Blockchain Analytics & Crypto Forensics API

Developer quickstart

API Capabilities

Crypto forensics API

Use the API for crypto forensics: examine inbound and outbound fund flows between counterparties, surface known entity and counterparty labels where available, and pull investigation-ready risk signals through documented fields like patternFlags and riskReasons — the same engine behind our forensics tools, exposed as a REST endpoint. Coverage varies by network; sanctions and abuse checks apply where supported.

Quick Start

The same call works with a sandbox (ocr_test_) or a paid key — start in the sandbox, then swap the key for production.

curl -X POST https://api.onchainrisk.io/api/v1/check \
  -H "Authorization: Bearer ocr_test_your_sandbox_key" \
  -H "Content-Type: application/json" \
  -d '{"address": "0x722122dF12D4e14e13Cf261CbaE0587c9e5b6967"}'

{
  "address": "0x722122dF12D4e14e13Cf261CbaE0587c9e5b6967",
  "network": "eth",
  "riskScore": 95,
  "riskLevel": "critical",
  "riskConfidence": "high",
  "addressInfo": {
    "type": "contract",
    "balance": "0.42 ETH",
    "balanceUsd": 852.74,
    "txCount": 78642,
    "firstSeen": "2019-12-16T18:05:00Z",
    "lastSeen": "2026-05-30T11:42:10Z"
  },
  "patternFlags": [
    "OFAC/sanctions list match",
    "BULK COLLECTION pattern: 24 inbound TXs in 600s"
  ],
  "analysisTime": 4218,
  "timestamp": "2026-05-30T11:42:14Z"
}

Risk signals come through documented fields like patternFlags and riskReasons (with index-aligned detail in patternFlagDetails). Sanctions and abuse checks are applied where supported — coverage varies by network, and a clean result is not a guarantee.

Language Examples

import requests

resp = requests.post(
    "https://api.onchainrisk.io/api/v1/check",
    headers={"Authorization": "Bearer ocr_test_your_sandbox_key"},
    json={"address": "TXyz..."}
)
data = resp.json()
print(f"Risk: {data['riskScore']}/100")

const resp = await fetch(
  "https://api.onchainrisk.io/api/v1/check",
  {
    method: "POST",
    headers: {
      "Authorization": "Bearer ocr_test_your_sandbox_key",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      address: "0x722122dF..."
    }),
  }
);
const data = await resp.json();
console.log(`Risk: ${data.riskScore}/100`);

API Features

API Pricing

Pay for plans with USDT (TRC-20 or ERC-20).

API Use Cases

Docs, tools & developer surface

Everything you need to evaluate and integrate is public and inspectable — one API contract, interactive docs, the full OpenAPI spec, one Postman collection for both tiers, and a sandbox you can call against real data. Choose Production or Sandbox with the corresponding Postman environment and credential; execution depth still varies by endpoint. Existing paid API integrations remain backward-compatible and require no client changes.

Network coverage

OnChainRisk supports 23 networks; coverage and analysis depth vary by network and endpoint — see the live coverage matrix for current per-network status.

Common developer questions