Scanner Stream

Stream name: scanner

The Scanner stream delivers real-time token security scan results as they are generated. Each event contains the full scan report -- the same structure returned by the REST API -- including the simple safety score, advanced security indicators, token metadata, and on-chain extension data.

Use this stream to keep dashboards and monitoring systems up to date with the latest security analysis without polling the REST endpoint.

Subscribing

Single Token

{
  "op": "subscribe",
  "network": "sol",
  "address": "pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn",
  "stream": "scanner"
}

Multiple Tokens

{
  "op": "subscribe",
  "subs": [
    { "network": "sol", "address": "pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn", "stream": "scanner" },
    { "network": "sol", "address": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "stream": "scanner" }
  ]
}

Event Format

{
  "op": "event",
  "network": "sol",
  "address": "pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn",
  "stream": "scanner",
  "timestamp": "2026-03-01T12:00:00.000Z",
  "data": {
    "network": {
      "name": "Solana",
      "symbol": "SOL"
    },
    "token": {
      "address": "pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn",
      "name": "Pump.com",
      "symbol": "PUMP",
      "logo": "https://...",
      "decimals": 6,
      "total_supply": 1000000000.0,
      "additional_info": {},
      "age": 1712218394,
      "socials": [
        { "type": "twitter", "url": "https://twitter.com/..." }
      ]
    },
    "extensions": {},
    "results": {
      "generated_at": 1756397766,
      "simple": {
        "score": 87,
        "message": "OK",
        "reasons": []
      },
      "advanced": {}
    }
  }
}

Data Reference

The data payload is identical to the Scanner REST API response. Refer to those docs for the full field reference:

• Scanner API Overview -- top-level structure, token, simple score, and results format.
• Solana Security Indicators -- advanced fields for Solana tokens (authorities, Token-2022 extensions, honeypot, locked liquidity).
• EVM Security Indicators -- advanced fields for EVM tokens (contract verification, ownership, proxy, taxes, blacklist).

Update Frequency

Events are delivered in real time -- whenever a new scan is generated for a token you're subscribed to.

Related REST Endpoint

Fetch a scan on-demand via the REST API:

GET /scanner/v1/tokens/{network}/{token_address}

Use the REST endpoint for one-off queries and the WebSocket stream for continuous monitoring.

Network Support