RugCheck Public API

Tiers meter fresh scans per month— a scan of a mint whose report isn't already cached. Cached reads are free and unlimited on every tier. Paid tiers are prepaid 30-day terms paid in SOLat the live rate — upgrade from the key's crown icon on /profile/api-keys.

Renewing the same tier extends the current term. Switching tiers pro-rates your unused time into the new tier by price (e.g. 20 remaining Pro days carry over as ~5 Scale days) — paid value is never lost. When a paid term lapses, the key drops back to Free automatically.

Cancellation:cancel anytime from the key's Upgrade dialog. No refund is issued — payments are prepaid and non-refundable; your tier and quota stay active until the end of the paid term, then the key returns to Free. Re-upgrading at any time reactivates the subscription.

Complete safety report for any Solana mint: scores, verdict, hard-cap flags, market and holder context, creator reputation, and the full evidence-backed findings list.

curl https://thunderlaunch.fun/api/v1/rugcheck/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 \
  -H "X-API-Key: sk_your_key"   # optional — omit for anonymous access

{
  "success": true,
  "data": {
    "apiVersion": "v1",
    "mint": "DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263",
    "scannedAt": "2026-07-27T04:11:02.101Z",
    "cached": true,
    "token": { "name": "Bonk", "symbol": "BONK", "imageUrl": "https://…", "isNative": false },
    "safetyScore": 87,
    "riskScore": 13,
    "riskLevel": "low",
    "verdict": "Safe",
    "summary": "No critical on-chain risks detected. …",
    "rugged": false,
    "ruggedAt": null,
    "flags": [],
    "market": { "priceUsd": 0.0149, "marketCap": 1312187272150, "liquidityUsd": 36263874, "volume24h": 894217, "pairAgeDays": 907.5 },
    "holders": { "totalHolders": 970000, "effectiveHolders": 641000, "topHolderPct": 4.9, "devHoldingsPct": 0, "insiderClusterPct": 1.2 },
    "creator": { "deployer": "…", "priorLaunches": 1, "ruggedLaunches": 0, "isSerialRugger": false },
    "findings": [
      { "category": "Authorities", "check": "Mint Authority", "status": "pass", "severity": "info",
        "evidence": "Mint authority is revoked.", "explanation": "No one can create new tokens and dilute holders." }
    ],
    "dataAvailability": { "market": true, "holders": true, "launchIntegrity": false, "creator": true, "manipulation": true, "sellSimulation": true }
  }
}

• safetyScore is 0–100, higher = safer (100 - riskScore); verdict bands: Safe / Caution / High Risk / Danger.
• flags are hard-cap conditions with deterministic proof (honeypot, failed sell sim, unlocked LP, serial rugger, confirmed rug). Any flag forces riskScore ≥ 85.
• rugged is terminal — a drained token stays Danger forever.
• Null sections mirror dataAvailability: falsemeans "unverifiable", never "passed".
• ?forceRefresh=true bypasses the cache and builds fresh — Pro/Scale keys only (paid_tier_required otherwise); the forced build counts against your monthly quota.

Lightweight score for high-volume programmatic use (snipe filters, trading bots). Same engine and cache as the full report, ~50× smaller response. Note it returns the risk score (higher = riskier).

curl https://thunderlaunch.fun/api/v1/risk/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263

{
  "success": true,
  "data": {
    "mint": "DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263",
    "riskScore": 13,
    "riskLevel": "low",
    "verdict": "Safe",
    "flags": [],
    "rugged": false
  }
}

Recommended fail-closed pattern for bots: treat any non-2xx response, rugged: true, or non-empty flagsas "do not trade".

Resolve many mints in one call — API key required. Batch caps by tier: 10 (Free) / 50 (Pro) / 100 (Scale) mints per call. Default items carry the lightweight risk shape; pass full: true for complete reports.

curl -X POST https://thunderlaunch.fun/api/v1/rugcheck/batch \
  -H "X-API-Key: sk_your_key" -H "Content-Type: application/json" \
  -d '{"mints": ["DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263", "JUPyiwrYJFskUPiHa7hkeR8VUtAeFoSYbKedZNsDvCN"]}'

• Per-item results — the batch responds 200 with ok/error per mint; an invalid mint or exhausted quota fails that item, never the whole batch.
• One rate-limit hit per call— a batch counts as a single request against your key's per-minute limit; fresh builds inside it count against the monthly quota individually (cached mints are free).

Two lookback endpoints, included with any API key (pure DB reads — they never consume fresh-scan quota):

# Scan summary + 30-day monitor time series (holders, liquidity, price, net flow)
curl -H "X-API-Key: sk_your_key" \
  https://thunderlaunch.fun/api/v1/rugcheck/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263/history

# → { summary: { scanCount, firstScannedAt, peakLiquidityUsd,
#                liquidityDrawdownPct, rugged, ... },
#     snapshots: [ { capturedAt, holderCount, liquidityUsd, priceUsd,
#                    netFlowSol, ... } ] }   # 10-min cadence, max 500 points
# 404 not_found = never scanned — scan it first via the report endpoint

liquidityDrawdownPctis the % of peak liquidity that has left the pool — a rising drawdown on a token you hold is the classic slow-rug signature. Funding-source data appears once the wallet's tokens have been scanned.

Get an HTTP POST the moment a token's pool is drained and marked terminally rugged — Scale-tier keys only (up to 5 subscriptions per key). Omit mints to alert on every rugged token, or list specific mints to watch.

curl -X POST https://thunderlaunch.fun/api/v1/webhooks \
  -H "X-API-Key: sk_your_scale_key" -H "Content-Type: application/json" \
  -d '{"url": "https://your-server.com/hooks/rugged"}'
# → 201 { data: { id, secret: "whsec_...", ... } }  — save the secret

# List / delete:
curl -H "X-API-Key: sk_your_scale_key" https://thunderlaunch.fun/api/v1/webhooks
curl -X DELETE -H "X-API-Key: sk_your_scale_key" https://thunderlaunch.fun/api/v1/webhooks/<id>

Delivery cadence is ~5 minutes from the rugged transition. Rugged is terminal, so each subscription receives exactly one alert per mint. Always verify the signature — anyone can POST to your URL.