: No element with that number in the last view.)
AI agent step 5 · click on /account

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id XqnCl8kX.