trenchcoat
Free · no sign-up
Website report · 23 min ago

botbag.fun

“Bot Bag · Give your bot a bag.”

Template-written 24 evidence items Code reader analysed 10 scripts
What this means for you

Bot Bag only talked to its own servers while we watched.E1

  • An AI agent used the site and saw 0 of 1 claimed features working.E23E24
  • AI / agents: To test the full flow, you have to add the /mcp link as a connector in Grok, ChatGPT or Claude and then approve the buy in a wallet. Both steps happen outside this site. In the browser, opening /mcp redirected to the homepage's #how section, and the site's 'Buy a coin' demo button was blocked because it starts a trade.E23E24
  • Also noticed, Try-it demo tools return live data: Clicking 'What's hot' called /api/tool/whats_running and listed 10 pump.fun coins with last-hour volume, market cap, price change and age (answered in 419 ms). Clicking 'Safety check' called /api/tool/is_it_bundled and returned 'Not enough data' for a preset coin ($HIRE).E20E22
  • Also noticed, Ticker input could not be tested: The sandbox blocked typing a ticker into the demo's coin input, so the safety check could not be run on a coin of my choice.E21
  • Tech check: the site mentions ai / agents, but we found nothing behind it in what its public page loads.E17
  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

AI / agents

“…Copy the link Works with Grok, ChatGPT and Claude Your AI can buy coins now. Add Bot Bag to your AI, then just a…”E17

No matching code, calls or services in what loaded for us.

Calls its own backend /api/ca, /api/tool/whats_running, /api/tool/is_it_bundledE10E11E12
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

AI / agents

To test the full flow, you have to add the /mcp link as a connector in Grok, ChatGPT or Claude and then approve the buy in a wallet. Both steps happen outside this site. In the browser, opening /mcp redirected to the homepage's #how section, and the site's 'Buy a coin' demo button was blocked because it starts a trade.E23E24

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Try-it demo tools return live data

Clicking 'What's hot' called /api/tool/whats_running and listed 10 pump.fun coins with last-hour volume, market cap, price change and age (answered in 419 ms). Clicking 'Safety check' called /api/tool/is_it_bundled and returned 'Not enough data' for a preset coin ($HIRE).E20E22

Noticed

Ticker input could not be tested

The sandbox blocked typing a ticker into the demo's coin input, so the safety check could not be run on a coin of my choice.E21

What it is

  • The Internet Archive first saved this site on 2026-10-13 (24 days ago).E18
  • The site describes itself as: “Your AI bot already researches coins all day. Bot Bag lets it buy them. Tag @bot under any coin: it checks it, sizes the buy and hands you o”E2
  • It's built with Next.js and React (common tools for building web apps).E6E7
  • In your browser it can copy text to your clipboard.E8
  • While loading, it called 3 endpoints on its own servers, such as /api/ca, /api/tool/whats_running and /api/tool/is_it_bundled.E10E11E12

Where your data goes

On a first visit the page only talked to its own servers (botbag.fun).

How key features work

Loading its content

Its content loads from its own API while you browse (/api/ca, /api/tool/whats_running and /api/tool/is_it_bundled).E10E11E12

/api/ca/api/tool/whats_running/api/tool/is_it_bundled

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

botbag.fun/api/caseenE10
botbag.fun/api/tool/whats_runningseenE11
botbag.fun/api/tool/is_it_bundledseenE12
/api/simulatecodeE13
/api/cacodeE14
/api/toolcodeE15

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Bot Bag · Give your bot a bag.
page title · https://botbag.fun/
E2
Page description: Your AI bot already researches coins all day. Bot Bag lets it buy them. Tag @bot under any coin: it checks it, sizes the buy and hands you one tap. Yo
page description · https://botbag.fun/
E3
Site name: Bot Bag
page site_name · https://botbag.fun/
E4
Main heading: Your AI can buy coins now.
page h1 · https://botbag.fun/
E5
21 request(s) to botbag.fun
types: 12 fetch, 6 script, 1 document
GET https://botbag.fun/ · fetch · 21 requests · network recording
E6
Next.js detected by the code reader (next-runtime)
confidence: high
botbag.fun/ · “next-runtime” · the code reader
E7
React detected by the code reader (react-runtime)
confidence: medium
botbag.fun/_next/static/immutable/chunks/00b-7pk3d_am9.js · “react-runtime” · the code reader
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
botbag.fun/_next/static/immutable/chunks/0sr3eb2mg9jw7.js @ 1:21321 · “clipboard.writeText(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
botbag.fun/_next/static/immutable/chunks/0sr3eb2mg9jw7.js @ 1:316 · “getContext("2d"” · pattern scan
E10
The page called /api/ca on botbag.fun (GET)
GET https://botbag.fun/api/ca · fetch · network recording
E11
The page called /api/tool/whats_running on botbag.fun (GET)
GET https://botbag.fun/api/tool/whats_running · fetch · network recording
E12
The page called /api/tool/is_it_bundled on botbag.fun (GET)
GET https://botbag.fun/api/tool/is_it_bundled · fetch · network recording
E13
Code reader found the endpoint /api/simulate
how: call:fetch
botbag.fun/_next/static/immutable/chunks/0sr3eb2mg9jw7.js @ 1:15327 · “/api/simulate” · the code reader
E14
Code reader found the endpoint /api/ca
how: call:fetch
botbag.fun/_next/static/immutable/chunks/0sr3eb2mg9jw7.js @ 1:22243 · “/api/ca” · the code reader
E15
The code names the endpoint /api/tool
botbag.fun/_next/static/immutable/chunks/0sr3eb2mg9jw7.js @ 1:18418 · “/api/tool” · pattern scan
E16
1 links to pages on the same site
page links · https://botbag.fun/ · /
E17
The site says: “…Copy the link Works with Grok, ChatGPT and Claude Your AI can buy coins now. Add Bot Bag to your AI, then just a…”
page text · https://botbag.fun/ · …Copy the link Works with Grok, ChatGPT and Claude Your AI can buy coins now. Add Bot Bag to your AI, then just a…
E18
The Internet Archive first saved botbag.fun on 2026-10-13 and has snapshots from 2 different days
page web archive · https://web.archive.org/web/20261013023421/botbag.fun
E19
Agent step 1: view
AI agent step 1 · view on /
E20
Agent step 2: click Safety check
AI agent step 2 · click on / · page called GET botbag.fun/api/tool/is_it_bundled
E21
Agent step 3: type a ticker or coin address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 3 · type on /
E22
Agent step 4: click What's hot
AI agent step 4 · click on / · page called GET botbag.fun/api/tool/whats_running
E23
Agent step 5: click Buy a coin (not done: Blocked: actions that pay, sign, trade or send are not allowed here.)
AI agent step 5 · click on /
E24
Agent step 6: go /mcp
AI agent step 6 · go on / · page called GET botbag.fun/api/ca

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id zbUfADrB.