> ## Documentation Index
> Fetch the complete documentation index at: https://docs.webacy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Introduction

> Get started with the Webacy Risk Score API for blockchain addresses, transactions, contracts, tokens, and URLs, and learn how the surface is organized.

The Webacy Risk Score API provides comprehensive security analysis for blockchain addresses, transactions, smart contracts, tokens, and URLs. Protect your users from threats, fraud, and malicious activity across multiple blockchain networks.

## Base URL

All API requests are made to:

```text theme={null}
https://api.webacy.com
```

A development environment is also available at `https://api-development.webacy.com`.

### Versioning in the path

* **v2 (default)** endpoints have **no version prefix** — for example `/vaults`, `/addresses/{address}`, `/rwa`.
* **v3** endpoints use a `/v3/` prefix — for example `/v3/vaults/{address}`, `/v3/rwa/grades`, `/v3/framework`.
* **Never use `/api/`.** A request to `https://api.webacy.com/api/v3/...` returns `403 Missing Authentication Token`. The prod gateway strips `/api`, so it must not appear in any request.

## Supported Chains

The API supports 13 blockchain networks including Ethereum, Solana, TON, Hedera, and more.

<Card title="View All Supported Blockchains" icon="link" href="/essentials/supported-blockchains">
  Complete list of supported chains with their identifiers and endpoint availability
</Card>

## API Categories

<CardGroup cols={2}>
  <Card title="Threat Risks" icon="shield-exclamation" href="/api-reference/threat-risks/threat-considerations-for-an-address">
    Analyze addresses for security threats and malicious activity
  </Card>

  <Card title="Sanction Checks" icon="ban" href="/api-reference/sanction-checks/check-if-wallet-address-is-sanctioned">
    Check addresses against OFAC and other sanction lists
  </Card>

  <Card title="Contract Risk" icon="file-code" href="/api-reference/contract-risk/get-a-real-time-analysis-for-a-given-contract-address">
    Real-time smart contract security analysis
  </Card>

  <Card title="Token Analysis" icon="coins" href="/api-reference/token-analysis/get-token-economic-history">
    Comprehensive token security and market analysis
  </Card>

  <Card title="Transaction Scanning (KYT)" icon="magnifying-glass" href="/api-reference/transaction-scanning/scan-raw-evm-transaction-for-security-risks">
    Know Your Transaction — scan and simulate transactions for risks
  </Card>

  <Card title="Holder Analysis" icon="users" href="/api-reference/holder-analysis/get-detailed-early-holder-analysis-for-a-token">
    Token holder distribution and sniper detection
  </Card>
</CardGroup>

## Response Format

Successful responses return JSON with relevant risk data:

```json theme={null}
{
  "count": 1,
  "medium": 0,
  "high": 0,
  "overallRisk": 25.99,
  "issues": [],
  "isContract": false
}
```

### Error Responses

```json theme={null}
{
  "message": "Unauthorized"
}
```

## Hard-gating and fail behavior

<Warning>
  REST is the primary integration path for hard-gate and pre-execution decisioning. The [MCP server](/integrations/mcp-server) is a convenience wrapper over a subset of the REST surface.

  Treat missing, stale, or errored data as **unknown — never as safe**. Before using a result in a decisioning path, check the relevant freshness field for that endpoint:

  * **`stale`** — vault v2 list/detail and the RWA grades list. Hard-gate on this when present.
  * **`generated_at`** — RWA grades list and the vault v2 list `aggregates` block.
  * **`metadata.last_scored_at`** — vault detail (v2 and v3). The **v3 vault detail endpoint does not return `stale` or `generated_at`** — use `metadata.last_scored_at`, or read the v2 list / grades endpoints, which carry `stale`.
  * **`analyzed_at`** — address risk (`/addresses/{address}`).

  A missing endpoint, a `4xx`/`5xx`, or a `stale: true` flag means you do not have a current risk assessment. Fail closed.
</Warning>

## Rate Limits

API requests are rate-limited based on your plan. See [Rate Limits](/essentials/rate-limits) for details on limits and quotas. Use the API Usage endpoint to monitor your consumption.

## Support

Need help? Contact us at [info@webacy.com](mailto:info@webacy.com) or get your API key at [developers.webacy.co](https://developers.webacy.co/).