Skip to main content
Get full details of a specific aggregated detection group by ID.

Endpoint

GET /api/v1/detections/aggregated/:id

Path Parameters

ParameterTypeDescription
idstringAggregated detection ID

Example Request

curl http://localhost:8000/api/v1/detections/aggregated/agg_xyz789

Response

{
  "id": "agg_xyz789",
  "rule_name": "suspicious_contract_creation",
  "chain": "ethereum",
  "block_number": 18450123,
  "severity": "WARNING",
  "count": 15,
  "timestamp": "2025-11-11T21:30:00Z",
  "tags": ["suspicious", "contract"],
  "detections": [
    {
      "id": "finding_1",
      "rule_name": "suspicious_contract_creation",
      "severity": "WARNING",
      "tx_hash": "0xabc123...",
      "timestamp": "2025-11-11T20:00:00Z",
      "description": "Suspicious contract creation detected",
      "metadata": {}
    },
    ...
  ],
  "summary": {
    "total_value": "5000000000000000000",
    "unique_addresses": 3
  }
}

Response Fields

FieldTypeDescription
idstringUnique aggregated detection ID
rule_namestringName of the rule that triggered
chainstringBlockchain network
block_numbernumberBlock number
severitystringSeverity level (NOTICE, WARNING, CRITICAL)
countnumberNumber of individual findings in this group
timestampstringTimestamp of the aggregated detection (ISO 8601)
tagsarrayRule tags
detectionsarrayArray of all individual findings in this group
summaryobjectAggregated statistics (custom fields)