personal_sign prompts beyond Privy’s login flow.
Why warnings appear
On default Vercel hosts such asgraphitti-five.vercel.app, MetaMask and Coinbase often show caution banners for new domains. That is separate from Privy’s embedded signer approval.
What Graphitti configures
- Wallet-only Privy login (no email)
- App logo and name in the Privy connect sheet
- Embedded wallet + session signer for workflow execution without per-step MetaMask popups
What clears warnings
- Attach a custom domain to the Vercel project (for example
graphitti.app). - Add the production origin to Privy allowed origins in the Privy dashboard.
- Register and verify the dapp in Reown Cloud and Coinbase’s app registry so WalletConnect shows Verified.

