Working with the documentation

This section describes the public endpoints of the Travel Rule Protocol (TRP) Registry API. These endpoints allow third-party systems and Virtual Asset Service Providers (VASPs) to discover, identify and register participants in the TRP network.

The API follows REST conventions and returns responses in JSON format. All requests should be made over HTTPS.

Introduction: How the TRP Public API Works

The TRP API enables VASPs to:

• Authenticate using API keys
• Generate unique Travel Addresses for beneficiaries
• Initiate Travel Rule transfers
• Exchange originator and beneficiary data securely
• Receive callback notifications from TRP during the verification process

TRP follows global compliance standards (FATF, IVMS101) and ensures secure, encrypted communication between VASPs.

Every integration follows one simple flow:

1. Request JWT token → authenticate your VASP
2. Generate Travel Address → unique identifier for the beneficiary VASP
3. Initiate Transfer → send IVMS101-compliant data
4. Receive callback → TRP sends status updates to your backend

Authentication Overview

Before calling any protected endpoint, your system must generate a JWT access token using your API Key. This ensures:

• Secure API access
• Verified VASP identity
• Ability to track API usage
• Authorization for initiating Travel Rule transfers

The access token is short-lived (TTL ≈ 1 hour) for security reasons. Pass it as Authorization: Bearer <jwt> on every protected endpoint.

Conventions

• All bodies are application/json unless explicitly stated.
• Successful responses are wrapped in { "status": true, "data": ... }.
• Errors are wrapped in { "status": false, "errors": [{ "code", "message" }] }.
• Timestamps use ISO-8601 in UTC.
• Country codes follow ISO-3166-1 alpha-2.