Skip to main content

​
Welcome

The HashDit API provides threat intelligence for analyzing domains and URLs for potential security risks. Use the API to check domains and receive detailed risk assessments with severity scores and indicators.

​
Authentication

All API endpoints require authentication using an API key passed in the X-API-KEY header.
Keep your API key secure and never expose it in client-side code or public repositories.
A missing or invalid API key returns 401:

​
Base URL

All API requests should be made to:

​
Request Field Names

Every request field accepts both camelCase and snake_case. For example, chainId and chain_id, userAddress and user_address, and livenessCheck and liveness_check are equivalent. Sending the same field under both spellings in one request with different values returns 400. Sending it twice with the same value is accepted.

​
Getting Started

To get started with the HashDit API:
  1. Obtain your API key from the HashDit team
  2. Include your API key in the X-API-KEY header for all requests
  3. Make requests to the appropriate endpoint with the required parameters

​
API Endpoints

Address Classification

Classify blockchain addresses by type and behavior

Address Poisoning Detection

Detect spoofing-based address and token poisoning in context

Address Security v2

Perform in-depth security analysis of blockchain addresses

Domain Security

Analyze domains and URLs for security risks

EVM Token Security

Security and market analysis for EVM-compatible tokens

Solana Token Security

Comprehensive security assessment for Solana tokens

Transaction Security

Check a transaction before it is signed — what it would do on chain, and whether it should be signed

Token Approval Security

Risk-scored view of a wallet’s outstanding token approvals

EIP-712 Signature Security

Analyze typed-data signing requests before the user signs