{"uid":"cap_hxrDeV6BNlZUzM2gGeO7j","slug":"canaryguard-eip-712-signature-auditor-cd0d955d","name":"CanaryGuard EIP-712 Signature Auditor","description":"Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to prevent unauthorized token approvals and replay attacks.","url":"https://canaryguard-402.onrender.com/v1/security/eip712-signature-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["verifying_contract"],"properties":{"primary_type":{"type":"string"},"spender_or_to":{"type":"string"},"verifying_contract":{"type":"string"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ZAgGcMEbR-wonrYC_twuQ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to detect unauthorized token approvals and replay attack vectors","exampleAgentPrompt":"Before I sign this Permit2 request, can you audit this EIP-712 payload? The primary type is 'PermitTransferFrom', the spender is 0xAbC123...456, and the verifying contract is 0xDef789...012 — flag any replay attack risks or unauthorized approval vectors.","exampleUseCases":[{"title":"Phishing Permit signature check","prompt":"I just got a Permit signature request on a DeFi site — the primary type is 'Permit', the spender address is 0x1234abcd...ef, and the verifying contract is 0xdeadbeef...99. Can you audit this before I sign it to make sure it's not trying to drain my tokens?"},{"title":"Permit2 approval safety before DEX trade","prompt":"I'm about to do a swap on a new DEX and they're asking me to sign a Permit2 payload. The primary type is 'PermitTransferFrom', spender is 0xAABBCC...11, verifying contract is 0x000000000022D473030F116dDEE9F6B43aC78BA3. Check this for replay attack vulnerabilities before I proceed."},{"title":"transferWithAuthorization audit for wallet app","prompt":"My wallet app is showing a transferWithAuthorization request — primary type is 'TransferWithAuthorization', the 'to' address is 0x999fff...22, and the verifying contract is 0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48. Can you audit this payload for any signs of malicious intent or replay risk?"}],"resultDescription":"Returns a structured security audit of the typed-data signature payload, including risk classification, identified attack vectors (replay attacks, unauthorized approvals, suspicious spender addresses, malicious verifying contracts), and a pass/fail or risk-level verdict for the given Permit, Permit2, or transferWithAuthorization payload.","failureModes":["Invalid or unrecognized primary_type returns validation error","Malformed or checksum-invalid Ethereum addresses cause rejection","Unknown verifying contract address may limit risk context","Service may return false negatives for novel attack patterns not yet in its ruleset","Rate limiting or payment failure returns 402 or 429 error"],"whenToPreferThis":"Use this endpoint when an AI agent or wallet interface needs to programmatically screen EIP-712 / EIP-3009 typed-data signature requests before a user signs them — especially for Permit, Permit2, and transferWithAuthorization flows where a malicious payload could silently authorize unlimited token transfers. Prefer this over generic contract auditors when the threat surface is specifically the off-chain signature and not the on-chain contract code itself.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:38:51.433Z","isFirstParty":false,"canonicalSlug":"canaryguard-eip-712-signature-auditor-e1daeda8"}