Site-Specific Approval Manager

WHAT IT DOES

The Site-Specific Approval Manager monitors any dApp page for token approval requests and automatically applies user‑defined rules based on the website you're visiting. Instead of manually deciding how to handle each approval—whether to allow, cap, or revoke—you can configure a per‑site policy that handles approvals automatically. For each site, you can set a default action (prompt, cap, allow, or revoke), a default cap amount, a trusted spender list (always allow), and a blocked spender list (always block). When an approval is detected, the tool checks the spender against your rules: trusted spenders are allowed silently, blocked spenders are flagged and prevented, and unknown spenders trigger your configured action or a prompt. This eliminates repetitive decision‑making while keeping you in control of your security posture.

WHERE IT RUNS

It runs as a draggable overlay panel inside the BotGentz extension on any website that requests token approvals—Uniswap, SushiSwap, 1inch, Curve, Aave, Compound, OpenSea, Rarible, and thousands of other DeFi and NFT dApps. It works by scanning the page's DOM for approval‑related elements and applying your rules in real time.

HOW TO USE

1. Install the free BotGentz extension and ensure you have an EVM‑compatible wallet extension installed.

2. Navigate to any dApp where you might approve a token.

3. Click the BotGentz icon and select "Site-Specific Approval Manager" from the tools menu.

4. Click "Start Watching" to begin monitoring the page.

5. Configure your site policy: set a default action (Prompt/Cap/Allow/Revoke), a cap amount, and trusted/blocked spender lists.

6. When an approval is detected, the tool applies your rules automatically.

7. If no rule matches, the tool prompts you with options to Allow (once), Cap, Revoke, or Trust Spender.

8. Your policy is saved per site and persists across sessions.

9. Drag the panel to reposition it, resize it, collapse it, or press Escape to close.

THE ACTUAL MECHANISM — DOM‑driven approval detection with per‑site policy evaluation and automated transaction submission

This tool combines real‑time DOM monitoring, policy evaluation, and automated transaction signing into a single workflow. First, a MutationObserver watches the page for changes and scans for approval‑triggering elements—buttons with text like "Approve", "Enable", "Unlock", or "Allow"—then extracts token and spender addresses from the surrounding DOM. Second, the tool loads the site‑specific policy from persistent storage (via GM_setValue/GM_getValue), which includes: default action (prompt/cap/allow/revoke), cap amount, trusted spenders, and blocked spenders. Third, the evaluation engine checks the spender against the policy: if blocked, it displays a warning and takes no action; if trusted, it allows the approval silently; if the default action is "cap", it loads ethers.js (at runtime), builds an `approve(address spender, uint256 amount)` transaction with the capped amount, and submits it via `window.ethereum.request({ method: "eth_sendTransaction" })`; if the default action is "revoke", it submits a transaction with amount set to 0; if the default is "prompt" or no rule matches, it displays an interactive prompt with Allow, Cap, Revoke, and Trust Spender buttons. All policy data is stored locally per domain, allowing different rules for different sites without interference.

THE PANEL

The panel is fully draggable by its title bar and snaps to the nearest edge of the viewport when released. You can resize it horizontally by dragging the left or right border; the height expands to fit content up to a maximum, with scrolling inside the prompts list. A collapse button minimizes the panel to a small floating chip showing "⚙️ Approval Manager" — click it to expand back. Press Escape at any time to close the panel entirely. The panel remembers its last position, size, and expansion state per domain via localStorage.

PLEASE NOTE

- This tool requires the free BotGentz extension and a real EVM wallet extension (e.g., MetaMask) already installed in your browser.

- This tool works only on EVM‑compatible chains.

- The tool cannot detect approvals initiated via non‑standard interfaces (e.g., custom contract calls not using the standard approve function). It cannot read or enforce rules for approvals made outside the dApp interface (e.g., directly through a wallet). It cannot automatically detect if a spender is "trusted" without user input. It cannot prevent a user from manually approving outside the tool's intervention.

- No private keys, seed phrases, or sensitive data are ever read, stored, or transmitted. All transactions are signed and sent directly from your wallet. Policy data is stored locally in your browser's extension storage. Only anonymized usage metrics (panel open/close, policy applications) are collected; you can disable this in the extension settings at any time.