Module reference

8 composable modules

Each module is an independent API. Customers compose the stack they need — start with WalletKit and add compliance, risk, policy, reconciliation, key management, treasury, and tokenization as requirements grow.

Code Module Category Status
L8 WalletKit Wallet Aggregation LIVE
L1 ShieldOS Compliance Engine PREVIEW
L2 RiskGuard Risk Engine PREVIEW
L3 PolicyKit Governance Engine PREVIEW
L4 ReconFlow Reconciliation PREVIEW
L5 VaultCore Key Management PLANNED
L6 TreasuryAI AI Treasury PLANNED
L7 TokenForge Token Operations PLANNED
L8

WalletKit

LIVE

Wallet Aggregation

Provider-neutral wallet operations control plane. One API across Fireblocks, BitGo, Copper, and self-hosted wallets. Canonical transaction state, policy hooks, and custody portability without touching keys.

Capabilities

  • Unified wallet lifecycle (create, list, archive) across providers
  • Canonical transaction intents with deterministic state machine
  • Provider connection management and health monitoring
  • Webhook normalization across custody backends
  • Policy and risk hook integration points
  • Reconciliation primitives for multi-provider bookkeeping

API endpoints

POST /v1/providers/connect
GET /v1/providers
POST /v1/wallets
GET /v1/wallets
GET /v1/wallets/:id
POST /v1/wallets/:id/transaction-intents
GET /v1/wallets/:id/transaction-intents
POST /v1/wallets/:id/transaction-intents/:txId/approve
GET /v1/events
POST /v1/webhooks

Example

const alloy = new AlloyClient({
  apiKey: process.env.ALLOY_API_KEY,
  baseUrl: 'https://api.alloy.build'
});

// Connect Fireblocks as a provider
const provider = await alloy.providers.connect({
  type: 'fireblocks',
  credentials: {
    apiKey: process.env.FB_API_KEY,
    privateKey: process.env.FB_PRIVATE_KEY
  }
});

// List wallets across all connected providers
const wallets = await alloy.wallets.list();

// Submit a transaction intent
const intent = await alloy.wallets.createTransactionIntent(
  walletId,
  {
    asset: 'USDC',
    amount: '10000.00',
    destination: {
      address: '0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18'
    },
    policy: 'standard-transfer'
  }
);
L1

ShieldOS

PREVIEW

Compliance Engine

Compliance screening and KYT engine. Transaction screening against sanctions lists, PEP databases, and custom blocklists. AML rule evaluation before transactions reach signing.

Capabilities

  • Pre-transaction KYT (Know Your Transaction) screening
  • Sanctions and PEP list checks
  • Custom blocklist and allowlist management
  • Compliance evidence and audit trail generation
  • Risk-score enrichment for PolicyKit decisions
  • Configurable screening rules per jurisdiction

API endpoints

POST /v1/compliance/screen
GET /v1/compliance/lists
POST /v1/compliance/lists
GET /v1/compliance/reports/:id
ShieldOS is in preview. Request early access to test the API sandbox. Request access →
L2

RiskGuard

PREVIEW

Risk Engine

Pre-sign risk simulation and scoring. Evaluates transaction risk before signing, considering destination reputation, amount thresholds, velocity patterns, and historical behavior.

Capabilities

  • Pre-sign transaction simulation
  • Multi-factor risk scoring (destination, amount, velocity, time)
  • Anomaly detection on transaction patterns
  • Risk threshold configuration per policy tier
  • Integration with ShieldOS compliance signals
  • Risk evidence for audit and escalation

API endpoints

POST /v1/risk/evaluate
GET /v1/risk/scores/:txId
POST /v1/risk/rules
GET /v1/risk/rules
RiskGuard is in preview. Request early access to test the API sandbox. Request access →
L3

PolicyKit

PREVIEW

Governance Engine

No-code approval rules and governance workflows. Define multi-level approval chains, spending limits, time-based restrictions, and escalation paths — all without touching code.

Capabilities

  • No-code policy rule builder
  • Multi-level approval workflows (1-of-N, M-of-N)
  • Spending limits per wallet, user, or time window
  • Time-of-day and geo-based restrictions
  • Escalation to human approvers
  • Policy evaluation receipts for audit

API endpoints

POST /v1/policies
GET /v1/policies
POST /v1/policies/:id/evaluate
GET /v1/policies/:id/decisions
PolicyKit is in preview. Request early access to test the API sandbox. Request access →
L4

ReconFlow

PREVIEW

Reconciliation

Multi-chain bookkeeping and audit trails. Automated reconciliation across providers, chains, and internal ledgers. Exception detection and resolution workflows for finance teams.

Capabilities

  • Cross-provider transaction reconciliation
  • Multi-chain balance tracking and verification
  • Automated exception detection and alerting
  • Fee reconciliation across custody backends
  • Audit trail generation for compliance
  • ERP and accounting system integration

API endpoints

POST /v1/recon/jobs
GET /v1/recon/jobs/:id
GET /v1/recon/exceptions
POST /v1/recon/exceptions/:id/resolve
ReconFlow is in preview. Request early access to test the API sandbox. Request access →
L5

VaultCore

PLANNED

Key Management

Multi-wallet signing orchestration across BitGo, Fireblocks, Copper, HSMs, and customer-controlled signing backends. Unified key lifecycle, signing policies, and cryptographic evidence.

Capabilities

  • Multi-provider signing orchestration
  • Key lifecycle management (create, rotate, archive)
  • Signing policy enforcement
  • Cryptographic evidence and audit proof
  • HSM, multisig, and customer-controlled signing backend integration
  • Key ceremony workflow support

API endpoints

POST /v1/vaults
POST /v1/vaults/:id/sign
GET /v1/vaults/:id/keys
VaultCore is on the roadmap. Contact us to discuss your requirements. Request access →
L6

TreasuryAI

PLANNED

AI Treasury

AI-powered yield optimization and cash management. Autonomous treasury operations with policy-bound AI agents that optimize stablecoin yields across DeFi and CeFi venues.

Capabilities

  • AI yield optimization across venues
  • Cash flow forecasting and management
  • Automated rebalancing with policy bounds
  • Risk-adjusted return analysis
  • Treasury reporting and dashboards
  • Human escalation for out-of-policy moves

API endpoints

POST /v1/treasury/strategies
GET /v1/treasury/positions
POST /v1/treasury/rebalance
TreasuryAI is on the roadmap. Contact us to discuss your requirements. Request access →
L7

TokenForge

PLANNED

Token Operations

RWA lifecycle management, token issuance, and redemption. End-to-end tokenization workflows for real-world assets with compliance, custody, and settlement integration.

Capabilities

  • Token issuance and minting workflows
  • RWA lifecycle management
  • Redemption and burn workflows
  • Transfer restriction enforcement
  • Compliance integration for regulated tokens
  • Settlement and delivery-vs-payment

API endpoints

POST /v1/tokens
POST /v1/tokens/:id/mint
POST /v1/tokens/:id/redeem
TokenForge is on the roadmap. Contact us to discuss your requirements. Request access →

Architecture: composable by design

Every module exposes a consistent REST API surface with its own namespace. Modules communicate through well-defined contracts — you can adopt WalletKit alone, or compose the full stack with ShieldOS compliance screening feeding into RiskGuard scoring, enforced by PolicyKit rules, and reconciled by ReconFlow.

┌─────────────────────────────┐
│        Your Application       │
└──────────────┬──────────────┘
               │
┌──────────────▼──────────────┐
│    Alloy Control Plane      │
│  WalletKit · PolicyKit · …  │
└──────────────┬──────────────┘
               │
┌──────────────▼──────────────┐
│ Fireblocks · BitGo · Copper · …│
└─────────────────────────────┘