Developer API

Flow tracing API for MAX members.

Use API keys to create cases, query status, fetch investigation summaries, and search candidate transfers from external CRM, support, or compliance systems.

Manage API Keys View MAX

Authentication And Limits

The API is available to MAX, B2B, and Admin accounts. Keys are shown once at creation, and FlowTrace stores only salted hashes.

Header

X-FlowTrace-API-Key: ft_live_...

Alternative

Authorization: Bearer ft_live_...

Rate limit

300/hour general, 60/hour case create, 120/hour candidate lookup

Endpoints

Method	Path	Purpose
GET	/api/v1/me	Read plan entitlement, API access, and key capacity.
GET	/api/v1/cases	List cases visible to the API key owner.
POST	/api/v1/cases	Create a tracing case with chain, token, address, tx hash, and depth.
GET	/api/v1/cases/{case_id}	Fetch case metadata.
GET	/api/v1/cases/{case_id}/status	Fetch current crawl status and progress.
GET	/api/v1/cases/{case_id}/investigation	Fetch attribution hints, warnings, and investigation summary.
GET	/api/v1/quota	Read remaining case quota for the authenticated account.
POST	/api/v1/candidate-transactions	Find likely candidate transfers for victim reports or pasted evidence.

Examples

List cases

curl https://api.flowtracelabs.com/api/v1/cases \
  -H "X-FlowTrace-API-Key: ft_live_..."

Create a case

curl https://api.flowtracelabs.com/api/v1/cases \
  -H "X-FlowTrace-API-Key: ft_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Victim report 2026-06",
    "chain": "tron",
    "token": "USDT",
    "start_address": "T...",
    "start_tx_hash": "64-char hash",
    "max_depth": 3
  }'

Candidate transactions

curl https://api.flowtracelabs.com/api/v1/candidate-transactions \
  -H "Authorization: Bearer ft_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "chain": "tron",
    "token": "USDT",
    "address": "T...",
    "amount": "1000",
    "limit": 25
  }'

Common errors

401 api_key_required - API key is missing.
401 invalid_api_key - Key is invalid or revoked.
403 api_access_requires_max - Account does not have MAX/API access.
429 rate_limited - Rate limit exceeded.

Open settings