---
title: "Search VASPs"
method: POST
path: "/vasps"
tags: ["VASP directory"]
---

# Search VASPs

`POST /vasps`

## Request

- Base URL: `https://sandbox.striga.com/api/v1/travel-rule`
- URL: `https://sandbox.striga.com/api/v1/travel-rule/vasps`
- Auth: API key in header `api-key` and API key in header `Authorization`

Search the Travel Rule VASP directory. Results are paginated; use the `id` from a result as `counterpartyVaspId` on `POST /counterparty/vasp`.

Accepts HMAC application auth or a valid widget session token.

## Request body

- SearchVaspsRequest
  - `search` string: Free-text search against VASP name / legal name.
  - `type` '' | 'exchange' | 'bank' | 'decentralized_service' | 'donations' | 'gambling' | 'investment_management_firm' | 'mining_pool' | 'mixing_service' | 'service' | 'staking_pool' | 'wallet' | 'payment_service_provider' | 'nft_marketplace' | 'sanction_list' | 'dex' | 'atm' | 'bot' | 'airdrop' | 'auctioned_assets' | 'block_reward' | 'child_abuse' | 'cloud_mining' | 'community_reported_scam' | 'cross_chain_bridge_protocol' | 'darkweb' | 'hack' | 'ico' | 'ignored_small_amounts' | 'large_transaction' | 'large_unnamed_entity' | 'no_entities_found' | 'mixing_pattern' | 'ongoing_legal_action' | 'payment_channel' | 'peeling_chain_unknown_origin' | 'phishing' | 'poisoning' | 'ransomware' | 'real_world_asset' | 'scam' | 'secondary_coin_creation' | 'secondary_coin_removal' | 'seized_assets' | 'suspicious' | 'terrorism' | 'token' | 'unspent_output': Optional entity type filter. Omit or send `""` for no filter.
  - `page` integer: 1-based page index (default **1** when omitted).
  - `limit` integer: Page size (default **25** when omitted).

## Response `200`

success

- SearchVaspsResponse
  - `vasps` TravelRuleVaspListItem[], required
    - `id` string, required: VASP identifier; use as `counterpartyVaspId` on `POST /counterparty/vasp`.
    - `name` string, required
    - `legalName` string, required
    - `type` string, required
    - `countries` string[], required
    - `url` string, required
    - `inNetwork` boolean, required

## Other responses

- `400`: Bad Request
- `401`: Invalid authentication header
- `429`: VASP directory rate limit exceeded.
- `503`: VASP directory temporarily unavailable

---

[API](https://skmtc.dev/striga/apis/travel-rule.md) - [All operations](https://skmtc.dev/striga/apis/travel-rule/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/travel-rule/revisions/c82fbc1ad95b?raw)