API reference

Integrations

Use SpotBlock's security checks from your own tools — scripts, ChatGPT, Claude, or any app — not just this website. No sign-up and no API key needed: every call goes to https://spotblock.org.

Your path through this page

1Connect SpotBlock to your favorite AIClaude connector, ChatGPT actions, or plain curl — one URL each.
2Put SpotBlock inside your own LLMLoad llms.txt once with the prompt below; then just ask.
3Endpointscore25 of them, GET paths runnable live, full detail per card.
4Examples, caps & limitsReady-to-copy curls, rate limits, and AI-scan caps.

Connect SpotBlock to your favorite AI

No sign-up, no API key. Pick where you work, paste one URL — done.

Claude & MCP clients

Settings → Connectors → Add custom connectorhttps://spotblock.org/api/mcp

ChatGPT (GPT Actions)

Create or edit a GPT → Actions → Import from URLhttps://spotblock.org/api/openapi.json

Scripts & backends

Plain JSON over HTTP — curl examples belowhttps://spotblock.org/api

Put SpotBlock inside your own LLM

Point your assistant at llms.txt and it learns the entire surface — endpoints, parameters, daily caps, rate limits. After that one step, asking it to "check this address" or "did this transaction harm anyone" just works: the model picks the right endpoint, calls it, and summarizes the verdict. No custom glue code.

Chat with browsing (ChatGPT, Claude web): paste the prompt below into the conversation.
Claude Projects / custom GPT instructions: add llms.txt as project knowledge or system text — it is small enough to paste whole.
Your own agent or RAG stack: fetch https://spotblock.org/llms.txt at startup and cache it alongside /docs/ai-reference.

One-time prompt

Read https://spotblock.org/llms.txt first. It is the SpotBlock security-API reference. Use it to answer questions about SpotBlock, and whenever I give you an Ethereum address, an ENS name, or a transaction hash, call the right endpoint from it (security-check, tx-harm, monitor status, stats) and summarize the verdict for me.

Endpoint reference

GET paths open in a new tab with live sample data. POST endpoints include a copyable curl.

Threat and security checks

Click any GET path to run it against the live API with sample data. POST endpoints ship a copyable curl. Use Details to expand request and response payloads for a specific endpoint.

GET/api/threat-check?address=0x0000000000000000000000000000000000000000

Is this address listed as a known threat entry?

GET/api/security-check?selector=vitalik.eth

Umbrella check for any selector: a 0x address, an ENS name ending in .eth, or a 0x transaction hash. One call runs the threat DB lookup, the stored contract report (vuln findings, verification status), live contract state, balance/tx-count profile, and monitoring status.

POST/api/tx-harm

Did this transaction cause harm? Pass a mined tx hash or a raw signed transaction; SpotBlock classifies every touched address against the threat DB and decodes token transfers.

curl -s -X POST https://spotblock.org/api/tx-harm -H "content-type: application/json" -d '{"txHash":"0x011512fdefd1e8c0c8b7ccd82ac8e3e67b081f3163f40964520866a99977d5c4"}'

Real-time monitoring

Click any GET path to run it against the live API with sample data. POST endpoints ship a copyable curl. Use Details to expand request and response payloads for a specific endpoint.

GET/api/rt-monitor/list

Public showcase of actively monitored wallets and contracts, grouped by project label.

GET/api/rt-monitor/status?address=0x0000000000000000000000000000000000000001

Wallet monitoring status: watched flag, watch date, risk-alert and activity counts, paged alert lists.

POST/api/rt-monitor/watch

Start watching an address. eth_getCode decides between a wallet watch and a contract watch.

curl -s -X POST https://spotblock.org/api/rt-monitor/watch -H "content-type: application/json" -d '{"address":"0x…","protocol":"my-protocol"}'

POST/api/rt-monitor/stop

Stop real-time monitoring for an address (removes wallet and contract watches).

curl -s -X POST https://spotblock.org/api/rt-monitor/stop -H "content-type: application/json" -d '{"address":"0x…"}'

GET/api/rt-contract-monitor/status?address=0x0000000000000000000000000000000000000001

Contract monitoring status; same shape as the wallet status plus monitorKind, backed by contract watches/alerts.

GET/api/rt-contract-monitor/state?address=0xdAC17F958D2ee523a2206206994597C13D831ec7

Live on-chain contract state: owner(), paused(), EIP-1967 proxy implementation/admin/beacon, and role holders.

Deep scans (signature-gated)

Click any GET path to run it against the live API with sample data. POST endpoints ship a copyable curl. Use Details to expand request and response payloads for a specific endpoint.

GET/api/vuln-scan/nonce

Issue a nonce + issuedAt pair to sign before queueing a scan. Nonces expire after 10 minutes.

POST/api/vuln-scan/scan

Queue a vulnerability scan for a deployed contract. Requires an EIP-191 personal_sign signature over the exact message below.

curl -s -X POST https://spotblock.org/api/vuln-scan/scan -H "content-type: application/json" -d '{"wallet":"0x…","address":"0x…","chainId":1,"nonce":"…","issuedAt":"…","signature":"0x…"}'

GET/api/vuln-scan/status?id=<requestId>

Poll a vulnerability scan request. status cycles queued → running → done | error | cancelled.

POST/api/super-analyst/scan

Queue an AI deep scan (depth simple | advanced). Signature-gated with daily caps: 3/day per wallet, 5/day per IP, 25/day global.

curl -s -X POST https://spotblock.org/api/super-analyst/scan -H "content-type: application/json" -d '{"wallet":"0x…","address":"0x…","chainId":1,"depth":"simple","nonce":"…","issuedAt":"…","signature":"0x…"}'

GET/api/super-analyst/status?id=<requestId>

Poll an AI deep-scan request; same public shape as the vuln status with depth instead of kind.

Utility and data

Click any GET path to run it against the live API with sample data. POST endpoints ship a copyable curl. Use Details to expand request and response payloads for a specific endpoint.

POST/api/wallet-info

Wallet profile: ETH balance and transaction count.

curl -s -X POST https://spotblock.org/api/wallet-info -H "content-type: application/json" -d '{"wallet":"0x…"}'

POST/api/ens-resolver

Resolve a .eth name to an address, or reverse-resolve an address to its primary ENS name.

curl -s -X POST https://spotblock.org/api/ens-resolver -H "content-type: application/json" -d '{"input":"vitalik.eth"}'

GET/api/gastracker

Current Ethereum gas estimates (Etherscan) plus ETH/USD price (CoinGecko).

GET/api/stats

Core SpotBlock platform statistics.

GET/api/addresses?limit=3&label=threat

Paginated query over the threat-DB address collection with filters and facet stats.

GET/api/explorer/overview

Aggregated threat-DB overview for dashboards (counts, top classes, severities, networks).

GET/api/explorer/intelligence

Curated intelligence snapshot: top threat creators, detection signals, shared creation txs, AI rating distribution.

GET/api/contract-exists?address=0xdAC17F958D2ee523a2206206994597C13D831ec7

Whether an address has deployed contract code on the active network.

Discovery surfaces

Click any GET path to run it against the live API with sample data. POST endpoints ship a copyable curl. Use Details to expand request and response payloads for a specific endpoint.

GET/api/openapi.json

OpenAPI 3.0.3 spec describing every endpoint. Import it into Custom GPT actions (Actions → Import from URL) or generate a typed client from it.

GET/llms.txt

Single-page guidance file written for AI agents: capabilities, endpoint table, MCP connector setup, caps, and rate limits.

POST/api/mcp

Stateless MCP Streamable-HTTP JSON-RPC 2.0 endpoint (initialize, tools/list, tools/call). Point Claude (Settings → Connectors → Add custom connector) or any MCP client at this URL; 8 tools available.

curl -s -X POST https://spotblock.org/api/mcp -H "content-type: application/json" -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Examples

Threat check

curl -s "https://spotblock.org/api/threat-check?address=0x0000000000000000000000000000000000000000"

Security check (umbrella)

curl -s "https://spotblock.org/api/security-check?selector=vitalik.eth"

Transaction harm check

curl -s -X POST https://spotblock.org/api/tx-harm \
  -H "content-type: application/json" \
  -d '{"txHash":"0x…"}'

Signature-gated scan flow

# 1. Request a nonce (valid for 10 minutes)
curl -s "https://spotblock.org/api/super-analyst/nonce"

# 2. Sign the returned message with your wallet

# 3. Queue the scan
curl -s -X POST https://spotblock.org/api/super-analyst/scan \
  -H "content-type: application/json" \
  -d '{"wallet":"0xYOUR_WALLET","address":"0x…","chainId":1,"depth":"simple","nonce":"…","issuedAt":"…","signature":"0x…"}'

# 4. Poll the result
curl -s "https://spotblock.org/api/super-analyst/status?id=<scan id>"

MCP tools/call

curl -s -X POST https://spotblock.org/api/mcp \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"spotblock_threat_check","arguments":{"address":"0x…"}}}'

Rate limits and caps

Scope	Limit
AI deep scan (super-analyst)	3/day per wallet, 5/day per IP, 25/day global
Nonce endpoints (vuln-scan, super-analyst)	10/min per IP
tx-harm	10/min per IP
security-check	20/min per IP
MCP server (/api/mcp)	60/min per IP

Notes

Signature-gated scans (vulnerability scan and AI deep scan) are deliberately not exposed as MCP tools, because MCP clients cannot sign with a wallet. Use the scan flow section above to run them from your own client.
MCP and OpenAPI callers act server-side, so no browser CORS changes are needed for those surfaces.
Deep AI scans consume a daily budget (see the caps table) because they burn real analysis compute; the public read endpoints are effectively free.

Need a hand with the integration?

Our team reads and answers every message — or ask in Discord, where the developers hang out.

Contact the team Ask on Discord