List Organization Assets

List organization assets

curl --request GET \
  --url https://app.chainpatrol.io/api/v2/organization/assets \
  --header 'X-API-KEY: <api-key>'

const options = {method: 'GET', headers: {'X-API-KEY': '<api-key>'}};

fetch('https://app.chainpatrol.io/api/v2/organization/assets', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.chainpatrol.io/api/v2/organization/assets",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.chainpatrol.io/api/v2/organization/assets"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-KEY", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.chainpatrol.io/api/v2/organization/assets")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-KEY"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "assets": [
    {
      "id": 123,
      "content": "<string>",
      "type": "URL",
      "status": "UNKNOWN",
      "name": "<string>",
      "description": "<string>",
      "group": {
        "id": 123,
        "name": "<string>"
      },
      "livenessStatus": "UNKNOWN",
      "blockedAt": "<string>",
      "createdAt": "<string>",
      "updatedAt": "<string>"
    }
  ],
  "next_page": "<string>"
}

{
  "code": "BAD_REQUEST",
  "message": "Invalid input data",
  "issues": []
}

{
  "code": "UNAUTHORIZED",
  "message": "Authorization not provided",
  "issues": []
}

{
  "code": "FORBIDDEN",
  "message": "Insufficient access",
  "issues": []
}

{
  "code": "NOT_FOUND",
  "message": "Not found",
  "issues": []
}

{
  "code": "INTERNAL_SERVER_ERROR",
  "message": "Internal server error",
  "issues": []
}

GET

organization

assets

List organization assets

curl --request GET \
  --url https://app.chainpatrol.io/api/v2/organization/assets \
  --header 'X-API-KEY: <api-key>'

const options = {method: 'GET', headers: {'X-API-KEY': '<api-key>'}};

fetch('https://app.chainpatrol.io/api/v2/organization/assets', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.chainpatrol.io/api/v2/organization/assets",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.chainpatrol.io/api/v2/organization/assets"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-KEY", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.chainpatrol.io/api/v2/organization/assets")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-KEY"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "assets": [
    {
      "id": 123,
      "content": "<string>",
      "type": "URL",
      "status": "UNKNOWN",
      "name": "<string>",
      "description": "<string>",
      "group": {
        "id": 123,
        "name": "<string>"
      },
      "livenessStatus": "UNKNOWN",
      "blockedAt": "<string>",
      "createdAt": "<string>",
      "updatedAt": "<string>"
    }
  ],
  "next_page": "<string>"
}

{
  "code": "BAD_REQUEST",
  "message": "Invalid input data",
  "issues": []
}

{
  "code": "UNAUTHORIZED",
  "message": "Authorization not provided",
  "issues": []
}

{
  "code": "FORBIDDEN",
  "message": "Insufficient access",
  "issues": []
}

{
  "code": "NOT_FOUND",
  "message": "Not found",
  "issues": []
}

{
  "code": "INTERNAL_SERVER_ERROR",
  "message": "Internal server error",
  "issues": []
}

Overview

List assets belonging to an organization’s allowlist with optional filtering by type, group, and search query. This endpoint supports pagination for efficient handling of large asset collections. The target organization is chosen from the optional slug query parameter. When slug is omitted, the organization is inferred from the API key.

Quick Start

Authentication

Include your API key in the X-API-KEY header:

X-API-KEY: your_api_key_here

Who can call this endpoint depends on whether you pass slug:

Caller	`slug` omitted	`slug` passed
Organization-scoped API key	Uses the organization tied to the key.	Allowed if it matches the key’s organization, or the key belongs to an internal org. Otherwise `403`.
User-scoped API key or staff session	Returns `401` — you must pass `slug` to name an organization.	Staff can target any organization. Members need an active membership on the target organization.

Unknown or soft-deleted slugs return 404.

Example Request

const response = await fetch(
  "https://app.chainpatrol.io/api/v2/organization/assets?type=URL&per_page=100",
  {
    method: "GET",
    headers: {
      "X-API-KEY": "YOUR_API_KEY_HERE",
    },
  }
);

const data = await response.json();
console.log(data.assets);

const response = await fetch(
  "https://app.chainpatrol.io/api/v2/organization/assets?type=URL&per_page=100",
  {
    method: "GET",
    headers: {
      "X-API-KEY": "YOUR_API_KEY_HERE",
    },
  }
);

const data = await response.json();
console.log(data.assets);

import requests

response = requests.get(
    "https://app.chainpatrol.io/api/v2/organization/assets",
    headers={
        "X-API-KEY": "YOUR_API_KEY_HERE",
    },
    params={
        "type": "URL",
        "per_page": 100,
    },
)

data = response.json()
print(data["assets"])

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?type=URL&per_page=100' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Query Parameters

Parameter	Type	Required	Description
slug	string	No	Organization slug. Optional for organization-scoped API keys, which resolve the organization from the key itself. Required when your credentials can reach more than one organization.
type	string	No	Filter by asset type: `URL`, `ADDRESS`, `PAGE`, `DISCORD`, `TELEGRAM`, `TWITTER`, `INSTAGRAM`, `MEDIUM`, `GITHUB`, `YOUTUBE`, `LINKEDIN`, `TWITCH`, `TIKTOK`, `EMAIL`
groupId	number	No	Filter by group ID. Use `-1` for ungrouped assets only. Omit to include all assets regardless of group assignment.
query	string	No	Search query to filter assets by content. Performs a case-insensitive search across asset content, name, and description fields.
per_page	number	No	Number of assets to return per page. Valid range: 1-1000. Default: 100. Use larger values for bulk operations and smaller values for responsive UI pagination.
next_page	string	No	Cursor token for fetching the next page of results. This value is returned in the response when more results are available. Pass it in subsequent requests to continue pagination.

Response

Success Response

{
  "assets": [
    {
      "id": 12345,
      "content": "https://example.com",
      "type": "URL",
      "status": "ALLOWED",
      "name": "Main Website",
      "description": "Our official website",
      "group": {
        "id": 1,
        "name": "URLs"
      },
      "createdAt": "2024-01-15T10:30:00.000Z",
      "updatedAt": "2024-01-15T10:30:00.000Z"
    },
    {
      "id": 12346,
      "content": "0x1234567890abcdef1234567890abcdef12345678",
      "type": "ADDRESS",
      "status": "ALLOWED",
      "name": "Treasury Wallet",
      "description": null,
      "group": null,
      "createdAt": "2024-01-15T11:00:00.000Z",
      "updatedAt": "2024-01-15T11:00:00.000Z"
    }
  ],
  "next_page": "12347"
}

Response Fields

Field	Type	Description
assets	array	Array of asset objects belonging to your organization
assets[].id	number	Unique identifier for the asset
assets[].content	string	The actual asset content (URL, address, handle, etc.)
assets[].type	string	Asset type classification
assets[].status	string	Asset status, typically `ALLOWED` for organization assets
assets[].name	string	Display name for the asset (optional)
assets[].description	string	Description of the asset (optional, can be null)
assets[].group	object	Group object containing `id` and `name` if asset is assigned to a group, null if ungrouped
assets[].createdAt	string	ISO 8601 timestamp when the asset was created
assets[].updatedAt	string	ISO 8601 timestamp when the asset was last updated
next_page	string	Cursor token for the next page of results. Undefined/null when no more results are available.

Pagination

To fetch all assets, use the next_page cursor returned in each response:

async function fetchAllAssets() {
  let allAssets = [];
  let nextPage: string | undefined = undefined;

  while (true) {
    const params = new URLSearchParams({
      per_page: "500",
      ...(nextPage && { next_page: nextPage }),
    });

    const response = await fetch(
      `https://app.chainpatrol.io/api/v2/organization/assets?${params}`,
      {
        method: "GET",
        headers: {
          "X-API-KEY": "YOUR_API_KEY_HERE",
        },
      }
    );

    const data = await response.json();
    allAssets = allAssets.concat(data.assets);
    nextPage = data.next_page;

    if (!nextPage) {
      break;
    }
  }

  return allAssets;
}

fetchAllAssets()
  .then((assets) => console.log(`Total assets: ${assets.length}`))
  .catch((error) => console.error("Error:", error));

async function fetchAllAssets() {
  let allAssets = [];
  let nextPage = undefined;

  while (true) {
    const params = new URLSearchParams({
      per_page: "500",
      ...(nextPage && { next_page: nextPage }),
    });

    const response = await fetch(
      `https://app.chainpatrol.io/api/v2/organization/assets?${params}`,
      {
        method: "GET",
        headers: {
          "X-API-KEY": "YOUR_API_KEY_HERE",
        },
      }
    );

    const data = await response.json();
    allAssets = allAssets.concat(data.assets);
    nextPage = data.next_page;

    if (!nextPage) {
      break;
    }
  }

  return allAssets;
}

fetchAllAssets()
  .then((assets) => console.log(`Total assets: ${assets.length}`))
  .catch((error) => console.error("Error:", error));

import requests

def fetch_all_assets():
    all_assets = []
    next_page = None

    while True:
        params = {"per_page": 500}
        if next_page:
            params["next_page"] = next_page

        response = requests.get(
            "https://app.chainpatrol.io/api/v2/organization/assets",
            headers={"X-API-KEY": "YOUR_API_KEY_HERE"},
            params=params,
        )

        data = response.json()
        all_assets.extend(data["assets"])
        next_page = data.get("next_page")

        if not next_page:
            break

    return all_assets

try:
    assets = fetch_all_assets()
    print(f"Total assets: {len(assets)}")
except Exception as error:
    print(f"Error: {str(error)}")

Filtering Examples

Target a specific organization

If your API key is not scoped to a single organization — for example, a user-scoped key or a staff session — pass slug to choose one:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?slug=acme' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Filter by Type

Get only URL assets:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?type=URL' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Filter by Group

Get assets in a specific group:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?groupId=1' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Get only ungrouped assets:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?groupId=-1' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Search Assets

Search for assets containing “wallet”:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?query=wallet' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Combine Filters

Get URL assets in group 1 containing “main”:

curl -X GET 'https://app.chainpatrol.io/api/v2/organization/assets?type=URL&groupId=1&query=main' \
  -H 'X-API-KEY: YOUR_API_KEY_HERE'

Error Responses

401 Unauthorized

Returned when the API key is missing or invalid, or when a user-scoped key or staff session omits slug:

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Pass `slug` to choose an organization, or authenticate with an API key scoped to one"
  }
}

403 Forbidden

Returned when the caller is authenticated but not authorized to read the requested organization’s assets. For example, an organization-scoped API key that passes a slug for a different organization, or a member session without an active membership on the target organization:

{
  "error": {
    "code": "FORBIDDEN",
    "message": "You are not authorized to access this organization"
  }
}

404 Not Found

Returned when the slug does not match an active organization:

{
  "error": {
    "code": "NOT_FOUND",
    "message": "Organization with slug 'acme' not found"
  }
}

400 Bad Request

Returned when query parameters are invalid:

{
  "error": {
    "code": "BAD_REQUEST",
    "message": "Invalid asset type provided"
  }
}

Best Practices

Pagination

Use per_page=500 or higher for bulk operations to minimize API calls
Use per_page=50-100 for UI pagination for responsive user experience
Always check for next_page in the response to determine if more results exist

Filtering

Apply filters server-side rather than fetching all assets and filtering client-side
Combine filters to narrow down results efficiently
Use the query parameter for user-driven search features

Performance

Cache asset lists when appropriate to reduce API calls
Use appropriate per_page values based on your use case
Consider implementing incremental loading for large datasets

Notes

When slug is omitted, the organization is determined from your API key
Pass slug when your credentials can reach more than one organization (user-scoped keys and staff sessions)
All timestamps are in ISO 8601 format with UTC timezone
Asset status for organization assets is typically ALLOWED
The group field is null when an asset is not assigned to any group
The next_page cursor is opaque and should not be parsed or modified

Authorizations

X-API-KEY

string

header

required

Your API key. This is required by most endpoints to access our API programatically. Reach out to us at support@chainpatrol.io to get an API key for your use.

Query Parameters

slug

string

type

enum<string>

Available options:

URL,

PAGE,

ADDRESS,

DISCORD,

LINKEDIN,

TWITTER,

FACEBOOK,

YOUTUBE,

REDDIT,

TELEGRAM,

GOOGLE_APP_STORE,

APPLE_APP_STORE,

AMAZON_APP_STORE,

MICROSOFT_APP_STORE,

TIKTOK,

INSTAGRAM,

THREADS,

MEDIUM,

CHROME_WEB_STORE,

MOZILLA_ADDONS,

OPERA_ADDONS,

EMAIL,

PATREON,

OPENSEA,

FARCASTER,

IPFS,

GOOGLE_FORM,

WHATSAPP,

DISCORD_USER,

QUORA,

GITHUB,

TEACHABLE,

SUBSTACK,

DEBANK,

TAWK_TO,

JOTFORM,

PRIMAL,

BLUESKY,

SNAPCHAT,

DESO,

PINTEREST,

FLICKR,

GALXE,

VELOG,

NPM,

PYPI,

HEX,

DOCKER_HUB,

VOCAL_MEDIA,

TECKFINE,

TENDERLY,

HACKMD,

ETSY,

ZAZZLE,

BASENAME,

BILIBILI_TV,

VIMEO,

DAILYMOTION,

PHONE_NUMBER,

SLACK,

CALENDLY,

NGROK,

RARIBLE,

RUST_PACKAGE,

FLATHUB,

VIDLII,

VEVIOZ,

ISSUU,

SOUNDCLOUD,

ZAPPER,

REDNOTE,

SAMSUNG_APP_STORE,

HUAWEI_APP_STORE,

XIAOMI_APP_STORE,

TENCENT_APP_STORE,

OPPO_APP_STORE,

VIVO_APP_STORE,

F_DROID,

GOOGLE_AD,

BING_AD,

TWITCH,

BEHANCE,

ZORA,

META_AD,

SIGNAL,

DEVIANTART,

BANDCAMP,

ARCHIVE_ORG,

FIVE_HUNDRED_PX,

LUMA,

SMARTMONEYMATCH,

APK_GOLD

groupId

integer

query

string

per_page

integer

default:100

The number of assets to return per page (max 1000)

Required range: 1 <= x <= 1000

next_page

string | null

Cursor for fetching the next page of results

Response

Successful response

Successful operation

assets

object[]

required

List of assets

Show child attributes

next_page

string | null

Cursor for fetching the next page of results

​Overview

​Quick Start

​Authentication

​Example Request

​Query Parameters

​Response

​Success Response

​Response Fields

​Pagination

​Filtering Examples

​Target a specific organization

​Filter by Type

​Filter by Group

​Search Assets

​Combine Filters

​Error Responses

​401 Unauthorized

​403 Forbidden

​404 Not Found

​400 Bad Request

​Best Practices

​Pagination

​Filtering

​Performance

​Notes

Authorizations

Query Parameters

Response

Overview

Quick Start

Authentication

Example Request

Query Parameters

Response

Success Response

Response Fields

Pagination

Filtering Examples

Target a specific organization

Filter by Type

Filter by Group

Search Assets

Combine Filters

Error Responses

401 Unauthorized

403 Forbidden

404 Not Found

400 Bad Request

Best Practices

Pagination

Filtering

Performance

Notes