Sionix API Documentation

Real-time risk scoring, threat detection, and network intelligence across 7 EVM chains. Integrate in minutes. Powered by the Prism engine.

Overview

Sionix provides a REST API for detecting automated fraud, threat networks, and high-risk wallet activity on EVM-compatible chains. Every request returns a risk score, threat classification, and recommended action in milliseconds.

Sionix offers three plans: Trial (limited evaluation access), Business, and Enterprise. All production endpoints require a Business or Enterprise API key. Enterprise adds deeper intelligence fields, threat feed access, ecosystem management, and higher rate limits.

All responses follow a consistent format:

{
  "success": true,
  "data": { ... },
  "meta": {
    "requestId": "req_abc123",
    "version": "1.0.0"
  }
}

Quickstart

Get a risk score in under 60 seconds.

1. Get your API key

Sionix is sales-led. To get an API key and sandbox access, email sales@sionix.tech with your company name and use case. We'll provision a key and walk you through onboarding.

Once you have a key, pass it in the x-api-key header on every request. You can also use Authorization: Bearer YOUR_API_KEY.

2. Scan a wallet

curl -X POST https://api.sionix.tech/v1/wallet/scan \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{"address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18", "chain": "ETH"}'

const response = await fetch("https://api.sionix.tech/v1/wallet/scan", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "x-api-key": "YOUR_API_KEY",
  },
  body: JSON.stringify({
    address: "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
    chain: "ETH",
  }),
});

const result = await response.json();
console.log(result.data);

import requests

response = requests.post(
    "https://api.sionix.tech/v1/wallet/scan",
    headers={
        "Content-Type": "application/json",
        "x-api-key": "YOUR_API_KEY",
    },
    json={
        "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
        "chain": "ETH",
    },
)

result = response.json()
print(result["data"])

3. Response (Business tier)

{
  "success": true,
  "data": {
    "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
    "chain": "ETH",
    "riskScore": 14,
    "riskTier": "low",
    "isMalicious": false,
    "threatType": "SAFE",
    "threatCategory": "NONE",
    "recommendedAction": "allow",
    "summary": "No threat indicators detected",
    "threatIntel": {
      "sanctioned": false,
      "reportedScam": false,
      "knownEntity": false,
      "feedSources": 0
    }
  }
}

Authentication

Every request requires an API key. Pass it using either header format:

x-api-key: YOUR_API_KEY

Authorization: Bearer YOUR_API_KEY

API keys are tied to your account and plan tier. Keep them secret — keys are hashed on our side and cannot be recovered if lost.

To request an API key, email sales@sionix.tech.

Scan Wallet

Request body

Example request

curl -X POST https://api.sionix.tech/v1/wallet/scan \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{"address": "0x...", "chain": "ETH"}'

Example response (Business tier)

{
  "success": true,
  "data": {
    "address": "0x...",
    "chain": "ETH",
    "riskScore": 85,
    "riskTier": "critical",
    "isMalicious": true,
    "threatType": "CONFIRMED_THREAT",
    "threatCategory": "WALLET_DRAINER",
    "recommendedAction": "block",
    "summary": "Confirmed threat — wallet exhibits drainer behavior",
    "threatIntel": {
      "sanctioned": false,
      "reportedScam": true,
      "knownEntity": false,
      "feedSources": 2
    }
  }
}

threatType is one of: CONFIRMED_THREAT, HIGH_RISK, SUSPICIOUS, SAFE.

Response Tiers — Business vs Enterprise

Enterprise keys receive all Business fields plus deeper intelligence. Below is a side-by-side comparison for the same flagged wallet.

{
  "address": "0x...",
  "chain": "ETH",
  "riskScore": 85,
  "riskTier": "critical",
  "isMalicious": true,
  "threatType": "CONFIRMED_THREAT",
  "threatCategory": "WALLET_DRAINER",
  "recommendedAction": "block",
  "summary": "...",
  "threatIntel": {
    "sanctioned": false,
    "reportedScam": true,
    "knownEntity": false,
    "feedSources": 2
  }
}

{
  // ... all Business fields, plus:
  "threatSeverity": "CRITICAL",
  "assessmentConfidence": 0.95,
  "lifecycleStage": "ACTIVE",
  "behavioralContext": ["..."],
  "classifications": ["..."],
  "riskWindow": "24h",
  "riskStability": "VOLATILE",
  "threatNetwork": true,
  "networkSeverity": "CRITICAL",
  "networkThreatType": "DRAINER",
  "networkSize": 14,
  "associatedVictimCount": 230,
  "estimatedLossEth": 412.5,
  "networkConfidence": 0.92,
  "threatPersistence": "PERSISTENT",
  "threatRecurrence": "PATTERN_DETECTED",
  "walletClassification": {
    "role": "WALLET_DRAINER",
    "confidence": 0.95,
    "recommendedAction": "block"
  },
  "riskIndicators": [
    { "category": "...",
      "severity": "...",
      "description": "..." }
  ],
  "riskContext": {
    "category": "...",
    "confidence": 0.95,
    "networkAssociation": true,
    "activeThreats": true,
    "firstSeen": "...",
    "lastActivity": "...",
    "chainsAffected": 2
  },
  "recommendedMonitoringWindow": "24h",
  "threatIntel": {
    "sanctioned": false,
    "reportedScam": true,
    "knownEntity": false,
    "entityType": null,
    "entityLabel": null,
    "feedMatches": [
      { "source": "...",
        "category": "...",
        "severity": "...",
        "label": "..." }
    ],
    "feedSources": 2,
    "riskBoost": 15
  }
}

Batch Scan

Request body

Example request

curl -X POST https://api.sionix.tech/v1/wallet/batch \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{"addresses": ["0xabc...", "0xdef..."], "chain": "ETH"}'

Get Risk Score

Check Compromised

Example response

{
  "success": true,
  "data": {
    "address": "0x...",
    "chain": "ETH",
    "compromised": true
  }
}

Risk History

Pre-Transaction Screen

Example response

{
  "success": true,
  "data": {
    "address": "0x...",
    "decision": "warn",
    "riskScore": 54,
    "reason": "Elevated risk — associated with known threat activity"
  }
}

Monitors

Set up continuous monitoring on wallets. Sionix rescans them on a configurable interval and fires alerts via webhooks when risk changes.

Create monitor — request body

Webhooks

Supported events

Threat Groups

Threat Feed

Ecosystem Import

Import your entire wallet base for continuous risk monitoring.

Compliance Reports

Error Codes

All error responses include a structured body:

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid request body",
    "details": [...]
  }
}

Rate Limits

When you exceed a rate limit, the API returns 429 Too Many Requests. Back off and retry after the window resets (60-second rolling window).

Supported Chains

Support

Need help integrating? Have a question about your plan?