DEVELOPER API

Build on the trust layer.

These are the exact same endpoints that power this site. They read Robinhood Chain mainnet directly — no fixtures, no replayed data. Free-tier keys are not required yet; fair-use rate limits apply per client.

Overview

The SentryHood API exposes on-chain trust intelligence as JSON. The centerpiece is the scan endpoint: one call returns a composite forensic report for any contract — source audit, launch origin, deployer profile, funding trace and holder concentration — the exact pipeline described in the whitepaper.

Protocol: HTTPS, JSON in/out
Auth: None on public tier (API keys land with B2B launch)
Freshness: Live reads, server-side cached ≤60s
Limits: 20 scan requests / minute / client

Quickstart

Scan the live VIRTUAL token contract:

bash

curl "https://sentryhood-security.pages.dev/api/scan?address=0xc6911796042b15d7Fa4F6CDe69e245DdCd3d9c31"

In JavaScript:

const res = await fetch(
  "https://sentryhood-security.pages.dev/api/scan?address=" + contractAddress
);
const report = await res.json();

if (!res.ok) throw new Error(report.message);
console.log(report.verdict, report.score); // "LOW_RISK" 12

GET /api/scan

Runs the full forensic pipeline for one address and returns a composite report.

Parameters

Name	In	Type	Description
address	query	string	EVM address, 0x + 40 hex chars. Contract or EOA.

Response — 200 OK

json

{
  "address": "0x2Ea05472e1b7289004e5A1F6D959f6F2F3a6fecB",
  "score": 12,
  "verdict": "LOW_RISK",
  "verdictLabel": "Low Risk",
  "flags": []
}

GET /api/portfolio

Evaluates read-only token positions and valuations for a given wallet address.

bash

curl "https://sentryhood-security.pages.dev/api/portfolio?address=0x5d3a1Ff2b6BAb83b63cd9AD0787074081a52ef34"

GET /api/deployers

Traverses EOA creator history, creation txs, and serial deployment flags.

bash

curl "https://sentryhood-security.pages.dev/api/deployers?address=0xc6911796042b15d7Fa4F6CDe69e245DdCd3d9c31"

GET /api/tokens

Indexes verified stock equities and mainnet tokens with live price feeds.

bash

curl "https://sentryhood-security.pages.dev/api/tokens"

GET /api/copilot

Natural language query router executing multi-tool forensic reasoning.

bash

curl "https://sentryhood-security.pages.dev/api/copilot?q=Is%200x2Ea0...%20safe?"

GET /api/stats

Returns mainnet node block height and indexed transaction metrics.

bash

curl "https://sentryhood-security.pages.dev/api/stats"

GET /api/blocks

Fetches live block header stream for the mainnet ticker.

bash

curl "https://sentryhood-security.pages.dev/api/blocks"

Errors & Rate Limits

HTTP 400 for invalid address formats (`0x` + 40 hex). HTTP 429 when client exceeds 20 req/min.

Scoring Model

The score is a transparent sum, clamped to 0–100. Verdict bands: 0–24 low risk, 25–54 caution, 55+ high risk.

API Keys & B2B Tiers

Programmatic access to SentryHood trust intelligence uses Bearer token authentication. API keys ship with our B2B launch and support custom rate limits and live threat streams.

Authentication Header

bash

curl -X POST "https://sentryhood-security.pages.dev/api/scan" \
  -H "Authorization: Bearer sntry_live_98a7f1e42c80911a" \
  -H "Content-Type: application/json" \
  -d '{"address": "0x2Ea05472e1b7289004e5A1F6D959f6F2F3a6fecB"}'

Rate Limit Tiers

Tier	Rate Limit	Webhooks	Access
Public / Free	20 req/min	—	No key needed
Pro Shield	200 req/min	3 Endpoints	Key required
B2B Enterprise	Custom / Uncapped	Unlimited + WebSocket	Dedicated SLA

Join B2B Waitlist for Early API Keys →

API Roadmap

v2 B2B API Key provisioning, WebSocket live threat push streams, and automated SDKs for Node.js and Python.