Bundly
Sign in

Trust / access boundaries

No key in the prompt. No trade in the toolset.

Treat every AI request as untrusted. The first release deliberately stops at market research while execution permissions remain outside the connection.

Boundary test / try to break it

See exactly what the AI can and cannot know.

Run the risk tool and watch it refuse to invent a safety score. Paste a bad address and watch validation stop it before any request.

get_token_risk · So1111111111111111111111ready

Pick a test above or press Run live. The request goes out from your browser right now.

This public preview uses Bundly's web research request, not the protected AI connection itself. Results may differ as markets change. No sign-in or wallet needed here.

Know the boundary

What your approval does, and does not do

Giving an AI permission to read market information is not giving it permission to use your wallet.

  1. 01

    Sign in to identify yourself

    When you connect through a compatible client, Bundly asks you to sign in and shows a consent screen. You can approve or deny that client.

  2. 02

    Only four research tools are exposed

    They can search markets and report observations or missing checks. They cannot see your private keys, balances or transaction signing controls.

  3. 03

    No purchase can be initiated here

    The AI cannot place orders, transfer funds, withdraw, export keys or sign transactions through this connection. Your trading flows remain separate.

  4. 04

    Do not mistake market data for a safety review

    A price or liquidity number does not verify a token's contract or holders. ‘Not checked’ means exactly that, not ‘safe.’ This page is not an audit certificate.

Connect with read access →

Current controls

These are product boundaries, not an audit certificate or a guarantee against attacks.

01 / IDENTITY

An AI client requests access through account sign-in and a consent screen. No pasted wallet secret is an authentication method.

02 / CAPABILITY

The connection exposes public market observations only. It cannot create transactions, sign or execute trades.

03 / CUSTODY

Connected external wallets keep their keys and sign themselves. Managed Dev, sniper and account wallet keys are AES-256-GCM encrypted at rest. The AI connection cannot access either kind of key.

04 / EVIDENCE

Price and liquidity data are third-party observations, not guarantees. A sent transaction is never presented as a confirmed trade.

05 / EXPANSION

Any future trading access requires a separate reviewed authorization and risk policy. Read access today does not grant future trade access.