NON-CUSTODIAL CANTON RECORDS & PAYMENTS

On-chain records with one API call

Immutable records on Canton MainNet — attestations, co-signed proofs, issuance — one REST or MCP call, a verifiable on-chain proof every time. Non-custodial: you keep your keys; facilitated payments from your own wallet roll out next. No validator, no Daml, no setup fees.

Read the Docs API Explorer
Built on Canton Network
15 REST + 15 MCP Tools Non-Custodial Immutable Records Fee Credits, Fees Only Facilitated Payments — Rolling Out On-Chain Proof
--
On-Chain Writes
7
Action Types
15
REST Endpoints
15
MCP Tools
// 01

Records Live. Payments Rolling Out.

Record actions are fully live on Canton MainNet — every one returns an on-chain proof: contract ID, update/transaction ID, and ledger offset. 50 trial record actions included. The legacy balance-funded value endpoints are permanently disabled (403 non_custodial); value movement arrives via the non-custodial delegated facilitation flow — you sign from your own wallet, ccledger relays.

Attest & Record — Live

  • POST /attest — immutable on-chain record for audit trails (2.0 CC fee or 1 trial credit)
  • POST /attest-mutual — two-party, co-signed non-repudiation (5.0 CC fee or trial)
  • POST /mint — issuance/certificate record (non-issuer — not Canton Coin)
  • Each returns a real on-chain proof (contract ID, update ID, ledger offset)

Know the Cost First — Live

  • POST /quote — dry-run fee preview: base fee, CCL-discounted fee, balance, affordability
  • Read-only, no side effects — agents confirm cost before spending
  • x402/p402-style 402s: fee-short responses include an accepts array so agents can top up and retry

Escrow Unwind — Live & Free

  • POST /unlock — release a previously created LockedAmulet back to its owner (no fee)
  • Not affected by the non-custodial gate — it only unwinds an existing lock
  • New balance-funded locks can no longer be created (POST /lock returns 403)

Value Movement — Rolling Out

  • Balance-funded /transfer, /lock, /settle are permanently disabled — 403 non_custodial
  • Delegated facilitation: you sign a CreateTransferCommand from your own wallet
  • ccledger relays and submits it as the featured application (CIP-0104 confirmer)
  • Your keys, your CC — fee credits never fund value movement
// 02

Canton Infrastructure

Production Canton validator on Global MainNet. Record actions write immutable Daml contracts; the facilitation flow exercises Splice’s audited Amulet and Canton Token Standard choices over the Ledger API — ccledger does not reimplement transfer, escrow, or settlement logic. Spring Boot backend, PostgreSQL, gRPC + JSON Ledger API.

Smart Contracts
Daml
SDK --
Splice Version
--
Canton Network protocol
Migration ID
4
Current network migration
Backend
Spring Boot
--
Runtime
Java 21
Eclipse Temurin
Database
PostgreSQL 16
Flyway migrations
API Spec
Machine-readable spec
// 03

Developer Integration

OpenAPI 3.1 spec, an interactive API explorer, comprehensive docs, and self-service API keys. Wire Canton records into your app or AI agent in minutes.

API Explorer

  • Interactive API explorer at /api-docs/
  • Try every endpoint directly in your browser
  • Auto-generated from OpenAPI 3.1 spec

REST API

  • 15 community endpoints: register, 7 actions, quote, balance, deposit, stats, chart, and query
  • Record with /attest, /attest-mutual, /mint; preview fees with /quote; release locks free with /unlock
  • Balance-funded /transfer, /lock, /settle return 403 non_custodial — sender-signed facilitation is rolling out
  • API key auth via X-API-Key header · JSON responses with on-chain proof metadata
// 04

Non-Custodial & Secure

ccledger is non-custodial — enforced in code. Prepaid CC is a non-refundable fee credit that pays per-action fees only and never funds on-chain value movement; there is no withdrawal endpoint, and the balance-funded value endpoints are hard-gated at 403. You keep your Loop wallet and keys. Every live action returns a verifiable on-chain proof. API key authentication, rate limiting, and security headers on every response.

On-Chain Proof

  • Every live action settles on Canton MainNet through the Global Synchronizer
  • Response returns contract ID, update/transaction ID, and ledger offset
  • A verifiable on-chain record — look it up on any Canton participant

Non-Custodial, Enforced in Code

  • Fee credits are a one-way prepayment — fees only, non-refundable, no withdrawal endpoint
  • Balance-funded value movement is permanently disabled (403 non_custodial)
  • Facilitated value movement is sender-signed from your own wallet — ccledger relays, never holds your CC

API Key Security

  • SHA-256 hashed keys — plaintext never stored
  • Scoped permissions and per-key rate limiting
  • Per-tenant idempotency — a client key can’t read another tenant’s proof

Transport Security

  • HTTPS with HSTS preload (2-year max-age)
  • Content Security Policy, X-Frame-Options DENY
  • All security headers verified in automated smoke tests
YOUR BLUEPRINT

How to Use ccledger

Two paths for developers. The Community API for self-service payments and records, or admin-provisioned enterprise integration for high-volume ledger submission. Both settle on Canton MainNet.

COMMUNITY TIER

Community Tier

Register, then top up fee credits by sending CC from your Loop wallet — auto-credited within seconds. Start with 50 trial record actions; fee credits unlock unlimited record actions. Fee credits are non-refundable and pay per-action fees only.

  • POST /community/register → get an API key + 50 trial record actions
  • Send CC from Loop wallet → fee credits auto-credit, tier upgrades to paid
  • 2.0 CC fee per record action · 5.0 CC for mutual attestation · unlock free
  • Hold CCL for discount — up to ~50% off
ENTERPRISE INTEGRATION

Enterprise Access

Admin-provisioned keys with submit and query scopes for high-volume ledger submission — the surface the Blueprint portfolio management system runs on, submitting real transactions daily.

  • Direct Daml ledger submission via the participant
  • Query submission history and on-chain status
  • On-chain proof returned for every submission
  • Provisioned by Blueprint — not self-service
Action Lifecycle
Register: instant Top up fee credits (auto-credited) Call a record action Settles on MainNet — proof returned

Record actions (attest, attest-mutual, mint) create immutable on-chain records; unlock releases a previously created lock, free. Every live response returns an on-chain proof — contract ID, update/transaction ID, and ledger offset. Balance-funded transfer/lock/settle is permanently disabled (403 non_custodial); sender-signed facilitation is rolling out.

BUILT FOR BUILDERS

Developer & Agent Ready

Canton records for developers and AI agents. 15 REST endpoints, 15 MCP tools, and full agent discovery. No Canton node required. No blockchain experience necessary.

Application Developers

Write verifiable records from any application — attestations, co-signed proofs, issuance records — each with an on-chain proof. One API key, prepaid fee credits, done. Sender-signed value movement is rolling out.

AI Agents & MCP

15 MCP tools let any AI agent write Canton records directly — attest, co-sign, mint records — and quote the exact fee before spending. Compatible with Claude, ChatGPT, LangChain, CrewAI, and any MCP-enabled framework. Point your agent at /mcp and go.

Portfolio Management

Admin-provisioned enterprise integration for high-volume ledger submission — the Blueprint portfolio management system submits real Canton transactions through it daily.

Compliance & Audit

Attest and mutual-attest write immutable records on Canton MainNet — a verifiable, on-chain audit trail. Ideal for compliance, notary, and financial record-keeping.

QUICK START

Get Started in Seconds

Register for an API key, record on-chain, and quote fees before you spend. No Canton node, no wallet setup, no blockchain experience required.

# 1. Register — 50 trial record actions included, no payment needed
curl -X POST https://ccledger.xyz/api/v1/community/register \
  -H "Content-Type: application/json" \
  -d '{"appName":"my-app"}'

# 2. Record an attestation — uses a trial credit (no CC required)
curl -X POST https://ccledger.xyz/api/v1/community/attest \
  -H "X-API-Key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"appName":"my-app","dataHash":"abc123","description":"My first record"}'

# 3. Quote any fee before spending — read-only, no side effects
curl -X POST https://ccledger.xyz/api/v1/community/quote \
  -H "X-API-Key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"actionType":"attest"}'

# On-chain proof — contract ID, update ID, ledger offset — in every response.
# Fee-credit top-up (non-refundable, fees only; min 1.0 CC) — send CC from your Loop wallet to:
# blueprint-validator-1::1220daab58adcae026bd2ca7ad95014f678bda3ce2a6f91b744cf3ec3d87f09deeac

Full documentation at /docs/ · Interactive API explorer at /api-docs/ · OpenAPI spec at /openapi.json

CCL BUILDER REWARDS

Hold CCL. Pay less.

Every 10 CC-paid actions earns 1 CCL Builder Reward — an account-based discount credit for the ccledger ecosystem. Hold CCL to reduce your CC cost per action; the discount approaches ~50%.

Earn
1 CCL / 10 TX
Hold CCL
Lower CC cost
Pay With
CC
Max Discount
~50%

Learn more about the CCL discount curve