TRM Labs Developer Platform

Integrate Global Threat Intelligence.

Secure your users at the wallet level. Programmatically check mnemonic phrases against our global threat database using privacy-preserving k-anonymity queries.

Request API Access
// 1. Client hashes mnemonic locally const seedHash = crypto.createHash('sha512') .update(mnemonic) .digest('hex'); // 2. Extract first 6 chars for k-anonymity query const hashPrefix = seedHash.substring(0, 6); // 3. Query the CheckPhrase API const response = await fetch('https://api.trmlabs.com/v1/checkphrase', { method: 'POST', headers: { 'Authorization': 'Bearer YOUR_API_KEY' }, body: JSON.stringify({ prefix: hashPrefix }) }); const { matches, threat_level } = await response.json(); // Result: { matches: 0, threat_level: "SECURE" }

Designed for High-Stakes Environments

Our RESTful API is built for hardware wallet manufacturers, top-tier exchanges, and security-first dApps requiring sub-second validation.

k-Anonymity Privacy

Never send a full hash. By sending only a 6-character hash prefix, the API returns all possible matching suffixes. Validation is completed locally by the client, maintaining absolute zero-knowledge.

< 50ms Global Latency

Deployed across multi-region edge networks. The API delivers sub-50 millisecond response times globally, ensuring your onboarding flow or wallet recovery process remains frictionless.

99.99% Uptime SLA

Backed by TRM Labs' enterprise infrastructure. Enjoy guaranteed uptime Service Level Agreements (SLAs), dedicated support channels, and compliance-ready audit trails.

Integration Use Cases

Software & Hardware Wallets

During the "Import Wallet" phase, silently check the user's provided mnemonic. If flagged as compromised in a public database, immediately warn the user against depositing funds.

Centralized Exchanges (CEX)

Before allowing a user to link a non-custodial wallet via WalletConnect, ensure the target wallet's root seed has not been compromised in known infostealer dumps, preventing liability disputes.

Smart Contract Auditing Firms

Automate checks against deployer addresses and multisig signers to ensure the operational keys securing the protocol have not been leaked in GitHub repositories.

DeFi Interfaces

Protect liquidity providers by cross-referencing their connected injected provider (e.g. MetaMask) against the threat database before allowing large token approvals.

Flexible Enterprise Tiers

Scale your security infrastructure as your user base grows.

Developer

For testing and small projects.

Free
  • 1,000 queries / month
  • Standard REST API
  • Community Support
  • Daily Database Sync
Most Popular

Professional

For active wallets and exchanges.

$499 / mo
  • 1,000,000 queries / month
  • Real-time Database Sync
  • Webhooks & Alerts
  • Priority Email Support

Enterprise

For institutional scale & compliance.

Custom
  • Unlimited queries
  • Dedicated Infrastructure
  • 99.99% Uptime SLA
  • Dedicated Account Manager