Blockaid Monitors API
The Monitors API from Blockaid — 3 operation(s) for monitors.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/blockaid-monitors-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Blockaid Asset Management Monitors API
description: Blockaid Risk Score API
termsOfService: https://www.blockaid.io/legal/terms-of-use
license:
name: Proprietary
url: https://www.blockaid.io/legal
version: 1.0.0
servers:
- url: https://api.blockaid.io
description: Production server
- url: https://client.blockaid.io
description: Clients server
tags:
- name: Monitors
paths:
/v0/platform/monitors/:
post:
summary: Create Monitor
deprecated: false
description: Create a monitor that tracks configured rules and triggers actions when incidents match.
tags:
- Monitors
parameters: []
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/NewMonitorCreation'
examples:
Create Monitor Example:
summary: Create monitor
value:
name: High-Risk Activity Monitor
tags:
- security
actions: []
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: high
is_silent: false
required: true
responses:
'200':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/MonitorObject'
example:
id: mon_123
name: High-Risk Activity Monitor
is_enabled: true
created_by: api
updated_by: api
updated_at: '2026-02-11T12:00:00Z'
created_at: '2026-02-11T12:00:00Z'
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: high
is_silent: false
tags:
- security
headers: {}
security:
- APIKey: []
- ClientID: []
- JWT: []
/v0/platform/monitors/{id}:
get:
summary: Get Monitor
deprecated: false
description: Fetch a single monitor by ID.
tags:
- Monitors
parameters:
- name: id
in: path
description: The monitor's ID.
required: true
schema:
type: string
responses:
'200':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/MonitorObject'
example:
id: mon_123
name: High-Risk Activity Monitor
is_enabled: true
created_by: api
updated_by: api
updated_at: '2026-02-11T12:00:00Z'
created_at: '2026-02-11T12:00:00Z'
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: high
is_silent: false
tags:
- security
headers: {}
security:
- APIKey: []
- ClientID: []
- JWT: []
patch:
summary: Update Monitor
deprecated: false
description: Change a monitor's name, rules, tags, or actions.
tags:
- Monitors
parameters:
- name: id
in: path
description: The monitor's ID.
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
name:
type: string
description: Updated display name for the monitor.
is_enabled:
type: boolean
description: Whether the monitor is enabled.
tags:
type: array
description: Updated list of tags assigned to the monitor.
items:
type: string
actions:
type: array
description: Updated actions that run when monitor rules are triggered.
items:
anyOf:
- $ref: '#/components/schemas/EmailAction'
- $ref: '#/components/schemas/SlackAction'
- $ref: '#/components/schemas/TelegramAction'
- $ref: '#/components/schemas/WebhookAction'
- $ref: '#/components/schemas/PauseContractAction'
- $ref: '#/components/schemas/SequencerAction'
- $ref: '#/components/schemas/APICallAction'
- $ref: '#/components/schemas/CallContractAction'
monitors:
description: The updated rules this monitor runs.
anyOf:
- $ref: '#/components/schemas/MonitorRuleRequest'
- $ref: '#/components/schemas/SystemMonitorRuleRequest'
examples:
Update Monitor Example:
summary: Update monitor
value:
name: High-Risk Activity Monitor v2
is_enabled: true
tags:
- security
- critical
actions: []
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: critical
is_silent: false
required: true
responses:
'200':
description: ''
content:
application/json:
schema:
$ref: '#/components/schemas/MonitorObject'
example:
id: mon_123
name: High-Risk Activity Monitor v2
is_enabled: true
created_by: api
updated_by: api
updated_at: '2026-02-11T12:30:00Z'
created_at: '2026-02-11T12:00:00Z'
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: critical
is_silent: false
tags:
- security
- critical
headers: {}
security:
- APIKey: []
- ClientID: []
- JWT: []
delete:
summary: Delete Monitor
deprecated: false
description: Remove a monitor by ID.
tags:
- Monitors
parameters:
- name: id
in: path
description: The monitor's ID.
required: true
schema:
type: string
responses:
'204':
description: ''
content:
application/json:
schema:
type: object
additionalProperties: false
example: {}
headers: {}
security:
- APIKey: []
- ClientID: []
- JWT: []
/v0/platform/monitors/search:
post:
summary: Search Monitors
deprecated: false
description: Search monitors with pagination and sorting controls.
tags:
- Monitors
parameters: []
requestBody:
content:
application/json:
schema:
type: object
properties:
page_size:
type: integer
description: Number of results returned per page.
page:
type: integer
description: Page number to return.
sort:
type: array
description: Sorting rules applied to the result set.
items:
type: object
properties:
field:
type: string
description: Field to sort by.
enum:
- id
- created_at
operator:
type: string
description: Sort direction.
enum:
- asc
- desc
required:
- field
- operator
filter:
type: object
description: Optional filter criteria.
properties:
name:
type: object
description: Filter by monitor name. Exactly one operator must be provided.
properties:
eq:
type: string
description: Exact match.
in:
type: array
items:
type: string
description: Match any value in the list.
contains:
type: string
description: Substring match (case-insensitive).
contains_all:
type: array
items:
type: string
description: Must contain all specified words.
required:
- page_size
- page
- sort
examples:
Search Monitors Example:
summary: Search monitors
value:
page_size: 20
page: 1
sort:
- field: created_at
operator: desc
required: true
responses:
'200':
description: ''
content:
application/json:
schema:
type: object
properties:
items:
type: array
items:
$ref: '#/components/schemas/MonitorObject'
description: Monitor objects returned for this page.
total:
type: integer
description: Total number of matching results.
page:
type: integer
description: Current page number in the response.
pages:
type: integer
description: Total number of pages available.
size:
type: integer
description: Number of objects returned in this page.
required:
- items
- total
- page
- pages
- size
example:
items:
- id: mon_123
name: High-Risk Activity Monitor
is_enabled: true
created_by: api
updated_by: api
updated_at: '2026-02-11T12:00:00Z'
created_at: '2026-02-11T12:00:00Z'
monitors:
- type: approval_to_multicall_contract
target:
- type: asset_id
identifier: asset_123
severity: high
is_silent: false
tags:
- security
total: 1
page: 1
pages: 1
size: 1
headers: {}
security:
- APIKey: []
- ClientID: []
- JWT: []
components:
schemas:
ContractOwnerChangeMonitor:
type: object
properties:
type:
type: string
const: contract_owner_change
description: Type discriminator for this object.
target:
type: array
items:
anyOf:
- $ref: '#/components/schemas/AssetIDTarget'
- $ref: '#/components/schemas/AssetTagTarget'
- $ref: '#/components/schemas/AssetLabelTarget'
- $ref: '#/components/schemas/AssetIDExcludeTarget'
description: Target asset or entity selection for this rule or action.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- target
- severity
description: Standard Rule
SystemMonitorRuleRequest:
title: System Monitor Rule Request
description: Supported system monitor rule collections accepted by the API.
oneOf:
- type: array
items:
$ref: '#/components/schemas/MaliciousInteractionWithOFACAddressMonitor'
title: Malicious Interaction With OFACAddress Rules
- type: array
items:
$ref: '#/components/schemas/MonitoredContractExploitMonitor'
title: Monitored Contract Exploit Rules
- type: array
items:
$ref: '#/components/schemas/ImpersonatorDappDeployedMonitor'
title: Impersonator Dapp Deployed Rules
- type: array
items:
$ref: '#/components/schemas/ImpersonatorTokenDeployedMonitor'
title: Impersonator Token Deployed Rules
- type: array
items:
$ref: '#/components/schemas/FrontendAttackMonitor'
title: Frontend Attack Rules
- type: array
items:
$ref: '#/components/schemas/ExploitContractDeployedWithReferenceToMonitoredAssetMonitor'
title: Exploit Contract Deployed With Reference To Monitored Asset Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousFundsExposureMonitor'
title: Malicious Funds Exposure Rules
- type: array
items:
$ref: '#/components/schemas/UserGotDrainedMonitor'
title: User Got Drained Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousTransactionWasBlockedMonitor'
title: Malicious Transaction Was Blocked Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousTransactionDetectedMonitor'
title: Malicious Transaction Detected Rules
- type: array
items:
$ref: '#/components/schemas/ToctouPackageDeployedMonitor'
title: TOCTOU Package Deployed Rules
- type: array
items:
$ref: '#/components/schemas/ActiveMaliciousAirdropCampaignMonitor'
title: Active Malicious Airdrop Campaign Rules
- type: array
items:
$ref: '#/components/schemas/AddressPoisoningCampaignMonitor'
title: Address Poisoning Campaign Rules
ToctouPackageDeployedMonitor:
type: object
properties:
type:
type: string
const: toctou_package_deployed
description: Type discriminator for this object.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- severity
description: TOCTOU Package Deployed
Authentication:
anyOf:
- $ref: '#/components/schemas/HMACAuthentication'
- $ref: '#/components/schemas/AuthorizationHeaderAuthentication'
- $ref: '#/components/schemas/APIKeyAuthorization'
- $ref: '#/components/schemas/BasicAuth'
MaliciousTransactionDetectedMonitor:
type: object
properties:
type:
type: string
const: malicious_transaction_detected
description: Type discriminator for this object.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- severity
description: Malicious Transaction Detected
MaliciousInteractionWithOFACAddressMonitor:
type: object
properties:
type:
type: string
const: malicious_interaction_with_ofac_address
description: Type discriminator for this object.
target:
type: array
items:
anyOf:
- $ref: '#/components/schemas/AssetIDTarget'
- $ref: '#/components/schemas/AssetTagTarget'
- $ref: '#/components/schemas/AssetLabelTarget'
- $ref: '#/components/schemas/AssetIDExcludeTarget'
description: Target asset or entity selection for this rule or action.
parameters:
type: object
properties:
malicious_actor_label:
type: object
properties:
operator:
type: string
enum:
- in
- not_in
description: Comparison operator for malicious actor label.
value:
type: array
items:
type: string
description: Comparison value for malicious actor label.
required:
- operator
- value
description: Malicious Actor Label for this configuration.
interaction_direction:
type: object
properties:
operator:
type: string
enum:
- is
- is_not
description: Comparison operator for interaction direction.
value:
type: string
enum:
- any
- inbound
- outbound
description: Comparison value for interaction direction.
required:
- operator
- value
description: Interaction Direction for this configuration.
chain:
type: object
properties:
operator:
type: string
enum:
- in
- not_in
description: Comparison operator for chain.
value:
type: array
items:
$ref: '#/components/schemas/MonitoringSupportedChains'
description: Comparison value for chain.
required:
- operator
- value
description: Chain for this configuration.
interaction_type:
type: object
properties:
operator:
type: string
enum:
- in
- not_in
description: Comparison operator for interaction type.
value:
type: array
items:
type: string
enum:
- funds_transfer
- approval
- function_call
description: Comparison value for interaction type.
required:
- operator
- value
description: Interaction Type for this configuration.
interaction_usd_value:
type: object
properties:
operator:
type: string
enum:
- eq
- neq
- gt
- gte
- lt
- lte
description: Comparison operator for interaction usd value.
value:
type: number
description: Comparison value for interaction usd value.
required:
- operator
- value
description: Interaction USD Value for this configuration.
required:
- malicious_actor_label
- interaction_direction
description: Parameters for this configuration.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- target
- parameters
- severity
description: Malicious Interaction with an OFAC Address
APIKeyAuthorization:
type: object
properties:
type:
type: string
const: api_key
description: Type discriminator for this object.
header_name:
type: string
description: Header name used for API key authentication.
api_key:
type: string
description: Secret value for api key authentication.
required:
- type
- header_name
- api_key
FunctionCallMonitor:
type: object
properties:
type:
type: string
const: function_call
description: Type discriminator for this object.
target:
type: array
items:
anyOf:
- $ref: '#/components/schemas/AssetIDTarget'
- $ref: '#/components/schemas/AssetTagTarget'
- $ref: '#/components/schemas/AssetLabelTarget'
- $ref: '#/components/schemas/AssetIDExcludeTarget'
description: Target asset or entity selection for this rule or action.
parameters:
type: object
properties:
function_name:
type: object
properties:
operator:
type: string
enum:
- is
- is_not
description: Comparison operator for function name.
value:
type: string
description: Comparison value for function name.
required:
- operator
- value
description: Function Name to match.
function_parameter:
type: array
items:
anyOf:
- type: object
properties:
parameter:
type: string
description: Parameter for this configuration.
operator:
type: string
enum:
- is
- is_not
- contains
- not_contains
description: Comparison operator for function parameter.
value:
type: string
description: Comparison value for function parameter.
required:
- operator
- value
- parameter
- type: object
properties:
parameter:
type: string
description: Parameter for this configuration.
operator:
type: string
enum:
- is
- is_not
- eq
- gte
- lte
- lt
- gt
- neq
- increase_by
- decrease_by
- multiply_by
- divide_by
description: Comparison operator for function parameter.
value:
type: integer
description: Comparison value for function parameter.
required:
- operator
- value
- parameter
description: Function Parameter for this configuration.
caller_address:
type: object
properties:
operator:
type: string
enum:
- in
- not_in
description: Comparison operator for caller address.
value:
type: array
items:
$ref: '#/components/schemas/AssetIDTarget'
description: Comparison value for caller address.
required:
- operator
- value
description: Caller Address for this configuration.
required:
- function_name
- caller_address
description: Parameters for this configuration.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- target
- parameters
- severity
description: Standard Rule
SystemMonitorRuleResponse:
title: System Monitor Rule Response
description: Supported system monitor rule collections returned by the API.
oneOf:
- type: array
items:
$ref: '#/components/schemas/MaliciousInteractionWithOFACAddressMonitor'
title: Malicious Interaction With OFACAddress Rules
- type: array
items:
$ref: '#/components/schemas/MonitoredContractExploitMonitor'
title: Monitored Contract Exploit Rules
- type: array
items:
$ref: '#/components/schemas/ImpersonatorDappDeployedMonitor'
title: Impersonator Dapp Deployed Rules
- type: array
items:
$ref: '#/components/schemas/ImpersonatorTokenDeployedMonitor'
title: Impersonator Token Deployed Rules
- type: array
items:
$ref: '#/components/schemas/FrontendAttackMonitor'
title: Frontend Attack Rules
- type: array
items:
$ref: '#/components/schemas/ExploitContractDeployedWithReferenceToMonitoredAssetMonitor'
title: Exploit Contract Deployed With Reference To Monitored Asset Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousFundsExposureMonitor'
title: Malicious Funds Exposure Rules
- type: array
items:
$ref: '#/components/schemas/UserGotDrainedMonitor'
title: User Got Drained Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousTransactionWasBlockedMonitor'
title: Malicious Transaction Was Blocked Rules
- type: array
items:
$ref: '#/components/schemas/MaliciousTransactionDetectedMonitor'
title: Malicious Transaction Detected Rules
- type: array
items:
$ref: '#/components/schemas/ToctouPackageDeployedMonitor'
title: TOCTOU Package Deployed Rules
- type: array
items:
$ref: '#/components/schemas/ActiveMaliciousAirdropCampaignMonitor'
title: Active Malicious Airdrop Campaign Rules
- type: array
items:
$ref: '#/components/schemas/AddressPoisoningCampaignMonitor'
title: Address Poisoning Campaign Rules
WebhookAction:
type: object
properties:
type:
type: string
const: webhook
description: Action type.
severity:
type: array
items:
$ref: '#/components/schemas/Severity'
description: Incident severities this action runs for. When omitted, null, or an empty list, the action runs for incidents of any severity. Must not contain duplicate values.
url:
type: string
title: Consumer URL
description: The URL of the endpoint where the platform sends the event payloads.
authentication:
title: Authentication Method
description: The authentication method used for the webhook request.
$ref: '#/components/schemas/Authentication'
custom_headers:
type: array
items:
type: object
properties:
name:
type: string
title: Header Name
description: The name of the custom header.
value:
type: string
title: Value
description: The value of the custom header.
required:
- name
- value
title: Custom Headers
description: Custom headers to be sent in the HTTP POST request along with the event payload.
custom_payload_fields:
type: array
items:
type: object
properties:
key:
type: string
title: Field Key
description: The key name for the custom field in the webhook payload.
value:
type: string
title: Field Value
description: The value for the custom field.
required:
- key
- value
title: Custom Payload Fields
description: Custom fields to be included in the webhook payload along with the event data.
title: Webhook Action
required:
- type
- url
ImpersonatorTokenDeployedMonitor:
type: object
properties:
type:
type: string
const: impersonator_token_deployed
description: Type discriminator for this object.
target:
type: array
items:
anyOf:
- $ref: '#/components/schemas/AssetIDTarget'
- $ref: '#/components/schemas/AssetTagTarget'
- $ref: '#/components/schemas/AssetLabelTarget'
- $ref: '#/components/schemas/AssetIDExcludeTarget'
description: Target asset or entity selection for this rule or action.
severity:
$ref: '#/components/schemas/Severity'
description: Severity level for incidents that match this rule.
is_silent:
type: boolean
default: false
description: Whether incidents from this rule should be silent.
required:
- type
- target
- severity
description: Impersonator Token Deployed
DelegateCallToNonApprovedContractMonitor:
type: object
properties:
type:
type: string
const: delegate_call_to_non_approved_contract
description: Type discriminator for this object.
target:
type: array
items:
anyOf:
- $ref: '#/components/schemas/AssetIDTarget'
- $ref: '#/components/schemas/AssetTagTarget'
- $ref: '#/components/schemas/AssetLabelTarget'
- $ref: '#/components/schemas/AssetIDExcludeTarget'
description: Target asset or entity selection for this rule or action.
parameters:
type: object
properties:
function_name:
type: object
properties:
operator:
type: string
enum:
- is
- is_not
description: Comparison operator for function name.
value:
type: string
description: Comparison value for function name.
required:
- operator
- value
description: Function Name to match.
function_parameter:
type: array
items:
anyOf:
- type: object
# --- truncated at 32 KB (110 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/blockaid/refs/heads/main/openapi/blockaid-monitors-api-openapi.yml