Quickstart

Get your API key

Create an account and generate an API key from the dashboard. Your API key authenticates all requests to TrustUCP.

Make your first request

Test the API with a simple trust lookup. Replace YOUR_API_KEY with your actual key.

curl -X GET "https://api.trustucp.xyz/trust/v1/merchants?domain=example.com" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

Response

{
  "tenant_id": "ten_abc123",
  "trust_status": "verified",
  "tier": "enhanced",
  "confidence": 0.95,
  "last_verified": "2026-02-08T12:00:00Z",
  "proof": {
    "signature": "ed25519:...",
    "anchor": "hedera:0.0.12345/98765"
  }
}

Install the SDK (optional)

Use our SDK for easier integration with built-in caching and retries.

npm install @trustucp/sdk

// Usage
import { TrustUCP } from '@trustucp/sdk';

const client = new TrustUCP({ apiKey: process.env.TRUSTUCP_API_KEY });

const result = await client.lookupMerchant({ domain: 'example.com' });
console.log(result.trust_status); // "verified"

pip install trustucp

# Usage
from trustucp import TrustUCP

client = TrustUCP(api_key=os.environ['TRUSTUCP_API_KEY'])

result = client.lookup_merchant(domain='example.com')
print(result['trust_status'])  # "verified"

Verify cryptographic proofs

Every trust response includes a cryptographic proof you can verify independently using the Hedera blockchain.

// Verify the signature
const isValid = await client.verifyProof({
  signature: response.proof.signature,
  anchor: response.proof.anchor,
  payload: response
});

// Or verify directly on Hedera
// anchor: "hedera:0.0.12345/98765"
// → Check topic 0.0.12345, sequence 98765 on hashscan.io