{"uid":"cap_qhvH8_q6cyxSUKUU6j8cz","slug":"canaryguard-eip-712-signature-auditor-e1daeda8","name":"CanaryGuard EIP-712 Signature Auditor","description":"Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains.","url":"https://canaryguard-402.onrender.com/v1/eip712-signature-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["verifying_contract"],"properties":{"verifying_contract":{"type":"string"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7W2QSl7Rt1iFUPZYZAO5j","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to detect malicious spender approvals and phishing domains.","exampleAgentPrompt":"Before I sign this Permit2 approval, can you audit this EIP-712 typed-data payload for me — the verifying contract is 0x000000000022D473030F116dDEE9F6B43aC78BA3 — and flag any malicious spender approvals or phishing domains?","exampleUseCases":[{"title":"Pre-signing phishing check for wallet","prompt":"I'm about to sign a Permit approval in my wallet and I want to make sure it's not a phishing attempt — can you audit the EIP-712 payload where the verifying contract is 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 before I proceed?"},{"title":"DeFi agent approval safety gate","prompt":"My DeFi automation agent is about to submit a transferWithAuthorization transaction — please audit the EIP-3009 typed-data signature with verifying contract 0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 and tell me if the spender or domain looks malicious."},{"title":"Smart contract wallet security review","prompt":"We're integrating Permit2 into our app and want to validate that the typed-data signatures our users are being asked to sign look safe — can you run an EIP-712 audit on the payload with verifying contract 0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 and check for any red flags?"}],"resultDescription":"Returns a risk assessment of the EIP-712 or EIP-3009 typed-data payload, including flags for malicious or suspicious spender addresses, identified phishing domains in the verifying contract or message data, and an overall safety verdict indicating whether the signature is safe to sign.","failureModes":["Missing or invalid verifying_contract address returns a validation error","Unrecognized or unsupported EIP type may result in incomplete audit","Malformed JSON body returns a 400 error","Temporary service unavailability on Render free-tier infrastructure may cause timeouts","Unknown verifying contracts not in threat database may yield inconclusive results"],"whenToPreferThis":"Choose this endpoint when an AI agent or wallet needs to programmatically audit EIP-712, Permit, Permit2, or EIP-3009 transferWithAuthorization signatures before a user signs them — especially when guarding against phishing-style approval drainers or malicious spender addresses in DeFi contexts. It is purpose-built for typed-data signature security rather than general transaction decoding or bytecode analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:39:29.833Z","isFirstParty":false,"canonicalSlug":"canaryguard-eip-712-signature-auditor-e1daeda8"}