Sign Guard x402 REST usage
The check before the riskiest moment — signing. Decodes raw unsigned calldata (approve / permit / transfer / setApprovalForAll), shows the exact intent (who gets power over what, and whether it's UNLIMITED), and screens...
12 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
The check before the riskiest moment — signing. Decodes raw unsigned calldata (approve / permit / transfer / setApprovalForAll), shows the exact intent (who gets power over what, and whether it's UNLIMITED), and screens...
🆕 The complete fund-movement authority on a Base wallet in one call: ERC-20 approvals (a spender you approved can pull the token) PLUS Base Account spend permissions (the agent-era scoped recurring allowance) — one drai...
🆕 Base Account spend permissions let an app or agent spend a scoped, recurring allowance from a wallet — the primitive behind autonomous agent payments on Base. This reconstructs a wallet's ACTIVE spend permissions from...
Ranks a wallet's active token approvals by USD-at-risk x unlimited-allowance x unlabelled-spender, and returns a prioritised revoke queue. Approvals are the #1 drain vector; this tells an agent exactly what to revoke fir...
Income tax rates by country, corporate tax, capital gains tax, tax residency rules, crypto tax treatment for any jurisdiction. Worldwide guide giving a full tax overview of any country by scenario. Tax intelligence, not...
🆕 Since Pectra an EOA can carry EIP-7702 delegated code (the 0xef0100 designator): every call to the wallet executes the DELEGATE's contract with the wallet's funds — a malicious delegate is total takeover, invisible to...
The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares t...
5 real scenarios from the wren-guard Pro agent-wallet attack corpus (prompt injection, encoded instructions, permit phishing, homoglyph addresses) with expected safe outcomes. Use when you want to red-team your agent's w...
Is this transaction, approval or signature safe to sign? Check it before your AI agent or wallet signs it: pre-sign verdict (green/orange/red + reason codes) for EVM transactions, token approvals and Permit/Permit2/EIP-3...
Decode raw EVM calldata into a named function, signature and arguments, plus security risk flags (unlimited token approval, setApprovalForAll, ownership transfer, unknown selector, native value transfer). Keyless, determ...
Pre-sign check for agent wallets. Use when your agent is about to sign a transaction or EIP-712 message: send to and data (or typedData, or untrusted text) and get block, review or allow, with decoded calldata and findin...
Offline transaction and signature safety check API for crypto wallets. Offline pre-sign check (no RPC, fast): decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009), an EIP-7702 authorization or an x402 40...