Skip to content
Developers

One API call to screen a wallet, a transaction, or an entire threat actor.

REST and webhooks, native SDKs in five languages, and authentication built for regulated environments.

Quickstart

Screen your first wallet in one request.

Base URLhttps://api.cygy.io/v1

Every screen returns a risk_score, risk_category, matched_labels, sanctions_hit, and entity_cluster — within 200ms.

screen-wallet.sh
curl -X POST https://api.cygy.io/v1/screen/wallet \
  -H "Authorization: Bearer $CYGY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "address": "0x9f2e…a1c4", "chain": "ethereum" }'

# → 200 OK  (returned within 200ms)
{
  "risk_score": 0.91,
  "risk_category": "high",
  "matched_labels": ["mixer", "sanctions_proximity"],
  "sanctions_hit": false,
  "entity_cluster": "cluster_8821"
}
Core endpoints

The surface area of the platform.

POST/screen/walletReal-time wallet risk screening (Track).
POST/screen/transactionReal-time transaction risk scoring (Cipher).
POST/events/ingestSubmit a custom event for agent processing.
GET/threats/{id}Retrieve a correlated threat with full graph.
GET/entities/{id}/graphFull threat graph for a resolved entity.
POST/compliance/sar/draftGenerate a SAR from a threat record.
POST/actions/holdManually trigger a transaction hold.
GET/agents/statusHealth and detection metrics per agent.

Authentication

OAuth 2.0 with mutual TLS, scoped API keys, and optional HSM-backed signing.

SDKs

Python 3.9+Node.js / TypeScriptGoJava / KotlinRust

Webhooks

Signed with HMAC-SHA256, replay-protected with timestamp validation.

threat.detectedaction.executedcompliance.sar_readyagent.alert

Build on the closed loop.

Get API keys and screen wallets, transactions, and threat actors from day one.