Address risk score

Get an AML risk assessment of an address: a risk score and level, plus risk labels and related transfer addresses when they are known. Built for deposit screening, withdrawal checks and compliance review queues.

POSThttps://triport.io/v1/intelligence/address-risk

Network: Ethereum
Scope: intelligence:read
Auth: x-token: $TRIPORT_API_KEY header (or Authorization: Bearer)
Rate limit: Business — 30 rps (intelligence, burst ×2); Enterprise — 150 rps

Request

cURLJavaScriptPython

curl -X POST "https://triport.io/v1/intelligence/address-risk" \
  -H "x-token: $TRIPORT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"chain":"eth","address":"0x28c6c06298d514db089934071355e5743bf21d60"}'

const res = await fetch("https://triport.io/v1/intelligence/address-risk", {
  method: "POST",
  headers: {
    "x-token": process.env.TRIPORT_API_KEY,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "chain": "eth",
    "address": "0x28c6c06298d514db089934071355e5743bf21d60"
  }),
});
const data = await res.json();
console.log(data);

import os


import requests


resp = requests.post(
    "https://triport.io/v1/intelligence/address-risk",
    headers={
        "x-token": os.environ["TRIPORT_API_KEY"],
        "Content-Type": "application/json",
    },
    json={
        "chain": "eth",
        "address": "0x28c6c06298d514db089934071355e5743bf21d60",
    },
)
data = resp.json()
print(data)

Response

JSON

Example

{
  "state": "ok",
  "meta": {
    "observedAt": "2026-11-06T09:30:36.910208161Z",
    "expiresAt": "2026-11-07T09:30:36.910208161Z",
    "cached": true,
    "complete": false
  },
  "data": {
    "subject": {
      "chain": "eth",
      "address": "0x28c6c06298d514db089934071355e5743bf21d60"
    },
    "assessment": {
      "address": "0x28c6c06298d514db089934071355e5743bf21d60",
      "risk": {
        "value": "1",
        "level": "none"
      }
    }
  }
}

An unknown score is returned as risk.value: null with level unknown, never as zero. Scores are strings; keep them as strings. A score is an input to your own decision, not a guarantee that an address is safe.

Released on Ethereum. Any other chain value answers 422 with state unsupported. More chains are coming; see the changelog.

Every answer is an envelope with state, meta, optional data and optional error. Read state first: ok, empty, partial, stale, unsupported or unavailable (see response states). meta.cached tells you whether the answer came from cache.

Parameters

addressstringrequired

Address to look up: 0x + 40 hex characters, any letter case.

chainstringrequired

Chain id, see Network above (eth, and for labels also solana and avalanche). Aliases: ethereum → eth, sol → solana, avax → avalanche.

freshbooleanoptional

Optional. true skips the cache and asks for a new lookup (GET routes: ?fresh=1).

Response

Response recorded on 2026-11-06 through https://triport.io (long lists shortened). Values change over time.

Errors

HTTP	`error.code`	When
400	`invalid_request`	Malformed address, unknown field, `null` value or invalid JSON.
401	`unauthorized`	Missing or invalid API key.
403	`scope_missing` / `tier_insufficient`	The key lacks `intelligence:read`, or the plan is below Business.
405	`method_not_allowed`	Wrong HTTP method; the `Allow` header names `POST`.
422	`unsupported`	The chain (or the contract) is not supported by this method.
429	`rate_limited`	Over the `intelligence` per-second limit; wait `Retry-After` seconds.
503	`unavailable`	The lookup could not be completed right now; retry later.
504	`timeout`	The lookup took too long; retry, or retry later with the same input.

See errors, limits and states for the full rules and the code examples.