Signature Request Purpose Detector
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
Signature Request Purpose Detector reads signature request data from your wallet, whether it is a structured EIP-712 message or a plain text message, and decodes it into plain language before you sign. It parses the domain, types, and message values from EIP-712 requests, identifies what permissions you are granting, what assets are involved, and provides an AI-powered explanation of the request's purpose. For plain text messages, it displays the message content and asks the AI to explain its likely intent.
HOW TO USE
When your wallet prompts you to sign a message, copy the signature request data from your wallet or the requesting dApp. Open the Signature Request Purpose Detector, connect your EVM wallet, and paste the EIP-712 JSON or plain text message into the input area. Click "Analyze signature request" to decode the message and generate an explanation. The tool will display the domain, primary type, message fields, and a plain-language explanation of what you are agreeing to. Review the AI explanation alongside the raw message data, then verify the details in your wallet's signature prompt before approving.
TECHNICAL SECTION — EIP-712 STRUCTURED DATA DECODING
The tool parses EIP-712 structured data by reading the domain, types, and message fields from the JSON input. It extracts the domain name and verifying contract address, the primary type, and all message fields with their values. For plain text messages, the tool displays the raw text and provides context. The AI layer receives the structured data and generates a plain-language explanation of what the signature authorizes. This approach works without requiring any external API or proprietary database.
WHAT IT CANNOT SEE
This tool cannot read the actual intent behind a signature request. It cannot determine if the message is part of a legitimate protocol interaction or a phishing attempt without external verification. It cannot detect signatures that are generated through social engineering. It cannot read the user's private key or session data. It cannot determine if the signature will be used maliciously after it is signed. The user must still verify the signature request details in their wallet before signing. The AI explanation is generated from the input data and does not constitute financial advice or a security audit.
PLEASE NOTE
EVM chains only. Explanations are AI-generated from the data the app reads—always review what you are actually signing in your wallet before approving it. The wallet's own signature prompt remains the final and only protection against unwanted signatures. This tool is read-only; it never sends transactions or signs anything on your behalf.