Module reference

8 composable modules

Each module is an independent API. Customers compose the stack they need — start with WalletKit and add compliance, risk, policy, reconciliation, key management, treasury, and tokenization as requirements grow.

CodeModuleCategory
L8WalletKitDESIGN PARTNERWallet Aggregation
L1ShieldOSPREVIEWCompliance Engine
L2RiskGuardPREVIEWRisk Engine
L3PolicyKitPREVIEWGovernance Engine
L4ReconFlowPREVIEWReconciliation
L5VaultCoreROADMAPKey Management
L6TreasuryAIROADMAPAI Treasury
L7TokenForgeROADMAPToken Operations
L8

WalletKit

DESIGN PARTNER

Wallet Aggregation

Provider-neutral operations control plane. WalletKit normalizes transaction intent, provider status, webhook events, and reconciliation evidence across approved custody targets, bank-owned HSM/KMS paths, and customer-controlled stacks without touching keys.

Capabilities

  • Normalized wallet lifecycle views across approved provider targets
  • Canonical transaction intents with deterministic state machine
  • Provider connection management and health monitoring
  • Webhook normalization for custody and customer-controlled backends
  • Policy and risk hook integration points
  • Reconciliation primitives for multi-provider bookkeeping

API endpoints

POST/v1/providers/connect
GET/v1/providers
POST/v1/wallets
GET/v1/wallets
GET/v1/wallets/:id
POST/v1/wallets/:id/transaction-intents
GET/v1/wallets/:id/transaction-intents
POST/v1/wallets/:id/transaction-intents/:txId/approve
GET/v1/events
POST/v1/webhooks

Example

const alloy = new AlloyClient({
  apiKey: process.env.ALLOY_API_KEY,
  baseUrl: 'https://api.alloy.build'
});

// Connect an approved provider profile
const provider = await alloy.providers.connect({
  type: 'approved_provider',
  credentials: {
    clientId: process.env.PROVIDER_CLIENT_ID,
    clientSecret: process.env.PROVIDER_CLIENT_SECRET
  }
});

// List wallets across all connected providers
const wallets = await alloy.wallets.list();

// Submit a transaction intent
const intent = await alloy.wallets.createTransactionIntent(
  walletId,
  {
    asset: 'USDC',
    amount: '10000.00',
    destination: {
      address: '0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18'
    },
    policy: 'standard-transfer'
  }
);
L1

ShieldOS

PREVIEW

Compliance Engine

Compliance screening and KYT workflow surface. ShieldOS is designed to evaluate transaction context against configured screening sources and produce reviewable evidence before transactions reach signing.

Capabilities

  • Pre-transaction KYT (Know Your Transaction) screening
  • Sanctions and PEP list checks
  • Custom blocklist and allowlist management
  • Compliance evidence and audit trail generation
  • Risk-score enrichment for PolicyKit decisions
  • Configurable screening rules per jurisdiction

API endpoints

POST/v1/compliance/screen
GET/v1/compliance/lists
POST/v1/compliance/lists
GET/v1/compliance/reports/:id
ShieldOS is in preview. Request design-partner access to review the planned API surface.Request access →
L2

RiskGuard

PREVIEW

Risk Engine

Pre-sign risk review and scoring surface. RiskGuard evaluates transaction context before signing, considering destination reputation, amount thresholds, velocity patterns, and historical behavior.

Capabilities

  • Pre-sign transaction simulation
  • Multi-factor risk scoring (destination, amount, velocity, time)
  • Anomaly detection on transaction patterns
  • Risk threshold configuration per policy tier
  • Integration with ShieldOS compliance signals
  • Risk evidence for audit and escalation

API endpoints

POST/v1/risk/evaluate
GET/v1/risk/scores/:txId
POST/v1/risk/rules
GET/v1/risk/rules
RiskGuard is in preview. Request design-partner access to review the planned API surface.Request access →
L3

PolicyKit

PREVIEW

Governance Engine

Approval rules and governance workflow surface. Define multi-level approval chains, spending limits, time-based restrictions, and escalation paths that return durable policy receipts.

Capabilities

  • No-code policy rule builder
  • Multi-level approval workflows (1-of-N, M-of-N)
  • Spending limits per wallet, user, or time window
  • Time-of-day and geo-based restrictions
  • Escalation to human approvers
  • Policy evaluation receipts for audit

API endpoints

POST/v1/policies
GET/v1/policies
POST/v1/policies/:id/evaluate
GET/v1/policies/:id/decisions
PolicyKit is in preview. Request design-partner access to review the planned API surface.Request access →
L4

ReconFlow

PREVIEW

Reconciliation

Bookkeeping and audit workflow surface. ReconFlow is designed to reconcile provider, chain, and internal ledger records, then route exceptions to finance and operations teams.

Capabilities

  • Cross-provider transaction reconciliation
  • Multi-chain balance tracking and verification
  • Automated exception detection and alerting
  • Fee reconciliation across custody backends
  • Audit trail generation for compliance
  • ERP and accounting system integration

API endpoints

POST/v1/recon/jobs
GET/v1/recon/jobs/:id
GET/v1/recon/exceptions
POST/v1/recon/exceptions/:id/resolve
ReconFlow is in preview. Request design-partner access to review the planned API surface.Request access →
L5

VaultCore

ROADMAP

Key Management

Signing authorization controls for customer-owned key paths. VaultCore documents signer intent, approval boundaries, and signing receipts while execution-routing services resolve backend profiles; Alloy does not hold private keys.

Capabilities

  • Signer intent and authorization routing
  • Customer-owned key path boundaries
  • Signing policy receipts
  • Cryptographic evidence references
  • HSM and MPC integration
  • Key ceremony workflow support

API endpoints

POST/v1/vaults
POST/v1/vaults/:id/sign
GET/v1/vaults/:id/keys
VaultCore is on the roadmap. Contact us to discuss your requirements.Request access →
L6

TreasuryAI

ROADMAP

AI Treasury

Policy-bounded treasury recommendation and review workflows. TreasuryAI is designed to help teams evaluate cash movement, rebalance proposals, and stablecoin operating policy before human-approved execution.

Capabilities

  • Policy-bounded treasury recommendations
  • Cash flow forecasting and management
  • Rebalancing proposals with policy bounds
  • Risk-adjusted return analysis
  • Treasury reporting and dashboards
  • Human escalation for out-of-policy moves

API endpoints

POST/v1/treasury/strategies
GET/v1/treasury/positions
POST/v1/treasury/rebalance
TreasuryAI is on the roadmap. Contact us to discuss your requirements.Request access →
L7

TokenForge

ROADMAP

Token Operations

RWA lifecycle management, token issuance, and redemption. End-to-end tokenization workflows for real-world assets with compliance, custody, and settlement integration.

Capabilities

  • Token issuance and minting workflows
  • RWA lifecycle management
  • Redemption and burn workflows
  • Transfer restriction enforcement
  • Compliance integration for regulated tokens
  • Settlement and delivery-vs-payment

API endpoints

POST/v1/tokens
POST/v1/tokens/:id/mint
POST/v1/tokens/:id/redeem
TokenForge is on the roadmap. Contact us to discuss your requirements.Request access →

Architecture: composable by design

Every module is modeled as an independent gRPC + REST service with its own Protobuf namespace. Customers can adopt WalletKit first, then add ShieldOS, RiskGuard, PolicyKit, and ReconFlow as their governance and operations requirements mature.

┌─────────────────────────────┐
│        Your Application       │
└──────────────┬──────────────┘
               │
┌──────────────▼──────────────┐
│    Alloy Control Plane      │
│  WalletKit · PolicyKit · …  │
└──────────────┬──────────────┘
               │
┌──────────────▼──────────────┐
│ Approved provider / key profiles │
└─────────────────────────────┘