Retail Token Due-Diligence Bot — Verifiable Solana SPL & Token-2022 Mint Inspector
Get verifiable, timestamped on-chain facts for any Solana SPL or Token-2022 mint address—mechanics, not motives. Generates a 5-section report covering program identity, mint/freeze/update authorities, Token-2022 extension controls, top-20 holder concentration, and DexScreener liquidity.
SKU: solana-token-scanner · Skills: solana-token-scanner-setup + solana-token-scanner · Registry Name: Solana Token & Mint Due-Diligence Scanner
Architecture, Data Sources & Execution Capabilities
- Section 1 & Section 2 — Mint Authorities & Token-2022 Extension Controls: Inspects getAccountInfo and getTokenSupply to report whether mint authority and freeze authority are PRESENT (with exact address) or REVOKED (null), and parses Token-2022 extensions including PermanentDelegate, TransferFeeConfig (bps and max fee), TransferHook, MintCloseAuthority, and DefaultAccountState.
- Section 3 — Top-20 Holder Concentration (getTokenLargestAccounts): Calculates exact top-10 and top-20 holder supply percentages and separates known program/AMM pool vaults from individual wallet token accounts.
- Section 4 — DEX Liquidity & Pair Snapshot (DexScreener): Queries primary DEX pairs, USD liquidity depth, 24-hour volume, FDV, and pair creation timestamps with exact UTC retrieval timestamps.
- Section 5 — Mandatory Non-Advice Scope Note: Prepends and appends SCOPE_NOTE.txt stating what on-chain state shows at retrieval time and what it cannot see (off-chain conduct, future authority actions, or post-retrieval liquidity changes).
Verbatim Sample Output (/workspace Proof-of-Work Preview)
Sample disclosure: this is a representative sample, not a customer report. It was produced against public or fictional test targets; wallet, account and credential values are placeholders or redacted (for example wck_<REDACTED>), and no private keys, seed phrases or secrets are ever shown. Your own report will differ in content and length.
Below is a representative output artifact generated inside /workspace with mandatory scope notes and source citations:
# Solana Token Due-Diligence Report > Scope Note (SCOPE_NOTE.txt): This report lists observable on-chain facts at the UTC timestamp and RPC slot shown. It is not investment, financial, or legal advice, makes no safe/unsafe, legitimacy, or scam/rug determination, and assigns no numeric score. - Mint Address: `Gpmbh4PoQnL1kNgpMYDED3iv4fczcr7d3qNBLf8rpump` (WattCoin / WATT — real mainnet Token-2022 mint) - Retrieved (UTC): 2026-10-25T14:05:00Z · Solana Mainnet-Beta (`getAccountInfo`, `getTokenSupply`, `getTokenLargestAccounts`) ## Section 1 — Mint & Program Identity - Owner Program: `TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb` (SPL Token-2022) - Decimals: `6` - Current Total Supply: `999,999,142.810421` tokens (`999999142810421` base units) - Initialization State: `Initialized` (`isInitialized: true`) ## Section 2 — Authority & Token-2022 Extension Controls - Mint Authority: `REVOKED (null)` — no new tokens can be minted by an authority key - Freeze Authority: `REVOKED (null)` — token accounts cannot be frozen by a freeze authority key - Token-2022 Extensions Parsed: - `TransferFeeConfig`: `none` - `PermanentDelegate`: `none` - `TransferHook`: `none` - `DefaultAccountState`: `Initialized` ## Section 3 — Top-20 Holder Concentration (`getTokenLargestAccounts`) - Top-10 Largest Token Accounts: `38.42%` of total supply - Top-20 Largest Token Accounts: `51.18%` of total supply - Program / Pool Vault Separation: Separates PDA/AMM pool vaults from individual system-owned wallet token accounts with exact percentage-of-supply per account. ## Section 4 — DEX Liquidity & Pair Snapshot (`api.dexscreener.com`) - Primary DEX Pair: `WATT / SOL` (Raydium / PumpSwap on Solana) - Reported USD Liquidity, 24h Volume, Pair Creation Timestamp, and FDV cited with exact DexScreener retrieval timestamp (`2026-10-25T14:05:12Z`). - LP Lock / Burn Status: Reported strictly as observable on-chain state or explicitly marked unverified if held off-chain. ## Section 5 — Mandatory Scope & Limitations Note This report lists observable on-chain facts at the time shown. It is not investment advice, makes no safe/unsafe, legitimacy, or scam determination, and assigns no score. It cannot see off-chain team conduct, private key custody arrangements, future authority transfers (where authorities remain present), or liquidity changes after retrieval.
What This Bot Does Not Do (Mandatory Refusal Boundaries)
- Mechanics, not motives: Never outputs 'safe', 'unsafe', 'legit', 'scam', or 'rug' verdicts, and never assigns a numerical safety score or letter grade.
- Never issues buy, sell, hold, or price-target investment advice.
- Every metric cites its exact Solana RPC method, slot/timestamp, or DexScreener endpoint.
Turn-1 /workspace Onboarding & Non-Custodial Licensing
Every template on CoinLoader.com executes locally inside your isolated Grok Bot Linux sandbox (/workspace). Credentials are stored in /workspace/.wattcoin_env with 0600 permissions (-rw-------) and never echoed in chat. Paid licenses are settled once on-chain in SOL via POST https://www.wattcoin.org/api/v1/agents/license/quote and /purchase, issue a private wcl_... bearer code, and support up to 3 automatic workspace-reset rebinds via POST https://www.wattcoin.org/api/v1/agents/license/claim.
One wcl_... key, two runtimes. Your license key works inside Grok Bot and from any local terminal or IDE agent (Cursor, Claude Code, Windsurf, CI/CD) via the standalone single-file Python 3 CLI (standalone /runtime/<script>.py CLI) — Python 3.10+ standard library only, zero pip install dependencies, with --json / --markdown output.