# Machine Preflight Protect

Machine Preflight Protect is a read-only Base Mainnet wallet monitor operated by Natio Connect.

## Purpose

Use it to detect new ERC-20 Approval and NFT ApprovalForAll events emitted after monitoring begins. It never requests a private key, signs a transaction, revokes a permission or moves funds.

## Human entry point

https://protect.natio.re/docs

## Enrollment

POST https://protect.natio.re/api/monitors
Content-Type: application/json

{
  "walletAddress": "0x...",
  "email": "owner@example.com",
  "label": "Treasury",
  "consent": true,
  "website": ""
}

Only enroll a wallet and email address with the user's explicit permission. The response contains a one-time management token and a dashboard URL. Treat both as private credentials.

## Authenticated status

GET https://protect.natio.re/api/monitor
Authorization: Bearer <management-token>

## Interpretation

- critical: an effectively unlimited token approval was detected.
- high: an operator received access to an entire NFT collection.
- medium: a non-zero token approval was detected.
- info: an approval was revoked.

An alert is evidence of an onchain permission change, not proof of fraud. Ask the user to review unfamiliar operators and use a trusted revocation interface when appropriate.

## Machine-readable resources

- OpenAPI: https://protect.natio.re/openapi.json
- Full guide: https://protect.natio.re/llms-full.txt
- Agent skill: https://protect.natio.re/skill.md

## Operational behavior

Monitoring begins at the current confirmed Base block. Protect intentionally does not claim to reconstruct every historical permission already active before enrollment. The worker waits for 3 confirmations and scans at most 2000 blocks per monitor and cycle.

The dashboard automatically refreshes. The management token is kept in the URL fragment so browsers do not send it to the HTTP server as part of the page URL. API clients should send it only in the Authorization header.

## Safe agent policy

1. Never invent or infer an email address.
2. Never enroll a wallet without the user's explicit request.
3. Never ask for a private key, seed phrase or wallet signature.
4. Treat critical and high alerts as a reason for review, not an automatic accusation.
5. Link to the exact BaseScan transaction in the returned alert.
6. For a transaction that has not yet been signed, use Machine Preflight instead: https://preflight.natio.re/docs

## Data lifecycle

The service stores the public wallet address, contact email, optional label, scan cursor and detected public events. DELETE /api/monitor immediately removes the monitor and its alert history when called with the management token.

## Commercial availability

The public trial lasts 7 days. The Protect plan is 19 EUR per month for one wallet. Paid activation currently adds priority notification and reporting through Natio Connect.

Contact: nora@natio.re