Skip to main content
The Trusset API provides programmatic access to tokenization infrastructure, custody operations, trading, lending, and the MiCA Register. All endpoints follow REST conventions and return JSON responses.

Base URL

Response Format

Every response follows a consistent envelope:
Error responses include a machine-readable code and human-readable message:

Available APIs

Customers

Customer lifecycle management, on-chain identity verification, transfer compliance checks, and KYC verification links. Customer records require the customers service; identity verification, verification profiles, and ID links require identity.

MiCA Register

Query the EU MiCA registry. Search licensed CASPs, ART issuers, EMT issuers, and non-compliant entities sourced from ESMA. Free access with a MiCA API key.

Stock Tokenization

Deploy, issue, redeem, and manage ERC-3643 stock tokens. Includes holder queries, balance lookups, role management, compliance checks, and webhook integrations.

Trading

Hybrid on-chain order book trading for tokenized stocks. Manage order books, submit limit and market orders with post-only and self-trade prevention, run periodic auctions, enforce price references, request quotes (RFQ), and query trades, settlements, and custody balances.

Stock Lending

Overcollateralized lending markets for tokenized securities. Manage lending pools, monitor positions and health factors, execute liquidations, configure oracle price feeds, and set up automated hooks.

External Securities Lending

Lending markets collateralized by imported ERC-3643 security tokens. Deploy freeze or custody markets, publish NAV pricing, manage liquidity and loans, and run the operator-driven liquidation settlement workflow.

HTTP Status Codes

The API uses standard HTTP status codes:

Write Operations

Endpoints that touch a contract (identity verification, token issuance, redemptions, freezes, force transfers, oracle syncs, market deployments, loans, liquidations) do not execute anything. They return an unsigned payload built against the target contract. You sign it with your registered wallet and broadcast it yourself. Trusset holds no private key and has no signer. Nothing moves on-chain without a signature you produced. A write response carries one of four shapes, depending on what the operation needs: Multi-step responses are ordered and must be broadcast in sequence. Where a contract pulls tokens from you, the ERC-20 approval is the first step.
Read-only endpoints (balance queries, holder lookups, transfer compliance checks, status lookups, market metrics) return data directly and need no signature.

Confirming a Transaction

Some endpoints record state once the transaction is mined. To record it, call the same endpoint a second time with the transaction hash in the body:
Trusset then reads the receipt from the chain and checks that the transaction was mined, succeeded, targeted the expected contract, and called the expected function with the arguments you claimed. Only then does it write to the database and return the mined result, including values that exist only after execution such as loanId, liquidationId, auctionId, and positionId. State is derived from the receipt, never from the request body. A confirm call that fails verification changes nothing.
TX_NOT_FOUND is the expected response when you confirm too early. Wait for one confirmation and retry, rather than treating it as a failure.

Authorisation Errors

Writes are authorised against the wallets registered on the instance, and against the roles those wallets hold on your contracts.