trace_vmp_for_sign
Install a tap to record VMP property reads and optionally trigger a signature function, enabling analysis of VMP behavior for signature recovery.
Instructions
Install a signature-safe tap and record what the VMP reads.
Args: properties: list of property names to watch on navigator/screen/history/ location prototypes. If empty, uses a default high-signal set. trigger_js: optional JS expression to evaluate AFTER the tap is installed, to actually invoke the VMP (e.g. "sign(payload)"). max_entries: cap on the recorded log. track_calls: also instrument Date.now / etc. clear_log: clear any previous tap log first. wait_ms: extra delay after trigger_js before reading the log.
Returns: dict with the tap summary, count of recorded reads, and a condensed view of the VMP's reads (prop -> latest value preview).
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "trace_vmp_for_sign"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| wait_ms | No | ||
| clear_log | No | ||
| properties | No | ||
| trigger_js | No | ||
| max_entries | No | ||
| track_calls | No |