Skip to main content
GET
Get Address Risk Assessment

Authorizations

X-API-KEY
string
header
required

Authorization method required to allow user to access the api endpoints.

Query Parameters

address
string
required
window
string

Time window for analysis: 30d, 90d, 180d, 365d, or all.

include_evidence
string

Response

200 - application/json
screen_id
string
required
Example:

"a1b2c3d4-e5f6-7890-abcd-ef1234567890"

address
string
required
Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f2bD28"

address_active_on
string[]
required

Networks this address has labelled activity on (from addresses.labels).

Example:
total_incoming_usd
number
required

All-counterparty incoming USD volume (lifetime). 0 for unsupported networks.

Example:

1842300.45

total_outgoing_usd
number
required

All-counterparty outgoing USD volume (lifetime).

Example:

1798450.12

malicious_incoming_usd
number
required

USD volume from counterparties tagged as malicious.

Example:

184500

malicious_outgoing_usd
number
required

USD volume to counterparties tagged as malicious.

Example:

92300

severity
enum<string>
required

Worst individual signal severity across all three pillars.

Available options:
severe,
high,
medium,
low,
none
Example:

"high"

attribution
object
required
exposure
object
required
behaviour
object
required
timestamp
string
required
Example:

"2026-05-04T14:30:00Z"

meta
object
required

Per-upstream-call latency (ms) for this screen.

evidence
object

Present only when include_evidence=true. Same shape as GET /v2/risk/evidence/:screenId minus the wrapping screen_id.

Last modified on May 19, 2026