Skip to main content
List aggregated detections (grouped similar findings to reduce noise).

​
Endpoint

GET /api/v1/detections/aggregated

​
Query Parameters

ParameterTypeDescriptionDefault
limitnumberNumber of results50
offsetnumberPagination offset0
severitystringFilter by priority-
chainstringFilter by blockchain-
rulestringFilter by rule name-

​
Example Request

curl http://localhost:8000/api/v1/detections/aggregated

​
Response

{
  "count": 5,
  "aggregated_detections": [
    {
      "id": "agg_xyz789",
      "rule_name": "suspicious_contract_creation",
      "chain": "ethereum",
      "block_number": 18450123,
      "severity": "WARNING",
      "count": 15,
      "timestamp": "2025-11-11T21:30:00Z",
      "tags": ["suspicious", "contract"],
      "detections": [
        {
          "id": "finding_1",
          "rule_name": "suspicious_contract_creation",
          "severity": "WARNING",
          "tx_hash": "0x...",
          "timestamp": "2025-11-11T20:00:00Z"
        },
        ...
      ],
      "summary": {
        "total_value": "5000000000000000000",
        "unique_addresses": 3
      }
    },
    ...
  ]
}

​
Response Fields

FieldTypeDescription
countnumberNumber of aggregated detections returned
aggregated_detectionsarrayArray of aggregated detection objects
aggregated_detections[].idstringUnique aggregated detection ID
aggregated_detections[].rule_namestringName of the rule that triggered
aggregated_detections[].chainstringBlockchain network
aggregated_detections[].block_numbernumberBlock number
aggregated_detections[].severitystringSeverity level (NOTICE, WARNING, CRITICAL)
aggregated_detections[].countnumberNumber of individual findings in this group
aggregated_detections[].timestampstringTimestamp of the aggregated detection (ISO 8601)
aggregated_detections[].tagsarrayRule tags
aggregated_detections[].detectionsarrayArray of individual findings in this group
aggregated_detections[].summaryobjectAggregated statistics (custom fields)
Aggregation groups similar findings together to reduce alert fatigue. See Aggregation for details.