Asset Connections
Answers ‘what led to this asset, and where does it lead?’. Takes one asset (by assetId or content) and returns the assets linked into it (upstream: the page that ran the ad, the ad that linked to it, the account that claimed it) and out of it (downstream: what it redirects to, links to or claims), followed depth hops on each side, as two graphs of assets and typed links. Nodes carry the same id, type, content and status that /asset/search returns. Available to organizations the threat graph connections rollout has been turned on for; others receive FORBIDDEN.
Overview
Asset Connections answers two questions about one asset: what led to it, and where it leads. ChainPatrol records a link whenever one asset names another in a scan: an ad’s landing page, a post’s URL, a redirect, a page’s outbound links, a profile’s claimed website, a wallet a page asks victims to pay. This endpoint follows those links out from the asset you name, a few hops on each side, and returns two graphs:- upstream - what leads to the asset: the ads and posts that link to it, the pages and accounts that published them, the profiles that claim it.
- downstream - where the asset leads: what it redirects to, links to, loads, submits forms to, claims as its own or asks to be paid at.
fromAssetId → type → toAssetId: PUBLISHED, LINKS_TO,
REDIRECTS_TO, CLAIMS, REPLIES_TO, REPOSTS, MENTIONS, DEPENDS_ON,
MEMBER_OF, LOADS, SUBMITS_TO or USES_WALLET. Assets carry the same id,
type, content and status that Asset Search
returns.
403 with the message “Asset
connections are not available for this organization”. Contact ChainPatrol to ask
for access.Quick Start
Authentication
Include your organization API key in theX-API-KEY header:
Example Request
Name the asset by its content (a URL, domain, address, social profile, …) or by its ChainPatrolassetId — exactly one of the two. depth and limit are optional.
Request Body
Response
A phishing site promoted by a Meta ad, redirecting to a wallet drainer that links to the brand’s real site:Top level
Each asset in a graph
Each link in a graph
Walking further
A response is bounded:depth hops, limit links of each type per asset, and at
most 25 assets expanded per hop. Two fields say where there is more. An asset with
expanded: false and no stop sat past the bounds; an asset with hasMoreLinks: true
had more links of the types in truncatedLinkTypes than limit allowed. In both cases,
call the endpoint again with that asset’s id as assetId to continue from it.
Errors
Related
Authorizations
Your API key. This is required by most endpoints to access our API programatically. Reach out to us at support@chainpatrol.io to get an API key for your use.
Body
Asset connections request body
What led to an asset and where it leads: the links into it (who published,
linked to, redirected to or claimed it) and out of it, followed depth hops
on each side. Links are observed relationships read from scans, so an asset
scanned before links were recorded has none.
Response
Successful response
Asset connections response body