dApp & Link Check (Crypto)
crypto_dapp_checkOpen a crypto page — a dApp, airdrop, claim or mint link — and report what it asks a wallet to do. DechoNet opens it in an isolated Chromium (Seoul) with a test wallet that holds nothing (EVM, Solana and TRON): it presses the page's "Connect wallet" button once (or one "Claim" button when there is none) and the test wallet in a wallet picker once; it types nothing and submits no form, and the test wallet connects with a burn address and refuses every signature and transaction. Reported: each wallet request in order with what approving it would allow (unlimited token approvals, setApprovalForAll, Permit/Permit2 signatures, transfers, Solana transactions, TRON approvals and account-permission changes), drainer-kit code markers in the page scripts, a connect button that sends the visitor to another site, and the phishing link check verdict of the same link (including whether it is the brand's own domain). Verdicts: danger, suspicious, official, no_signals, unreachable. no_signals means none of these were seen and is not a statement that the page is harmless: drainers that wait for a second press, show nothing to an automated browser or ask only after a sign-in can go unseen, and on new drainer samples few were caught by wallet requests alone (figures on dechonet.com/methodology); 'unchecked' lists what was not looked at. Every call opens the page (no cached answer), so it takes longer than the other checks, and it has a per-minute rate limit and a daily limit shared by all callers. Only the host, the verdict and the kinds of request are kept (90 days); no API key.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"url": "<url>"
},
"name": "crypto_dapp_check"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Address of the page to open (https://…; a bare domain is opened over https) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | The host the page ended on | |
| signals | Yes | ||
| verdict | Yes | no_signals: none of the checks saw a warning sign — not a statement that the page is harmless (see unchecked) | |
| receipts | No | Signed observation receipts behind this result, one per lookup: when, from where and under which rules version DechoNet observed it. Each url shows the record and checks its Ed25519 signature. | |
| rendered | Yes | False when the page could not be opened with the test wallet (then little was seen) | |
| requests | Yes | Wallet requests the page made, in order | |
| unchecked | Yes | ||
| phishingVerdict | No | The phishing link check verdict for the same link |