Sandbox API

The Sandbox API returns predefined risk score results for integration testing.

Base URL:

https://sandbox-api.misttrack.io

Authentication and Limits

All endpoints require api_key.

Limit	Value
Per second	10 requests / API key
Per day	10000 requests / API key

Supported coin values:

Coin	Level Coverage	Sample Count
ETH	Severe, High, Moderate, Low	5
TRX	Severe, High, Moderate, Low	5

The coin value must match the sandbox target. ETH targets use 0x... addresses or transaction hashes. TRX targets use T... addresses or 64-character transaction hashes without the 0x prefix.

1. Get Risk Score

Returns the risk score result for a sandbox address or transaction hash.

GET https://sandbox-api.misttrack.io/v3/risk_score

Query Parameters

Parameter	Type	Required	Description
coin	string	yes	Supported values: ETH, TRX.
address	string	conditional	Sandbox address to query. Required when txid is empty.
txid	string	conditional	Sandbox transaction hash to query. Required when address is empty.
api_key	string	yes	Sandbox API key.

Request Example: Address

curl --location 'https://sandbox-api.misttrack.io/v3/risk_score?coin=ETH&address=0xadaf27611952c35de3ac46412225bc8cec66e2b6&api_key=YourApiKey'

Request Example: Transaction Hash

curl --location 'https://sandbox-api.misttrack.io/v3/risk_score?coin=ETH&txid=0x49a063b6f1c624f1c914241af8ecd1237fc09104987ea9c904eebfee74787a0b&api_key=YourApiKey'

curl --location 'https://sandbox-api.misttrack.io/v3/risk_score?coin=TRX&txid=3aa550c861c47bd955634126072e460965267ef424e4088a68d9c5368e03d789&api_key=YourApiKey'

Response Example

{
  "success": true,
  "msg": "",
  "data": {
    "score": 100,
    "hacking_event": "",
    "detail_list": [
      "Malicious Address",
      "Involved Theft Activity"
    ],
    "risk_level": "Severe",
    "risk_detail": [
      {
        "entity": "Theft",
        "volume": 0,
        "percent": 100,
        "risk_type": "illicit_activity",
        "hop_num": 1,
        "exposure_type": "direct"
      }
    ],
    "address_label": "hyperunit.xyz",
    "risk_report_url": "https://light.misttrack.io/riskReport/0xadaf27611952c35de3ac46412225bc8cec66e2b6?token=8baa8563-1811-4b26-913b-337b696116ac"
  }
}

2. Create Risk Score Task

Creates a sandbox async task. In sandbox mode, known cases return has_result: true immediately.

POST https://sandbox-api.misttrack.io/v3/risk_score_create_task

Request Header

Header	Value
Content-Type	application/json

Request Body

Parameter	Type	Required	Description
coin	string	yes	Supported values: ETH, TRX.
address	string	conditional	Sandbox address to query. Required when txid is empty.
txid	string	conditional	Sandbox transaction hash to query. Required when address is empty.
direction	string	no	Optional for transaction hash tasks. Default: deposit.
api_key	string	yes	Sandbox API key.

Request Example

curl --location 'https://sandbox-api.misttrack.io/v3/risk_score_create_task' \
  --header 'Content-Type: application/json' \
  --data '{
    "coin": "TRX",
    "address": "TEvwn7VF4KWfWfUSKipy6mFgjxPREPwFk2",
    "api_key": "YourApiKey"
  }'

Response Example

{
  "success": true,
  "msg": "",
  "data": {
    "scanned_ts": 1782360000,
    "has_result": true,
    "task_id": "fb4446aadfe0c2daf2181306c2f4434e78842b22a3a2dbfb3c2095331ade2cfc"
  }
}

3. Query Risk Score Task

Retrieves the result of a sandbox task by task_id.

GET https://sandbox-api.misttrack.io/v3/risk_score_query_task

Query Parameters

Parameter	Type	Required	Description
task_id	string	yes	Task id returned by /v3/risk_score_create_task.
api_key	string	yes	Sandbox API key.

Request Example

curl --location 'https://sandbox-api.misttrack.io/v3/risk_score_query_task?task_id=fb4446aadfe0c2daf2181306c2f4434e78842b22a3a2dbfb3c2095331ade2cfc&api_key=YourApiKey'

Response

The response format is the same as /v3/risk_score.

Response Fields

Parameter	Type	Description
success	bool	Whether the request succeeded.
msg	string	Empty on success. Contains an error code on failure.
data.score	int	Risk score.
data.hacking_event	string	Related security event or incident name.
data.detail_list	list	Risk descriptions.
data.risk_level	string	Risk level: Low, Moderate, High, or Severe.
data.risk_detail	list	Risk calculation details.
data.address_label	string	Address label. Empty string means no label.
data.risk_report_url	string	MistTrack risk report URL.

risk_detail Fields

Parameter	Type	Description
entity	string	Risk entity name.
risk_type	string	Risk type, for example illicit_activity or risk_exchange.
volume	float	Transaction amount related to the risk entity.
percent	float	Percentage of total transaction amount.
hop_num	int	Hop count to the risk entity.
exposure_type	string	direct or indirect.
hop_dic	object	Path details by hop. This field is only present for some indirect cases.

Error Responses

HTTP Status	Response	Meaning
400	{"success": false, "msg": "InvalidApiKey"}	Missing or invalid API key.
400	{"success": false, "msg": "InvalidParameter"}	Unsupported coin, unknown sandbox target, mismatched coin and target, or invalid parameter.
400	{"success": false, "msg": "InvalidAddress"}	Both address and txid are empty.
429	{"success": false, "msg": "ExceededRateLimit", "retry_after": 1}	Per-second rate limit exceeded.
429	{"success": false, "msg": "ExceededDailyRateLimit", "retry_after": 123}	Daily rate limit exceeded.
200	{"success": false, "msg": "TaskNotFound"}	Invalid task id or unsupported task target.

Available Sandbox Targets

Use the coin value shown in the table when requesting each target.

Coin	Type	Target	Risk Level	Score	Detail List
ETH	address	0xadaf27611952c35de3ac46412225bc8cec66e2b6	Severe	100	Malicious Address, Involved Theft Activity
ETH	address	0xa7cbb8fbc7a1339d1e8001f1c40491f4512547ec	High	85	Suspected Malicious Address, Involved Theft Activity
ETH	address	0xfc1c828f44a907f8b5807b1ca4576629abc152f1	Moderate	34	Involved Illicit Activity, Interact With Medium-risk Tag Addresses
ETH	address	0x2ae2182f745b10ab9c11ddaace4028930cc63e93	Low	3	-
ETH	txid	0x49a063b6f1c624f1c914241af8ecd1237fc09104987ea9c904eebfee74787a0b	Severe	96	Involved Illicit Activity
TRX	address	TGJ6QtCbQXo8Q5EAaJm3944B6MTpEvbwTB	Severe	100	Malicious Address, Involved Theft Activity
TRX	address	TEvwn7VF4KWfWfUSKipy6mFgjxPREPwFk2	High	89	Involved Illicit Activity
TRX	address	TQp6K2nHpqdk5d6q8VjAYLvp1ufUKVpsts	Moderate	69	Involved Illicit Activity
TRX	address	TBTwgFxL4KwAzQmMAS2L13YHy58DW6zq7e	Low	3	Involved Illicit Activity
TRX	txid	3aa550c861c47bd955634126072e460965267ef424e4088a68d9c5368e03d789	Moderate	49	Involved Illicit Activity, Interact With High-risk Tag Address, Interact With Medium-risk Tag Addresses