Ethereum rug-pull & honeypot detection API

Authentication

Pass your key as a Bearer token (or the X-API-Key header). No key falls back to anonymous free access, just delayed. The full, always-current schema lives at api.rektradar.io/v1/docs (OpenAPI 3.1).

curl:

curl -H "Authorization: Bearer rr_live_xxx" \
  https://api.rektradar.io/v1/token/0xABC...

Python:

import requests

r = requests.get(
    "https://api.rektradar.io/v1/token/0xABC...",
    headers={"Authorization": "Bearer rr_live_xxx"},
)
verdict = r.json()
if verdict["score"] >= 70:
    print("high risk", verdict["flags"])

REST endpoints

Base URL: https://api.rektradar.io

Example response (/v1/token/:address):

{
  "address": "0xabc...",
  "score": 82,
  "flags": ["hidden_mint", "ownership_not_renounced", "lp_not_locked"]
}

Live stream & webhooks

Subscribe to the real-time flow over a WebSocket (wss://api.rektradar.io/v1/stream?api_key=...), or register an HTTPS endpoint and we POST events to it. Webhook deliveries are HMAC-SHA256 signed. The full machine-readable schema lives at api.rektradar.io/v1/stream-docs (AsyncAPI 3.0).

Register a webhook

Manage your endpoints with a key. The number of endpoints is capped per plan (Free 1, Basic 5, Premium 20, Pro 100); free deliveries are ~10 min delayed, paid are live.

# register an endpoint - the signing secret is returned ONCE
curl -X POST -H "Authorization: Bearer rr_live_xxx" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://you.example/hook","events":["rug.detected"]}' \
  https://api.rektradar.io/v1/webhooks
# -> { "secret": "whsec_...", "endpoint": { "id": 1, ... } }

# list / delete your endpoints (the secret is never echoed back)
curl    -H "Authorization: Bearer rr_live_xxx" https://api.rektradar.io/v1/webhooks
curl -X DELETE -H "Authorization: Bearer rr_live_xxx" https://api.rektradar.io/v1/webhooks/1

Verify a delivery (Node):

import { verifyWebhook } from "@mik3fly-lab/rektradar-sdk";

// RektRadar signs every delivery: X-RektRadar-Signature: sha256=<hmac>
const ok = verifyWebhook(rawBody, req.header("X-RektRadar-Signature") ?? "", SECRET);
if (!ok) return res.sendStatus(401);

Official SDK

TypeScript, zero runtime dependencies, isomorphic (Node + browser).

npm install @mik3fly-lab/rektradar-sdk

import { RektRadar, connectStream } from "@mik3fly-lab/rektradar-sdk";

const rr = new RektRadar({ apiKey: process.env.REKTRADAR_KEY });

const verdict = await rr.token("0x...");
if (verdict.score >= 70) {
  console.warn("high risk", verdict.flags);
}

// live intel stream (paid = live, free = ~10 min delayed)
import WebSocket from "ws";
connectStream({
  apiKey: process.env.REKTRADAR_KEY,
  events: ["new_token", "imminent_rug", "rug"],
  WebSocket,
  onMessage: (e) => console.log(e.type, e.data),
});

See it run in the browser on the free tier: demo.rektradar.io (token lookups, biggest rugs, new scams per day, a 6h live pulse).

Source: github.com/mik3fly-lab/rektradar-sdk

Plans & limits

API access is included with every RektRadar plan. Quota beyond the included monthly amount is billed as metered overage.

Frequently asked questions