Solana sessions and programs¶

18 endpoints. Every path below is served by trilocore-backend behind the gateway at https://api.trilocore.ai.

POST `/api/v1/bsvm/scans`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Query parameters

Parameter	Type	Required	Constraints	Description
`mode`	string	no	one of `passive`	—
`refresh`	boolean	no	—	—

This operation takes no request body.

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/scans \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/scans/{uid}/findings`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/scans/{uid}/findings \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

POST `/api/v1/bsvm/sessions`¶

The resource id is a per-caller slot id, derived from the caller and their session tag — not a per-instance id. It is reused: deleting and recreating returns the same id, and so does acting on a different target. current is accepted in its place. Another caller's id answers 404.

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`201`
Upstream	`trilocore-backend`

Request body

Field	Type	Required	Constraints
`apply_fundings`	boolean	no	—
`auditor_address`	string	no	`maxLength` 66
`auto_link_contracts`	boolean	no	—
`block`	string \| integer	no	—
`bytecode_lmdb`	string \| null	no	`maxLength` 4096
`fresh`	boolean	no	—
`fundings`	array	no	`maxItems` 64
`lean`	boolean	no	—
`mdbx_cache_dir`	string \| null	no	`maxLength` 4096
`network`	string	no	`maxLength` 32
`offline`	boolean	no	—
`project_id`	string \| null	no	`maxLength` 128
`related_targets`	array	no	`maxItems` 8
`rpc_cache_dir`	string \| null	no	`maxLength` 4096
`rpc_url`	string	yes	`maxLength` 2048
`skip_analysis`	boolean	no	—
`target_address`	string	yes	`maxLength` 66
`workspace_id`	string \| null	no	`maxLength` 128

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions \
  -H "Authorization: Bearer $TRILOCORE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"rpc_url": "…", "target_address": "…"}'

DELETE `/api/v1/bsvm/sessions/{uid}`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X DELETE https://api.trilocore.ai/api/v1/bsvm/sessions/{uid} \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/sessions/{uid}`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Query parameters

Parameter	Type	Required	Constraints	Description
`lean`	boolean	no	—	—

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/sessions/{uid} \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

▶ Run this example in the sandbox

POST `/api/v1/bsvm/sessions/{uid}/airdrops`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	required
Success	`200`
Upstream	`trilocore-backend`

Request body

Field	Type	Required	Constraints
`lamports`	integer	yes	`maximum` 1.8446744073709552e+19, `minimum` 1.0
`pubkey`	string	yes	`maxLength` 64, `minLength` 1

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/airdrops \
  -H "Authorization: Bearer $TRILOCORE_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"pubkey": "…", "lamports": 1}'

GET `/api/v1/bsvm/sessions/{uid}/latest-blockhash`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/latest-blockhash \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

POST `/api/v1/bsvm/sessions/{uid}/snapshots`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

This operation takes no request body.

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/snapshots \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

POST `/api/v1/bsvm/sessions/{uid}/snapshots:restore`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	required
Success	`200`
Upstream	`trilocore-backend`

Request body

Field	Type	Required	Constraints
`expected_state_revision`	integer \| null	no	`minimum` 0
`resume_isolation`	boolean	no	—
`snapshot_id`	string	yes	`maxLength` 128

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/snapshots:restore \
  -H "Authorization: Bearer $TRILOCORE_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"snapshot_id": "…"}'

POST `/api/v1/bsvm/sessions/{uid}/transactions`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	required
Success	`200`
Upstream	`trilocore-backend`

Request body

Field	Type	Required	Constraints
`encoding`	string	no	—
`skip_preflight`	boolean	no	—
`wire`	string	yes	`maxLength` 100000, `minLength` 1

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/transactions \
  -H "Authorization: Bearer $TRILOCORE_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"wire": "…"}'

POST `/api/v1/bsvm/sessions/{uid}/transactions:simulate`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Request body

Field	Type	Required	Constraints
`encoding`	string	no	—
`replace_recent_blockhash`	boolean	no	—
`sig_verify`	boolean	no	—
`wire`	string	yes	`maxLength` 100000, `minLength` 1

curl

curl -X POST https://api.trilocore.ai/api/v1/bsvm/sessions/{uid}/transactions:simulate \
  -H "Authorization: Bearer $TRILOCORE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"wire": "…"}'

GET `/api/v1/bsvm/targets/{uid}/access-map`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Query parameters

Parameter	Type	Required	Constraints	Description
`named`	boolean	no	—	—
`region`	string	no	—	—

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/access-map \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/blocks`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Query parameters

Parameter	Type	Required	Constraints	Description
`flag`	array	no	—	—
`function`	integer	no	—	—
`limit`	integer	no	`maximum` 500, `minimum` 1	Blocks per window. Clamped to 1..500 (never an error).
`offset`	integer	no	`minimum` 0	Clamped to >= 0.

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/blocks \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/blocks/{pc}`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/blocks/{pc} \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/cfg`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/cfg \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/functions`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/functions \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/heap`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/heap \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

GET `/api/v1/bsvm/targets/{uid}/trace`¶

Property	Value
Authentication	`Authorization: Bearer` (`jns_` key or SSO session)
Idempotency-Key	not required
Success	`200`
Upstream	`trilocore-backend`

Query parameters

Parameter	Type	Required	Constraints	Description
`account`	array	no	—	—
`data`	string	no	—	—
`max_steps`	integer	no	—	—
`steps_frame`	integer	no	—	—
`steps_from`	integer	no	—	—
`steps_to`	integer	no	—	—

curl

curl -X GET https://api.trilocore.ai/api/v1/bsvm/targets/{uid}/trace \
  -H "Authorization: Bearer $TRILOCORE_API_KEY"

Solana sessions and programs¶

POST /api/v1/bsvm/scans¶

GET /api/v1/bsvm/scans/{uid}/findings¶

POST /api/v1/bsvm/sessions¶

DELETE /api/v1/bsvm/sessions/{uid}¶

GET /api/v1/bsvm/sessions/{uid}¶

POST /api/v1/bsvm/sessions/{uid}/airdrops¶

GET /api/v1/bsvm/sessions/{uid}/latest-blockhash¶

POST /api/v1/bsvm/sessions/{uid}/snapshots¶

POST /api/v1/bsvm/sessions/{uid}/snapshots:restore¶

POST /api/v1/bsvm/sessions/{uid}/transactions¶

POST /api/v1/bsvm/sessions/{uid}/transactions:simulate¶

GET /api/v1/bsvm/targets/{uid}/access-map¶

GET /api/v1/bsvm/targets/{uid}/blocks¶

GET /api/v1/bsvm/targets/{uid}/blocks/{pc}¶

GET /api/v1/bsvm/targets/{uid}/cfg¶

GET /api/v1/bsvm/targets/{uid}/functions¶

GET /api/v1/bsvm/targets/{uid}/heap¶

GET /api/v1/bsvm/targets/{uid}/trace¶

POST `/api/v1/bsvm/scans`¶

GET `/api/v1/bsvm/scans/{uid}/findings`¶

POST `/api/v1/bsvm/sessions`¶

DELETE `/api/v1/bsvm/sessions/{uid}`¶

GET `/api/v1/bsvm/sessions/{uid}`¶

POST `/api/v1/bsvm/sessions/{uid}/airdrops`¶

GET `/api/v1/bsvm/sessions/{uid}/latest-blockhash`¶

POST `/api/v1/bsvm/sessions/{uid}/snapshots`¶

POST `/api/v1/bsvm/sessions/{uid}/snapshots:restore`¶

POST `/api/v1/bsvm/sessions/{uid}/transactions`¶

POST `/api/v1/bsvm/sessions/{uid}/transactions:simulate`¶

GET `/api/v1/bsvm/targets/{uid}/access-map`¶

GET `/api/v1/bsvm/targets/{uid}/blocks`¶

GET `/api/v1/bsvm/targets/{uid}/blocks/{pc}`¶

GET `/api/v1/bsvm/targets/{uid}/cfg`¶

GET `/api/v1/bsvm/targets/{uid}/functions`¶

GET `/api/v1/bsvm/targets/{uid}/heap`¶

GET `/api/v1/bsvm/targets/{uid}/trace`¶