I taste it first.
Paste what a site wants you to sign. I try it, and tell you in plain words what it would do to your wallet.
Tasting. If I fall over, do not sign.
Taster
Paste what a site wants you to sign. I try it, and tell you in plain words what it would do to your wallet.
Tasting. If I fall over, do not sign.
Some sites keep the right to spend your tokens long after you leave. Paste a wallet and see who still holds a key. This only reads public data.
Tasting stays free. Holding $TASTER buys more tastings a day, and that matters most to bots that check everything they sign.
Contract: not launched yet. Any address you see today is not ours.
Burn 50K $TASTER for 200 extra tastings today.
Opens when the token launches.
Half pays for the data and the model. Half buys $TASTER back and burns it.
Code makes the verdict, not AI. The taster reads the instructions, simulates the transaction on current chain state, and compares every writable account before and after. AI only writes the plain words at the end and cannot change the verdict.
| Verdict | Means |
|---|---|
| Spit | It hands over control: a token account changes owner, your wallet goes to a program, or someone gets the right to spend everything you hold of a token. |
| Sip | Look closer: a limited approval, a durable nonce, you pay and get nothing back, a closed account that held tokens, or it could not be simulated. |
| Clean | Nothing bad was found. That is not a promise. |
Base64 or base58, signed or not. A bare message works too. For a claim link, add your wallet, so the link builds the transaction it would send you. Links that ask you to fill in a form are not supported yet.
If your agent signs anything it did not build itself, call taste_transaction first. Keys belong to a wallet, and limits follow its tier.
Connect a wallet to make a key.
MCP tools: taste_transaction, what_happened, open_approvals. REST without a key: POST /v1/taste with { "input": "...", "wallet": "..." }, GET /v1/pantry/:wallet.
Three courses. No dates until the work is real.
No, it is a second opinion. Read both.
Most people will use a claim link: right-click the button or copy the link someone sent you. For something already signed, paste its signature from any explorer. Bots and builders can pass raw transactions.
No. Clean means nothing bad was found. A tasting cannot see everything: read the Docs.
No. Paste and taste. A wallet is only for keys, tiers and burning. Never paste a seed phrase or a private key anywhere, here included.
The result is kept for 30 days so its link works. It is never listed anywhere.
No. It says what a transaction does, not whether to make it.