Latrivex Trust API — Trust Infrastructure for the Enterprise

Trust infrastructure,
exposed as one API.

Latrivex verifies identities, documents, devices, smart contracts, blockchain assets, AI interactions, URLs and compliance posture through a single versioned REST surface — with multi-tenant isolation, deterministic scoring and a complete audit trail on every call.

Trust modules

Unified API

Shared tenant state

100%

Calls audited

One request shape. One response shape. Fifteen engines.

Every module authenticates the same way, validates against a strict schema, and returns the same envelope: a decision, a risk score, a confidence value and the weighted signals that produced them.

RequestPOST /api/v1/url

curl https://api.latrivex.com/api/v1/url \
  -H "Authorization: Bearer ltx_live_a91f2c…" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://paypal-secure-verify.xyz/login" }'

Response200 · reject

{
  "object": "verification",
  "module": "url",
  "decision": "reject",
  "risk_score": 82,
  "trust_score": 18,
  "confidence": 0.9333,
  "signals": [
    { "code": "url.brand_impersonation", "severity": "critical", "weight": 32 },
    { "code": "url.high_abuse_tld",      "severity": "medium",   "weight": 20 },
    { "code": "url.credential_path_pattern", "severity": "medium", "weight": 16 }
  ],
  "latency_ms": 11
}

Fifteen engines behind one gateway.

01POST

Identity Verification

Name, DOB, identifier checksum and cross-signal coherence scoring.

/api/v1/identity

02POST

Document Intelligence

ICAO 9303 MRZ check digits, expiry and issuer validation.

/api/v1/document

03POST

OCR

Extraction legibility and per-character confidence adjudication.

/api/v1/ocr

04POST

Face Match

Embedding similarity thresholds with capture-quality weighting.

/api/v1/face-match

05POST

Liveness Detection

Depth, texture, blink and replay-attack signal fusion.

/api/v1/liveness

06POST

Device Trust

Fingerprint entropy, automation flags and UA/viewport coherence.

/api/v1/device

07POST

Smart Contract Security

Static analysis: delegatecall, tx.origin, reentrancy, honeypots.

/api/v1/contracts

08POST

Blockchain Intelligence

Supply concentration, liquidity depth and owner privilege audit.

/api/v1/blockchain

09POST

Wallet Risk

Mixer exposure, sanctioned counterparties and account maturity.

/api/v1/wallet

10POST

AI Trust

Prompt injection, jailbreak, exfiltration and zero-width payloads.

/api/v1/ai

11POST

URL Reputation

Homograph, DGA entropy, brand impersonation and cloaking depth.

/api/v1/url

12POST

Email Reputation

Disposable, role, freemail and machine-generated mailbox detection.

/api/v1/email

13POST

Compliance Engine

FATF, OFAC, EU and UN screening with PEP and adverse media.

/api/v1/compliance

14POST

Threat Intelligence

Indicator attribution across IP, domain, hash and URL types.

/api/v1/threat

15POST

Trust Score Engine

Confidence-weighted composite across every submitted module.

/api/v1/trust

Built the way trust vendors get audited.

Zero trust by default

Hashed API keys, scope enforcement, per-key rate limits and row-level tenant isolation in the database itself.

Every call is evidence

Each verification persists its decision, risk score, weighted signals and latency to an append-only audit trail.

Deterministic scoring

Signals are additive with saturation and clamped to 0–100, so no single indicator can dominate an outcome.

Versioned forever

Resources live under /api/v1 with an explicit api_version on every response. Breaking changes ship as new versions.

Trust infrastructure,exposed as one API.