Skip to content
Panshi
EN / /
← Panshi Sentinel

Is your Claude / GPT real?

Detect whether your API relay's upstream has been swapped for a cheaper model (e.g. Claude → Qwen / DeepSeek / GLM / Doubao / Kimi and other Chinese models). Behavioral fingerprinting — it sees through upstreams prompted to claim they are Claude.

⚠️ v0.8 · multi-signal authenticity check: no false positives observed on official endpoints in our testing; sees through cheap-model backends prompted to impersonate Claude; advanced disguises trigger a cryptographic deep verification (Method C). Probabilistic signals, not conclusive; Method A is the most accurate fingerprint check; Method C gives cryptographic certainty for Claude. (detection details withheld to prevent evasion)
How it works
1Ask as a normal user

Our server uses your downstream token to send a set of carefully designed probe questions to the relay, just like a normal user.

2Cross-check three ways

We compare the answers' style fingerprint, self-identification and capability tells — even an upstream prompted to claim it is Claude won't match the real fingerprint.

3A signed verdict

You get a Genuine / Suspected-substitution / Inconclusive verdict + evidence; edge cases can be settled by cryptographic deep verification (a relay can't fake it without the upstream's signature).

How to read the verdict
🟢
Genuine
Fingerprint matches the claimed model.
🔴
Suspected substitution
Looks more like a different (cheaper) model.
🟡
Inconclusive
Not enough signal — recheck with Method A or C.
Which method to choose
MethodKey neededSpeedAccuracyBest for
B Web quick-checkNo (paste output)FastestScreeningA quick first look
A Local CLI recommendedYes (local, never uploaded)MediumMost accurateA reliable verdict
C Free deep verifyYes (this probe only, not stored)SlowerCryptographic proof (Claude only)Settling edge cases

Method A — Local CLI · most accurate · key never leaves your machine

Recommended

Download one file and run it — it will ask you for the details interactively. Your key is used only to call your own endpoint, never uploaded.

curl -O https://panshi.io/relay-check/relay_check.py && python3 relay_check.py

Python 3 only, no dependencies. It prompts for your relay URL, key, and model, then prints Genuine / Suspected-substitution / Inconclusive + evidence.

Method B — Quick web check · no key needed · paste output

Common:

Pick a specific tier to catch "intra-vendor downgrade" (e.g. labeled Opus, served Haiku).

⚠️ Results are probabilistic signals, not legal proof. Quantized / distilled variants and models outside our reference set cannot be determined. Detection by panshi.io.

Method C — free deep verification · cryptographic signature · tamper-evident

3/3 free left today

Fingerprint says "suspicious but unsure"? This settles it with cryptographic verification that a relay can't fake without the upstream's signature — Gemini/DeepSeek impersonators fail. Claude models only. Key is used for this active probe and not stored. Privacy-conscious? Use Method A (local CLI).

Common:

Detection engine changelog

We keep upgrading detection. Detection details are not disclosed (to prevent evasion).

  • v0.8 2026-06-19
    Hard intra-vendor downgrade detection — "pay for Opus, get Haiku" now reliably flagged (FP-validated), not just a soft hint.
  • v0.7 2026-06-19
    Anti-persona-injection hardening — for high-value Claude/Gemini claims, web-only fingerprint can be skewed by a strong impersonation persona; now auto-lowers confidence and strongly pushes cryptographic deep verify (Method C) instead of declaring "genuine".
  • v0.6 2026-06-19
    Chinese-model detection added — GLM (Zhipu) / Doubao (ByteDance) / MiniMax and other common cheap backends; catches relays that swap Claude/GPT for these.
  • v0.5 2026-06-18
    Intra-vendor downgrade detection (e.g. labeled Opus, served a cheaper tier) + steadier, harder to evade.
  • v0.4 2026-06-18
    Stronger multi-signal detection (harder to fool with disguise prompts); advanced disguises prompt cryptographic deep verification; graceful degradation when the engine is down; result feedback.
  • v0.3 2026-06-18
    Anti-disguise detection — catches cheap-model backends prompted to impersonate Claude/Gemini.
  • v0.2 2026-06-17
    Centered-fingerprint rebuild, no false positives observed on official endpoints in our testing.
  • v0.1
    Behavioral-fingerprint detection tool launched.
Get notified when your upstream changes

Relays swap models silently — what is genuine today can be quantized tomorrow. Drop your email; we will tell you when relay-substitution risk shifts.