Getting started with the HTTP API

Authenticate, submit investigations, and subscribe to proactive enforcement signals

Getting started (HTTP API)

HTTP

POST /p/uss/api/v1/oauth2/token
Content-Type: application/json

JSON

{
  "client_id": "COLYON_ORG_ID",
  "client_secret": "<redacted>",
  "scopes": ["signals:write", "cases:read"]
}

Colyon issues short-lived access tokens (5 minutes) signed by lattice-bound HSMs.
Tokens scope which agents can launch what missions (signals, cases, policy updates).
Use the /a/fes/api/v1/fraud-evaluations endpoint to submit wallet activity, protocol events, or threat intel.

HTTP

POST /a/fes/api/v1/fraud-evaluations
Authorization: Bearer <token>
Content-Type: application/json

JSON

{
  "mission_type": "transaction_intent",
  "network": "ethereum",
  "payload": {
    "from": "0xabc...",
    "to": "0xdef...",
    "value": "1.5",
    "asset": "ETH",
    "call_data": "0x..."
  },
  "policy_profile": "exchange-tier-1"
}

Mission responses stream back via webhook within 200ms (p95). The body includes consensus verdict, recommended action, and trace metadata for auditors.

JSON

{
  "endpoint": "https://api.monchain.ai/a/fes/api/v1/fraud-evaluations",
  "token": "<YOUR_API_KEY>",
  "payload": {
    "mission_type": "transaction_intent",
    "network": "ethereum"
  }
}