RugSignal

Developer preview · approved clients only

Evidence your product can inspect.

Versioned Solana risk assessments, supporting references and material changes. Stored observations stay reproducible; unknown checks stay unknown.

One engine, several integration surfaces

The Risk API uses the same deterministic engine as RugSignal. It does not trade, custody funds or promise token safety. No platform endorsement or detection superiority is claimed.

GET /api/v1/risk/{mint}
GET /api/v1/risk/{mint}/evidence
GET /api/v1/risk/{mint}/changes
GET /api/v1/risk/{mint}/history

Authentication and rights

Server-side bearer keys are issued and revoked by the operator with explicit scopes, expiration and client quotas. Live redistribution requires provider-rights review and activation. Consumer wallet access does not issue API keys. Commercial prices and licensing are not approved.

Freshness and errors

GET reads existing observations and never initiates a scan. Responses include observation time, scoring version, coverage and a five-minute freshness marker.404means no stored observation;429means allowance reached;503means inactive or unavailable. None means low risk. Preserve unknown checks and limitations in your interface.

Signed changes

Mint subscriptions receive timestamped, HMAC-signed derived events with stable event identifiers. Verify the raw body, reject timestamps outside five minutes and durably deduplicate event IDs. Retries are bounded; delivery is at least once and may be delayed or unacknowledged.

OpenAPI1.0 specification · Request an operator-reviewed integration

Local integration sandbox

The isolated private demo includes a neutral terminal, standalone TypeScript SDK and an embeddable risk card. All examples are labelled synthetic, use a separate database and capture signed events locally. External notifications and real transactions are blocked.

Operator-provided integration kit: docs/DEVELOPER-API.md, sdk/README.md and examples/neutral-terminal/README.md. These are source-kit paths, not publicly exposed private files.