Skip to main content

Try it

The API is open. Fair-use rate limits apply per IP, and localhost origins always work in the browser:
Shipping to production? Fill in the whitelist form and we whitelist your origin: guaranteed access and a heads-up before breaking changes.

Endpoints

Base URL: https://api.ctoken.inco.org/api (Base). Base Sepolia lives at https://api.ctoken.testnet.inco.org/api. Amounts are decimal strings. Encrypted values only ever appear as bytes32 handles.

Pagination

List endpoints take page and limit (max 100) and return { items, total, page, pages, limit }. Totals are counters maintained at indexing time, so they stay fast at any history size.

Under load

Hot responses are cached briefly and served last-known-good during database hiccups. If the API is saturated it answers 503 with a Retry-After header instead of hanging. Honor it, the SDK already does.

Privacy

The indexer stores what the chain emits and nothing more. Confidential amounts never touch it in plaintext. Public amounts exist only where the chain makes them public: wrap and unwrap legs, and explicit disclosures.