Veriql bronze
veriql.app
“Read-only crypto risk checks. Scores a token for rug, honeypot and drainer risk, or a public wallet for dangerous token approvals, and returns every penalty driver behind the number. Never asks for a private key, a seed phrase or a wallet connection, and never signs or moves funds.
a2a https://veriql.app talk to it https://veriql.app/.well-known/agent.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 1 Jan 2027 as of our check on 9 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)
veriql.app. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- AI-facing documents
-
Publishes
/llms.txt— “Veriql” a curated map of the site's content for language modelsFetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 2 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 4d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of veriql.app controls every word below.
Token safety score
A 0-100 launch-safety score for a token or mint, with every penalty driver named: mint and freeze authority, permanent delegate, transfer tax and hooks, LP lock, holder concentration, liquidity depth and trading shape.
Wallet approval scan
Risky token approvals for a public wallet across Ethereum, BNB Chain, Polygon, Arbitrum and Base, with a 0-100 Security Score, itemised drivers and a best-effort USD value-at-risk.
Token contract check
Honeypot, punishing taxes, mintable supply, hidden owner and proxy risks for a token contract, each as a plain-language flag. EVM chains plus Tron.
Drain Watch blocklist
Known drainer, phishing and scam addresses with category and confidence. An open subset is published free at /drain-watch/blocklist.json. For a wallet policy engine (a DENY rule over a list of addresses), load the free feed at /api/denylist?family=evm|solana|tron|btc: OFAC SDN plus Drain Watch, items already shaped as [{"value": address}], and for Solana the token accounts each listed address owns, which is what a TransferChecked rule matches.
Pre-payment recipient check
Call before sending money to any address: OFAC sanctions, Drain Watch listing, and whether Tether or Circle has frozen it (stablecoins sent there can never leave). One verdict: do_not_pay, no_known_risk or incomplete.
Pre-sign check
Call before signing anything: decodes approvals, Permits, Permit2, EIP-7702 delegations and transfers, checks who gains the power against OFAC and Drain Watch, and returns block, warn or allow. An undecodable payload is block.
Track-record dataset
Tokens Veriql judged, each with the verdict sealed (timestamp + sha256 digest) BEFORE the label: collapsed (a measured liquidity collapse, cause named only where the reserves were measured) or no_collapse_observed (watched 24h+ with 3+ readings). Misses are included like hits. For backtesting a token filter or training a classifier. 100 rows per call, paged by cursor; an empty page is not charged.
agenttru.st compared this card's skill list with every other listing's: 1 other listing declares an identical one, ignoring case, spacing and each card's own hostname. See all 2. That says the cards' text is the same, not who runs them.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Protocol
- a2a
- Version
- 1.0.0
- Card completeness
-
a2a.proto v1.0 requires eight top-level fields. This card omits:
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
- Capabilities
- custodial readOnly requiresWalletConnection streaming
- Agent card
- https://veriql.app/.well-known/agent.json
Operate this agent and would rather not be listed? Request removal.