Audit your MetaMask token approvals before they become a risk
Every Monday, WebRun opens your MetaMask portfolio view, reads the list of active token approvals and connected sites, flags any approval that is unlimited, unused in the last 90 days, or tied to a contract not seen before, adds a review slot to Google Calendar, and posts the flagged list to Microsoft Teams for you to act on.
- No credit card
- Under $0.01 per run
- Cancel anytime
How do I audit and clean up risky token approvals in MetaMask?
WebRun reviews your MetaMask wallet's active token approvals every Monday, flagging any that are unlimited, unused for 90 days, or tied to a contract not seen before. It schedules a short review slot on Google Calendar and posts the flagged list to Microsoft Teams, so stale or risky approvals get a human decision instead of sitting forgotten indefinitely.
- Unlimited or stale approvals get flagged instead of sitting quietly forever
- A standing calendar slot turns awareness into an actual weekly review habit
- No approval is ever revoked automatically, so every decision stays yours
Built for DeFi users · crypto power users · wallet security-conscious holders · crypto teams managing shared wallets
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
portfolio.metamask.ioin a real browser with your saved login - no setup, no API keys. -
1
MetaMask - read active token approvals
metamask.io
WebRun opens MetaMask to read active token approvals. - Open the MetaMask portfolio view and read the connected sites and active token approvals
- Note which approvals are unlimited rather than capped to a specific amount
- Flag any approval unused in the last 90 days or tied to a contract not seen on a prior run
Done when Every active approval is listed with its limit, last-used date, and risk flag.
-
2
Google Calendar - schedule the review slot
calendar.google.com How to Automate Google Calendar
WebRun opens Google Calendar to schedule the review slot. - Add a 15 minute review slot to your calendar for this week
- Attach the flagged approval list to the event notes
- Skip creating an event on a week where nothing new was flagged
Done when A review slot exists on the calendar whenever new approvals were flagged.
-
3
Microsoft Teams - post the flagged approval list
microsoft.com How to Automate Microsoft Teams
WebRun opens Microsoft Teams to post the flagged approval list. - Post the flagged approvals with the contract, limit, and last-used date for each
- Put unlimited and previously unseen contracts at the top
- State clearly that revoking is done by a human directly in their wallet
Done when The team has this week's flagged approval list with nothing revoked automatically.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Does WebRun revoke any token approvals itself?
No. WebRun never places, cancels, or modifies a trade, and it never transfers funds or moves assets. It only reads and reports on your active approvals. Revoking one is an on-chain transaction that only you can sign, so it is always left for you to do directly in MetaMask or a block explorer.
How does it decide an approval is risky?
It flags approvals that are unlimited rather than capped, unused for 90 days, or tied to a contract it has not seen in a prior weekly run. These are signals to review, not a guarantee something is wrong.
Can WebRun see or use my private key?
No. It only reads the public approval and connection data your wallet already shows. It never has access to your seed phrase or private key, and it never signs a transaction.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.