Open-Source Intelligence · Crypto · 2026

Every wallet, every account, every launch leaves a trail.

CARLI is an OSINT agent. It reads public records the way a field analyst would — on-chain transactions, domain registrations, account histories, social signals — then lets Claude connect what they mean.

No logins. No subscriptions. Public data only.

Try it — click an example, no signup

98.6%
of pump.fun tokens end in a rug or dump
50K+
new tokens launched every single day
10s
for CARLI to read what takes humans days
[ SCANNING ]@CryptoAlpha99·[ FLAGGED ]wallet HiBn...9kRm·[ ANALYZING ]narrative moonbase.wtf·[ LIKELY RUG ]rug pattern detected·[ LIKELY OFFICIAL ]@0xResearchDAO·[ HIGH RISK ]domain age: 2 days·[ RUNNING ]cross_reference signals·[ IMPERSONATION ]handle mimics @elonmusk·[ SCANNING ]@CryptoAlpha99·[ FLAGGED ]wallet HiBn...9kRm·[ ANALYZING ]narrative moonbase.wtf·[ LIKELY RUG ]rug pattern detected·[ LIKELY OFFICIAL ]@0xResearchDAO·[ HIGH RISK ]domain age: 2 days·[ RUNNING ]cross_reference signals·[ IMPERSONATION ]handle mimics @elonmusk·

First, the basics

What is OSINT?

Open-Source Intelligence is the practice of drawing conclusions from public records — data anyone can access, but few know how to read together.

A field analyst doesn't hack anyone. They pull the registration date here, the account age there, the funding trail underneath, and read the pattern the pieces form. CARLI does exactly that for crypto — at machine speed, with Claude reading intent.

No logins. No private data. No breach corpus. Only what is already public.

Public signals → one verdict

On-chain transactions

wallets, transfers, contracts

Domain registrations

WHOIS, SSL certificate history

Account histories

age, username changes, growth

Social signals

bios, links, posting behavior

CARLI verdictEvidence attached

level · confidence · signals

The premise

Nobody scams in a vacuum. They leave a wallet, a handle, a pattern.

Bubble maps see the wallets. Screeners see the volume. Neither reads the account behind the launch or the story being sold. That gap is where the money disappears. CARLI works in that gap.

What CARLI is for

Four ways the money disappears

Each of these is a live pattern on X and pump.fun right now. Each one is something CARLI is built to catch.

01

Viral · Mar 2026

Fake accounts manufacture panic, then sell you a coin

Networks of bought X accounts post fabricated breaking news to farm reach, then pivot straight into pump-and-dumps. One account in a recent network had changed its username sixteen times in two years. That history is public. CARLI reads it in seconds, not the days it takes a human investigator.

16
username changes on a single scam account
02

Ongoing threat

Real accounts get hijacked and turned into shills

A verified account with hundreds of thousands of followers gets phished, then drops a memecoin minutes later. By the time anyone notices, the token has already pumped and dumped. The tell is simple: did this account ever talk about crypto before today? CARLI checks that instantly, before you ape.

$100M+
market caps hijacked accounts have reached before discovery
03

Invisible to every tool

The scam is in the story, not just the chart

Modern rug pulls run on narrative. A dying dev, fees going to family, a cause you can't say no to, then the wallet empties. No bubble map or screener can read whether a project's story follows the manipulation playbook. Reading intent from language is exactly what an AI agent can do, and tooling cannot.

0
existing tools that analyze narrative manipulation
04

The scale problem

There is far more to check than any human can keep up with

Tens of thousands of tokens launch daily and the overwhelming majority end badly. The on-chain side has tooling. The social side, account age, coordinated shilling, posting behavior, crypto history, is still checked by hand, one tab at a time. CARLI is the layer that has been missing.

97K
of 7M+ tokens kept even $1K in liquidity

The instruments

Not a chatbot. An investigator.

Four instruments, one directive: tell you what something really is before your money is in it. Real data, read by Claude, returned as a verdict you can act on.

I
[ SOCIAL OSINT ]

X Account Intel

@handle

Account age against follower growth, engagement authenticity, posting behavior, and whether this account has any crypto history at all. Classifies account type first, then verdict: official, unverified, mismatch, or impersonation.

Live
II
[ ON-CHAIN OSINT ]

Wallet Dossier

Solana · EVM address

Behavior pulled from public chain data via Helius and Etherscan. Dev wallet, whale, or flipper. Funding source, transaction history, and connected projects. An interpretation layer on top of the explorer, not another raw feed.

Live
III
[ TARGET PROFILING ]

Project OSINT Report

name · contract · domain

Domain age and registration, linked social accounts, team identity signals, and connected wallets, scored end to end: safe, DYOR, high risk, or likely rug. Narrative analysis detects manipulation patterns. Built to be shared as a card.

Live
IV
[ FREE INVESTIGATION ]

Agent Mode

free-form chat

Talk to CARLI directly. "Check this account before I buy." It runs the full investigation conversationally and synthesizes one answer instead of handing you ten dashboards.

Live

Under the hood

The OSINT pipeline. Five steps, one verdict.

CARLI is an agent, not a wrapper. Each investigation is a chain of real tool calls that Claude orchestrates and then reasons over. The instrument does not describe the path. It walks it.

01

Intake & parse

detect_input_type()

You paste a handle, an address, a contract, or just a sentence. CARLI classifies the input and decides which instruments to fire. No forms, no choosing the right tool yourself.

02

Live tool calls

claude.tool_use → [ chain, social, domain ]

Claude chains real API calls in a single turn. On-chain reads from Solscan and Etherscan, social signals from the account graph, domain and registration from crt.sh and WHOIS. Live data, not cached guesses.

03

Cross-reference

correlate(signals)

The wallet that funded the deployer, the account that shilled it, the domain registered the same week. Individually these are noise. Linked together they are a pattern, and the pattern is the finding.

04

Reason over intent

extended_thinking()

For the hard part, the narrative, Claude reads the actual language of the project and the account against known manipulation playbooks. This is the step no screener can do, because it is about meaning, not metrics.

05

Score & synthesize

verdict := { level, confidence, evidence }

Every finding gets a confidence grade, tentative, firm, or confirmed, with the evidence attached. The output is one structured verdict, scannable in seconds, not a wall of raw data to interpret yourself.

Public data only

CARLI reads what is already open: on-chain records, public accounts, registration data. No breach corpus, no private scraping. It is a due-diligence instrument, not a surveillance one.

The token

Built by researchers, for researchers.

CARLI stays free, rate-limited per user. $CARLI aligns the people who benefit from the tool with the tool itself. Every rug that goes viral is a reason CARLI exists.

Run your DYOR

Check it before you ape.

Paste an account, a wallet, or a project. Get a verdict in seconds. The trail is already there. CARLI just reads it.

No logins. No subscriptions. Public data only.