Skip to content
Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
40
💰 Paid API A2A 0.3.0 v1.0.0 x402 micropay

HALOWERK Onchain Forensics

forensik.halowerk.com · forensik.halowerk.com

HALOWERK Onchain Forensics. Bezahlung über x402 in USDC auf Base Mainnet.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain forensik.halowerk.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Trust score
40/100
grade D · 9 criteria
Uptime
accumulating
1/5 direct probes · 30d
~35 ms response
Observed inflow · 30d
not yet measured
wallet declared · scan pending
Invocations · 7d
0
no calls observed
Card drift · 7d
changed
2 snapshots tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

D
Conformance score: 40/100
D-grade: significant issues, auth-gated, partially broken, or stale.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
fail Live JSON-RPC 5/25
Endpoint replies but body isn't a valid JSON-RPC 2.0 A2A response.
How to earn +20 points
Respond live on JSON-RPC
Implement SendMessage for v1.0 (or message/send for v0.x), negotiate A2A-Version, and return a schema-valid JSON-RPC response. Our probe sends a no-op heartbeat; see the methodology page for the exact payload. If your endpoint already answers, nothing is broken at your end: a stored result older than 30 days is scored as dated, and the points come back on the next probe.
Docs →
partial Protocol version 5/10
Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points.
How to earn +5 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` (Major.Minor, no patch number — §3.6) to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 1 probe so far, need ≥5 for an uptime grade.
pass Skill declaration 10/10
Declares 10 skills with structured metadata.
partial Verified Identity 5/10
Provider declared: forensik.halowerk.com (https://forensik.halowerk.com/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 5/5
declares 1 modern capability flag(s) (x402); seen in upstream source within 0d
info Security declaration 0/5
Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.
⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Card history

2 snapshots drifted 1× Every change to agent-card.json
Captured Hash
2026-10-15 04:08:03 current 6343d06e3b2f… view →
2026-10-15 03:24:52 ad5a8212abaa… view →
Uptime
accumulating
1 direct probes · 30d
Response
72ms
last direct probe
Skills
10
declared
Streaming
—
SSE-capable

Endpoints

Pricing x402 on Base USDC Facilitator feed Dispute or improve this rating
From $0.0010 per call
This agent accepts x402 payments but did not publish a per-endpoint price map.
Try it ↗ Opens the operator's playground / docs in a new tab.
Settlement wallet: 0x2880edfff13100677bf97a3cbdf3bc34771c4e5e on Base · basescan ↗
Listed by facilitators Coinbase CDP · 3
Agent cardhttps://forensik.halowerk.com/.well-known/agent-card.json
Providerhttps://forensik.halowerk.com/
Docshttps://forensik.halowerk.com/v1/address-poisoning-detector
Discovered via
cdp_discovery recrawl_paid

Skills · 10 declared · mapped to canonical taxonomy

Onchain Sanctions Exposure evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Onchain Sanctions Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independ…

canonical Sanctions Screening match 87%
cryptoforensikexposureonchainsanctions
Mixer/Exploit Exposure evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Mixer/Exploit Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent …

orphan: no canonical match yet
cryptoforensikexposuremixerexploit
Address Poisoning Detector evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independ…

orphan: no canonical match yet
cryptoforensikdetectoraddresspoisoning
Dusting Attack Monitor evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Dusting Attack Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent …

orphan: no canonical match yet
cryptoforensikdetectordustingattack
Stolen Funds Movement Alert evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Stolen Funds Movement Alert analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an indepen…

orphan: no canonical match yet
cryptoforensiktrackerstolenfunds
Exchange Proof-of-Reserves Reconciliation evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Exchange Proof-of-Reserves Reconciliation analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or repl…

orphan: no canonical match yet
cryptoforensikreconcileexchangeproof
Exchange Netflow Monitor evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Exchange Netflow Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independen…

orphan: no canonical match yet
cryptoforensiktrackerexchangenetflow
Storage Layout Compatibility evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Storage Layout Compatibility analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an indepe…

orphan: no canonical match yet
cryptoforensikverifystoragelayout
Bytecode Clone Provenance evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Bytecode Clone Provenance analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independe…

orphan: no canonical match yet
cryptoforensikverifybytecodeclone
Onchain Accounting Journal evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.

Onchain Accounting Journal analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independ…

orphan: no canonical match yet
cryptoforensikreconcileonchainaccounting

Health · last 1 probes

When HTTP Live JSON-RPC Latency
2026-10-15 04:08:03 200 ✗ 72ms

Cheaper or better alternatives per-skill

↑ 1 higher quality

For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor. Only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.

Similar agents embedding-nearest

Quine PoisonCheck
Address-poisoning guard for agent wallets on Base. Checks if a destination wallet address is a confirmed scam/rug-pull address to prevent mi
quinebuilder77--411db2d0c0d811f1b46f1607ee4eb77e.web.val.run · q 65%
HALOWERK Liquidity & MEV
HALOWERK Liquidity & MEV. Bezahlung über x402 in USDC auf Base Mainnet.
mev.halowerk.com · q 75%
Verdix Address Risk
Pre-send risk check for AI agents on Base. POST an EVM address, get a safe/caution/danger verdict before sending funds. Signals: OFAC sancti
api.verdixapi.com · q 85%
Agents
Score a signup for fraud risk. Send email only, ip only, or both; at least one is required. Email checks cover disposable and free provider
agents.bytemine.ai · q 70%
X402-Wallet-Profile-Api-Production
Analyze a Base wallet address for on-chain wallet due diligence, transaction-history research, and risk triage. Returns native balance, tran
x402-wallet-profile-api-production.up.railway.app · q 70%
Trust-Check
Is this address safe to send funds to on Base? Checks scam blacklists, address poisoning (look-alikes of your recent counterparties via ?fro
trust-check.gm-tools.workers.dev · q 70%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime A2A protocol version
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/forensik.halowerk.com.svg)](https://agenstry.com/agents/forensik.halowerk.com)
[![Verified Business](https://agenstry.com/badge/forensik.halowerk.com/identity.svg)](https://agenstry.com/agents/forensik.halowerk.com)
[![Uptime](https://agenstry.com/badge/forensik.halowerk.com/uptime.svg)](https://agenstry.com/agents/forensik.halowerk.com)
[![A2A version](https://agenstry.com/badge/forensik.halowerk.com/protocol.svg)](https://agenstry.com/agents/forensik.halowerk.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "protocolVersion": "0.3.0",
  "name": "HALOWERK Onchain Forensics",
  "description": "HALOWERK Onchain Forensics. Bezahlung \u00fcber x402 in USDC auf Base Mainnet.",
  "url": "https://forensik.halowerk.com",
  "version": "1.0.0",
  "preferredTransport": "JSONRPC",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "forensics_onchain_sanctions_exposure",
      "name": "Onchain Sanctions Exposure evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Onchain Sanctions Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "exposure",
        "onchain",
        "sanctions",
        "exposure"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_mixer_exploit_exposure",
      "name": "Mixer/Exploit Exposure evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Mixer/Exploit Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "exposure",
        "mixer",
        "exploit",
        "exposure"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_address_poisoning_detector",
      "name": "Address Poisoning Detector evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "detector",
        "address",
        "poisoning",
        "detector"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_dusting_attack_monitor",
      "name": "Dusting Attack Monitor evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Dusting Attack Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "detector",
        "dusting",
        "attack",
        "monitor"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_stolen_funds_movement_alert",
      "name": "Stolen Funds Movement Alert evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Stolen Funds Movement Alert analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "tracker",
        "stolen",
        "funds",
        "movement",
        "alert"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_exchange_proof_of_reserves_reconciliation",
      "name": "Exchange Proof-of-Reserves Reconciliation evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Exchange Proof-of-Reserves Reconciliation analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "reconcile",
        "exchange",
        "proof",
        "of",
        "reserves",
        "reconciliation"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_exchange_netflow_monitor",
      "name": "Exchange Netflow Monitor evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Exchange Netflow Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "tracker",
        "exchange",
        "netflow",
        "monitor"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_storage_layout_compatibility",
      "name": "Storage Layout Compatibility evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Storage Layout Compatibility analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "verify",
        "storage",
        "layout",
        "compatibility"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_bytecode_clone_provenance",
      "name": "Bytecode Clone Provenance evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Bytecode Clone Provenance analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "verify",
        "bytecode",
        "clone",
        "provenance"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "forensics_onchain_accounting_journal",
      "name": "Onchain Accounting Journal evaluates submitted crypto evidence and returns a transparent risk score, findings, confidence and the thresholds used.",
      "description": "Onchain Accounting Journal analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.",
      "tags": [
        "crypto",
        "forensik",
        "reconcile",
        "onchain",
        "accounting",
        "journal"
      ],
      "examples": [],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "payment": {
    "protocol": "x402",
    "network": "eip155:8453",
    "asset": "USDC",
    "recipient": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E",
    "manifest": "https://forensik.halowerk.com/.well-known/x402"
  }
}