# Signature Request Inspector

URL: https://phishdestroy.io/developer-tools/sign-inspector
Category: Crypto & wallets
Where it runs: Runs locally (nothing you enter is uploaded)

Paste what a wallet or a site asks you to sign and see in plain English what it would authorise. Token approvals, permits, Permit2 signatures and Seaport listings that pay someone else are marked red.

## Example input

Permit2 signature for an unlimited USDC allowance

```
{
  "types": {
    "EIP712Domain": [
      {
        "name": "name",
        "type": "string"
      },
      {
        "name": "chainId",
        "type": "uint256"
      },
      {
        "name": "verifyingContract",
        "type": "address"
      }
    ],
    "PermitSingle": [
      {
        "name": "details",
        "type": "PermitDetails"
      },
      {
        "name": "spender",
        "type": "address"
      },
      {
        "name": "sigDeadline",
        "type": "uint256"
      }
    ],
    "PermitDetails": [
      {
        "name": "token",
        "type": "address"
      },
      {
        "name": "amount",
        "type": "uint160"
      },
      {
        "name": "expiration",
        "type": "uint48"
      },
      {
        "name": "nonce",
        "type": "uint48"
      }
    ]
  },
  "primaryType": "PermitSingle",
  "domain": {
    "name": "Permit2",
    "chainId": 1,
    "verifyingContract": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
  },
  "message": {
    "details": {
      "token": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
      "amount": "1461501637330902918203684832716283019655932542975",
      "expiration": "281474976710655",
      "nonce": "0"
    },
    "spender": "0xbBbBBBBbbBBBbbbBbbBbbbbBBbBbbbbBbBbbBBbB",
    "sigDeadline": "115792089237316195423570985008687907853269984665640564039457584007913129639935"
  }
}
```

Red plate: the spender 0xbBbB…BBbB could move an unlimited amount of USDC through Permit2, and neither the allowance nor the signature expires. The EIP-712 digest is computed.

## FAQ

### What does the Signature Request Inspector check?

It decodes EIP-712 typed data, transaction calldata, transaction objects and personal_sign or eth_sign messages and computes the EIP-712 digest. It flags token approvals, setApprovalForAll, EIP-2612 and DAI permits, Permit2 signatures, Seaport orders that pay someone other than you, and blind signatures over a 32-byte hash.

### Can a request that is not marked red still be harmful?

Yes. The tool reads only the request itself: it cannot see balances, existing approvals or whether a contract is malicious, and functions outside its table are shown as unknown. Approvals for legitimate apps are marked red too, because the signature grants the same power either way.

### Is the pasted request sent anywhere?

No. Decoding and hashing run in your browser and the page makes no network requests with your input. A signature request holds no secret, but never paste a private key or seed phrase into any website.

## Related tools

- [Address Checksum Validator](https://phishdestroy.io/developer-tools/address-checksum)
- [Address Poisoning Checker](https://phishdestroy.io/developer-tools/address-poisoning-checker)
- [BIP39 Decoy Seed Phrase Generator](https://phishdestroy.io/developer-tools/bip39-decoy-generator)
- [JSON Formatter](https://phishdestroy.io/developer-tools/json-formatter)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)

All tools: https://phishdestroy.io/developer-tools