Dapp Permission Request Explainer

WHAT IT DOES

Dapp Permission Request Explainer analyzes DApp permission requests and explains whether they are reasonable before you approve. The tool takes the DApp domain, requested permissions, contract address (if applicable), and DApp type, then identifies dangerous permissions (request transactions, sign, approve, transfer, withdraw), moderate permissions (view balance, view transaction history), and safe permissions (view address, view network). It checks the domain for suspicious patterns, compares the requested permissions against the DApp type, and flags excessive or dangerous requests. The tool then uses AI to generate a plain-language explanation of what permissions are being requested, what the DApp can do with each permission, whether the request appears reasonable for the type of DApp, and whether it is asking for more than it needs. Results include a risk level, reasonableness rating (Reasonable, Moderate, Excessive, Unknown), requested permissions with risk indicators, flags, and a comprehensive AI-generated explanation. The tool operates entirely read-only — no transactions are sent, no signatures are required. The AI assessment is designed to help you understand what you are approving before you grant permissions.

HOW TO USE

Connect your EVM wallet using the "Connect" button in the header. Select the network where the DApp operates from the dropdown menu. Enter the DApp domain or URL you are connecting to. Enter the requested permissions (comma-separated, e.g., "view address, view balance, request transactions"). Optionally enter the contract address (if applicable) and select the DApp type (DEX/Trading, Lending/Borrowing, Bridge, NFT Marketplace, Game, Social, or Other). Click "Explain permission request" to begin the analysis. The tool analyzes the permissions, domain reputation, and DApp type, and sends the data to the AI for a plain-English permission explanation. Results appear within seconds, showing the DApp domain, chain, risk level, reasonableness rating, contract address, DApp type, requested permissions with risk indicators, flags, and a comprehensive AI-generated explanation written in clear, conversational language.

PERMISSION PATTERN DETECTION AND REASONABLENESS SCORING

The tool uses a pattern-based approach to analyze DApp permission requests. It classifies permissions into three categories: dangerous (request transactions, sign transactions, transfer, approve, send funds, withdraw, manage assets), moderate (view balance, view transaction history, view token balances), and safe (view address, view network, view chain id). The domain is checked against a list of known trusted DApps (Uniswap, 1inch, Curve, Aave, Compound, Balancer, SushiSwap, Arbitrum, Optimism) and suspicious patterns (airdrop, claim, reward, giveaway, free, bonus, promo) and unusual TLDs (.xyz, .top, .club, .click). The reasonableness rating is determined by the number and type of permissions requested: 0 permissions → Unknown, >2 dangerous permissions → Excessive, dangerous permissions for non-DeFi DApps → Excessive, moderate-only permissions → Moderate, otherwise → Reasonable. The risk level is determined by the reasonableness rating and the presence of dangerous permissions. The AI receives all this data and is prompted to explain the permission request in plain language — stating what permissions are being requested, what the DApp can do with each permission, whether the request appears reasonable for the type of DApp, and whether it is asking for more than it needs. The AI is also instructed to state plainly what it cannot verify — that it reads the permission request and context, not the DApp's off-chain intent, future behavior, or the legitimacy of the underlying application.

WHAT IT CANNOT SEE

This tool cannot definitively determine if a permission request is safe — only reads the requested permissions and context. It cannot detect off-chain misuse of granted permissions — a DApp that requests reasonable permissions could still misuse them later. The tool cannot predict future behavior of the DApp after permissions are granted — a DApp that appears legitimate today may act maliciously later. Legitimate DApps may request broad permissions for valid reasons — a DeFi DApp may need transaction signing permissions to function. The tool cannot verify the identity or trustworthiness of the DApp operator — it only reads the domain and permissions. The tool cannot detect if the DApp is using a phishing domain. The tool cannot detect if the DApp has been compromised. The tool cannot verify that the DApp is the official version of the application. The tool cannot predict the DApp's future behavior.

PLEASE NOTE

Dapp Permission Request Explainer supports EVM-compatible chains only (Ethereum, BSC, Polygon, Arbitrum, Optimism, Avalanche, and others). The tool is read-only and never requests wallet signatures or transaction approvals. Permission assessments are AI-generated from the requested permissions and context — always review what you are approving in your wallet before granting permissions. The AI explanation is for informational purposes only and does not constitute financial or legal advice. Never approve a permission request from a DApp you have not independently verified as legitimate. Always consider whether the requested permissions are necessary for the DApp's functionality.