Developer documentation

Build on the modular wallet control plane

Alloy is a provider-neutral, non-custodial infrastructure layer for digital asset operations. One API across Fireblocks, BitGo, Copper, and self-hosted wallets — with built-in policy, risk, compliance, and reconciliation.

Start quickstart API reference

POST /v1/wallets/:id/transaction-intents

{
  "asset": "USDC",
  "amount": "10000.00",
  "destination": {
    "address": "0x742d...bD18"
  },
  "policy": "standard-transfer"
}

status: "approved"
provider: "fireblocks"
policy_receipt: "pk_eval_2024_a7f3"
risk_score: 0.12

Quickstart

Connect a provider, list wallets, and submit your first transaction intent in 5 minutes.

Modules

Reference for all 8 modules: WalletKit, ShieldOS, RiskGuard, PolicyKit, ReconFlow, VaultCore, TreasuryAI, TokenForge.

API reference

Module API conventions, endpoint reference, authentication, error codes, rate limits, and SDK guidance.

AI agents

MCP server integration, delegated authority, tool discovery, and agent patterns for autonomous wallet operations.

Three pillars

Non-custodial

Alloy never touches customer funds or keys. Critical for regulatory clarity and trust boundary separation.

AI-native

Every API is designed for autonomous agent consumption: self-discoverable endpoints, structured errors, and scoped authority.

API

API-first

Consistent REST resources, typed SDKs, structured errors, and versioned module contracts. Integrate in hours, not months.

8 composable modules

Each module is an independent API. Start with WalletKit and add modules as your requirements grow.

Module	Role	Status
WalletKit	Custody-agnostic wallet operations	LIVE
ShieldOS	Compliance & KYT screening	PREVIEW
RiskGuard	Pre-sign risk simulation	PREVIEW
PolicyKit	Governance & approval workflows	PREVIEW
ReconFlow	Multi-chain reconciliation	PREVIEW
VaultCore	Key management & signing	PLANNED
TreasuryAI	AI-powered treasury	PLANNED
TokenForge	RWA & token operations	PLANNED

View full module reference →

Architecture

┌─────────────────────────────┐

│ Your Application │

└──────────────┬──────────────┘

│ REST / SDKs

┌──────────────▼──────────────┐

│ Alloy Control Plane │

│ WalletKit · ShieldOS · Risk │

│ PolicyKit · ReconFlow · … │

└──────────────┬──────────────┘

│ Provider API

┌──────────────▼──────────────┐

│ Fireblocks · BitGo · Copper │

│ Safe · Self-hosted · HSMs │

└─────────────────────────────┘

Authentication

All API requests require a bearer token in the Authorization header.

curl -X GET https://api.alloy.build/v1/wallets \
  -H "Authorization: Bearer $ALLOY_API_KEY" \
  -H "Content-Type: application/json"

API keys

For server-to-server integrations. Generate from the Alloy dashboard with full account scope.

Agent tokens

Scoped, time-bounded tokens for AI agents with explicit permissions and amount limits. Learn more →

SDKs and module APIs

TypeScript / Node.js

npm install @alloy-build/sdk

Python

pip install alloy-sdk

Module API reference

Browse WalletKit-first endpoints, shared conventions, errors, rate limits, and webhook behavior.

Get started

Request sandbox access to try WalletKit, explore the API reference, or talk to the team about your use case.

Request sandbox access Contact us