Home > Features > BLE GATT Dump & Fox Hunt

BLE GATT Dump & Fox Hunt

Open Bluetooth > Scanning > Bluetooth Scan, then tap a device card to open its action menu. The standard menu currently exposes two actions:

Available Actions

  • GATT Dump connects to the device and walks its services, characteristics, descriptors, properties, handles, and readable values.
  • Fox Hunt follows the selected device by signal strength.

Additional GATT testing actions remain under validation and are not shown in the standard menu yet.

GATT Explorer

The GATT Explorer puts the target, result, and useful values first. If the scan name was unavailable, a readable standard Device Name can identify the target after discovery. Values at a Glance collects every non-empty successful or partial characteristic value above the full hierarchy, with its decoded summary, raw bytes, and status. A compact summary accounts for empty and non-readable characteristics without presenting them as failed reads. Services start collapsed, with nested disclosure controls for characteristics and descriptors. A compact Advertisement section decodes the bytes captured with the dump and retains the raw payload for verification. Internal connection and firmware diagnostics are not shown on this screen.

Use Refresh to walk the same address again. The previous complete dump stays visible while refresh runs and is replaced only after the new walk succeeds. Use Save to keep the profile in the GATT Library, or the share button to export the current capture directly as a portable JSON profile without adding it to the library.

Standard Names and Value Decoding

iOS and Android carry the same generated, pinned Bluetooth SIG registry for standard services, characteristics, descriptors, units, formats, appearances, advertising types, presentation namespaces, object types, URI schemes, and published enumerations and bitfields. Friendly labels such as Battery Service and Battery Level appear beside their UUIDs.

The registry is reproducibly generated from Bluetooth SIG public revision a14c6a81114237afb747a5968946d9b9f6117d12, including the Assigned Numbers repository and GATT Specification Supplement.

When a public field has a known format, the app shows its decoded fields and units. Raw hexadecimal bytes remain visible for verification. Custom UUIDs and unknown values always retain their raw fallback; the app does not guess a private schema.

Compatibility

GATT Dump requires Biscuit Pro or Biscuit Ultra with C5 firmware v1.5.3 or later. It applies to BLE targets, not Bluetooth Classic devices. The action is absent on Awok Touch/Mini, Crumb, DIY, Nyan, and every single-chip model because their Bluetooth radio also carries the app link. Fox Hunt remains available for BLE scan results on those models.

GATT dumps preserve characteristic values up to the Bluetooth ATT maximum of 512 bytes. A remote read error retains any bytes that were already received and labels them partial instead of discarding them.

Privacy and Safe Use

BLE privacy addresses can rotate between the initial scan and a follow-up action. If the device is no longer present at the tapped address, rescan and tap its new result. Biscuit never substitutes a stale scan-list row.

Use GATT inspection only with devices you own or have explicit permission to test. Stop the active session when the authorized test is complete.