Creating Reports

import { readFile } from "node:fs/promises";

const API_KEY = process.env.CHAINPATROL_API_KEY!;
const BASE_URL = "https://app.chainpatrol.io/api/v2";

async function uploadAttachments(paths: string[]): Promise<string[]> {
  const form = new FormData();

  for (const path of paths) {
    const bytes = await readFile(path);
    const fileName = path.split("/").pop()!;
    form.append("file", new File([bytes], fileName));
  }

  const response = await fetch(`${BASE_URL}/attachment/upload`, {
    method: "POST",
    headers: { "X-API-KEY": API_KEY },
    body: form,
  });

  if (!response.ok) {
    throw new Error(`Upload failed (${response.status}): ${await response.text()}`);
  }

  const { attachments } = await response.json();
  return attachments.map((attachment: { url: string }) => attachment.url);
}

async function createReport(attachmentUrls: string[]) {
  const response = await fetch(`${BASE_URL}/report/create`, {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-API-KEY": API_KEY,
    },
    body: JSON.stringify({
      organizationSlug: "acme",
      title: "Acme airdrop phishing email",
      description: "Customer forwarded a phishing email impersonating Acme support.",
      contactInfo: "security@acme.example",
      attachmentUrls,
      assets: [{ content: "https://acme-airdrop.example/claim", status: "BLOCKED" }],
    }),
  });

  if (!response.ok) {
    // 422 responses carry per-asset details in data.errors
    throw new Error(`Report failed (${response.status}): ${await response.text()}`);
  }

  return response.json();
}

const urls = await uploadAttachments([
  "./phishing-email.eml",
  "./screenshot.png",
]);
const report = await createReport(urls);
console.log(`Created report ${report.id}`);

import os
import requests

API_KEY = os.environ["CHAINPATROL_API_KEY"]
BASE_URL = "https://app.chainpatrol.io/api/v2"
HEADERS = {"X-API-KEY": API_KEY}


def upload_attachments(paths):
    files = [("file", (path.split("/")[-1], open(path, "rb"))) for path in paths]

    response = requests.post(
        f"{BASE_URL}/attachment/upload", headers=HEADERS, files=files
    )
    response.raise_for_status()

    return [attachment["url"] for attachment in response.json()["attachments"]]


def create_report(attachment_urls):
    response = requests.post(
        f"{BASE_URL}/report/create",
        headers=HEADERS,
        json={
            "organizationSlug": "acme",
            "title": "Acme airdrop phishing email",
            "description": "Customer forwarded a phishing email impersonating Acme support.",
            "contactInfo": "security@acme.example",
            "attachmentUrls": attachment_urls,
            "assets": [
                {"content": "https://acme-airdrop.example/claim", "status": "BLOCKED"}
            ],
        },
    )
    response.raise_for_status()

    return response.json()


urls = upload_attachments(["./phishing-email.eml", "./screenshot.png"])
report = create_report(urls)
print(f"Created report {report['id']}")

# 1. upload both files in one multipart request
curl -X POST 'https://app.chainpatrol.io/api/v2/attachment/upload' \
  -H "X-API-KEY: $CHAINPATROL_API_KEY" \
  -F 'file=@phishing-email.eml' \
  -F 'file=@screenshot.png'

# 2. attach the returned URLs to a report
curl -X POST 'https://app.chainpatrol.io/api/v2/report/create' \
  -H "X-API-KEY: $CHAINPATROL_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "organizationSlug": "acme",
    "title": "Acme airdrop phishing email",
    "description": "Customer forwarded a phishing email impersonating Acme support.",
    "attachmentUrls": [
      "https://upcdn.io/ACCOUNT/raw/uploads/.../phishing-email.eml",
      "https://upcdn.io/ACCOUNT/raw/uploads/.../screenshot.png"
    ],
    "assets": [
      { "content": "https://acme-airdrop.example/claim", "status": "BLOCKED" }
    ]
  }'