> ## Documentation Index > Fetch the complete documentation index at: https://chainpatrol-mintlify-04a0fc55.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # API Overview > Index of every ChainPatrol External API endpoint for wallets, security apps, and marketplaces to check, submit, and monitor scam URLs and addresses. We work with leading wallets and security to block scam links, contract addresses, and wallet addresses before a user interacts with the scam. ChainPatrol's APIs are offered as a free service to wallets, security apps, and marketplaces. Every endpoint below is served from `https://app.chainpatrol.io/api/v2` and authenticated with an API key — see [Authentication](/external-api/authentication) for how to send it. ## Start here File a report against a scam. Check if an asset is allowed or blocked. Fetch our entire allowlist/blocklist for use in your own application. Fetch the latest changes to our allowlist/blocklist. Create a dispute for an asset that has been incorrectly flagged. Receive real-time notifications instead of polling. ## Assets Look up, submit, scan, and unblock individual assets. Check whether an asset is allowed or blocked. Search across assets. Submit an asset for review. Fetch the full allowlist/blocklist. Fetch recent allowlist/blocklist changes. Parse raw content into ChainPatrol asset types. Kick off a scan, optionally with a callback URL. Retrieve enrichments, checks, and labels for a scan. Unblock one of your assets, or open a dispute. Deprecated — use Asset Check or Asset Search. ## Blocklist sync Sync the blocklist as hashed prefixes, so clients never download the full list of blocked content. This is the mechanism the ChainPatrol browser extension uses. Discover the current snapshot, recent-additions feed, and algorithm version. Resolve full hashes for local prefix hits. ## Organization assets Manage the assets and asset groups your organization owns. List your organization's assets. Add an asset to your organization. Update an organization asset. Remove an organization asset. List your organization's asset groups. Create an asset group. Update an asset group. Delete an asset group. ## Organization brands List every brand on your organization, with terms, tickers, legal documents, and trademark registrations. ## Reports File a report against a scam. Check for an existing report before creating a new one. Retrieve your organization's reports (`GET /organization/reports`). Deprecated — use List Organization Reports. ## Threats and detection Read detected threats and manage the detection configs that produce them. List threats for your organization. List detection results. List detection sources and their configs. Change a config's status, schedule, or fields. Run one or many configs on demand. Check configs against their recent results. Surface zero-result, noisy, and stale configs. ## Disputes and takedowns Dispute an asset that has been incorrectly flagged. List takedowns for your organization. ## Metrics Customer-facing metrics and blocked threat breakdowns for a date range. Blocked threat counts grouped by day, asset type, or brand. The default `found` metric — customer-facing new threats. Retrieve your organization's metrics (`GET /organization/metrics`). Deprecated — use List Organization Metrics. ## Operations Pending review and takedown queue state, with SLA and age buckets. ## Healthchecks Healthchecks grade a single operational signal and all return the same result shape, so you can call them in a loop and handle the responses with shared code. Start from the registry: The registry of available healthchecks — only call the ones where `implemented` is true. The individual checks: * [Silent Detection Configs](/external-api/healthchecks-detections-silent-configs) — enabled configs producing too few recent results * [Reviewing Backlog](/external-api/healthchecks-reviewing-backlog) — pile-up of unreviewed proposals * [Old Proposals in Review](/external-api/healthchecks-reviewing-old-proposals) — proposals waiting past the age thresholds * [TODO Takedown Volume](/external-api/healthchecks-takedowns-todo-volume) — pile-up of takedowns in `TODO` * [IN\_PROGRESS Takedown Volume](/external-api/healthchecks-takedowns-in-progress-volume) — pile-up of takedowns in `IN_PROGRESS` * [Stale IN\_PROGRESS Takedowns](/external-api/healthchecks-takedowns-stale-in-progress) — takedowns stuck past the staleness threshold * [Cancelled Takedown Count](/external-api/healthchecks-takedowns-cancelled-count) — excess cancellations over a rolling window * [Automated Takedowns Disabled](/external-api/healthchecks-takedowns-automation-off) — automation off for too long * [Dead Asset Spike](/external-api/healthchecks-assets-dead-asset-spike) — spike in assets detected as dead * [Missing Contact URL](/external-api/healthchecks-organization-missing-contact-url) — no main communication channel configured ## Account and access Check whether an API key is valid. Details of the authenticated user. Update the authenticated user's profile and settings. Organizations the caller can access, with services and integrations. Fetch a single organization by slug. ## Webhooks Receive real-time notifications for asset status updates and threat detections. Two `POST` endpoints are deprecated and kept only for backwards compatibility: [`/public/getOrganizationReports`](/external-api/organization-reports) — use [`GET /organization/reports`](/external-api/organization-reports-list) — and [`/public/getOrganizationMetrics`](/external-api/organization-metrics) — use [`GET /organization/metrics`](/external-api/organization-metrics-list). [`POST /asset/details`](/external-api/asset-details) is deprecated in the spec itself.