• RISK
  • CLEANUP
  • INVENTORY
  • HUMAN

How to audit wallet token and NFT permissions with your AI

Connect DeBank to your AI client to scan for active permissions. Once connected, your agent can list every token and NFT authorization currently active on a specific wallet.

Ask AI about this page

Short answer

How can I audit my wallet permissions using AI?

Your AI uses DeBank to pull a complete list of all token and NFT authorizations granted to a wallet address. This lets you quickly identify old or suspicious permissions that need to be revoked. You'll see exactly what access you've handed out to smart contracts.

Security outcomes.

Where every issue lands.

What you get after the audit.

RISK

Identify bad actors

The AI flags any token or NFT approvals that look out of place. You get a clear list of which contracts hold power over your assets.

CLEANUP

Revoke old access

The AI identifies stale permissions from long-forgotten dApps. You'll know exactly which authorizations to kill to tighten your security.

INVENTORY

Full asset map

Your agent builds a directory of every active permission. This gives you a bird's-eye view of your wallet's attack surface.

HUMAN

Manual revocation

The AI identifies the risks, but you must go to your wallet or a block explorer to actually revoke the permissions. The AI cannot change blockchain state.

The workflow

What your AI does when the wallet address arrives.

The AI handles the data retrieval so you can focus on the analysis.

  1. Fetch token approvals

    The AI pulls a list of all smart contracts that have permission to move tokens from the target wallet.

    get_user_token_authorized_list

  2. Fetch NFT approvals

    The agent scans for any active authorizations that allow contracts to transfer your NFTs.

    get_user_nft_authorized_list

  3. Analyze risk

    Your AI compares the list of permissions against known patterns to find suspicious or unnecessary access.

    get_user_token_authorized_listget_user_nft_authorized_list

  4. Summarize findings

    The agent organizes the raw data into a readable report of high-risk and low-risk permissions.

    get_user_token_authorized_listget_user_nft_authorized_list

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

Replace the wallet addresses in these prompts with the ones you want to check.

DeBank Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_CfCF0g5WtiFZxWMG9UmtirGurhQoXVrN1ytgj8kr/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — DeBank capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "debank-defi-wallet-tracker-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_CfCF0g5WtiFZxWMG9UmtirGurhQoXVrN1ytgj8kr/mcp"
    }
  }
}
Copy into chat04

  • List all token permissions for wallet 0x123...

  • Check for any NFT authorizations on 0xabc...

  • Are there any suspicious token approvals on this wallet: 0x789...

  • Compare the token and NFT permissions for 0xdef... and tell me if anything looks risky.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect DeBank once, then ask.

Link your DeBank account to the Vinkius platform. Your credentials stay encrypted, and you can immediately start asking your AI to pull wallet data.

Connect DeBank to your AI

FAQ

How this task behaves.

  • 01

    Can the AI revoke my token permissions?

    No. The AI can only read the data. You have to manually revoke permissions through your wallet or a tool like Revoke.cash.

  • 02

    Does the AI need my private keys?

    No. The AI only needs access to the DeBank data via the Connector. It never touches your private keys.

  • 03

    Can it see my total balance?

    No. This specific task only looks at active authorizations for tokens and NFTs.

  • 04

    Will the AI alert me if a new permission is granted?

    No. The AI only acts when you prompt it to run an audit. It does not monitor your wallet in real-time.

  • 05

    Can it check permissions on any chain?

    It can check any wallet that DeBank tracks.

  • More questions about DeBank? See everything the DeBank Connector can do

Connect DeBank to Claude, Cursor, ChatGPT & more