使用 Alerts API

本指南介绍如何使用 Tenderly 的 API 设置简单和复杂的告警规则。我们将逐一探讨每种表达式类型，然后将它们组合成复杂的监控方案。

Alerting API 参考

简介

Tenderly 的 Alert API 允许您创建简单和复杂的 Alerts。简单告警由一条规则组成，例如 method_call 会在事务调用您的 public 或 external 方法时触发。复杂告警可包含多个条件，只有当所有条件都满足时才会触发。例如，同时包含 method_call 和 state_change 的告警，会在事务调用指定方法并更新指定存储槽时触发。使用 API 定义 Alert 时，您需要指定以下内容：

投递渠道（delivery channels）：当告警规则触发时，会通知这些渠道。详见 Delivery Channels。
表达式（expressions）数组：当数组中每个表达式所代表的所有条件都被满足时，告警将被触发。

email、Discord 和 Sentry 投递渠道可以通过 API（POST /api/v1/account/{accountId}/delivery-channel）创建。Slack、Telegram 和 PagerDuty 渠道需要 OAuth/bot 连接流程，只能通过 Dashboard 创建。所有渠道都可以使用 API 获取。

身份验证

在创建告警之前，您需要设置身份验证并标识您的项目：

JavaScript
Shell
Python

const TENDERLY_API_KEY = 'your_api_key';
const PROJECT_SLUG = 'your_project_slug';
const ACCOUNT_ID = 'me';  // Use 'me' or your specific account ID

// Base configuration for axios
const baseConfig = {
  baseURL: 'https://api.tenderly.co/api/v1',
  headers: {
    'X-Access-Key': TENDERLY_API_KEY,
    'Content-Type': 'application/json'
  }
};

export TENDERLY_API_KEY="your_api_key"
export PROJECT_SLUG="your_project_slug"
export ACCOUNT_ID="me"  # Use 'me' or your specific account ID

import requests

TENDERLY_API_KEY = 'your_api_key'
PROJECT_SLUG = 'your_project_slug'
ACCOUNT_ID = 'me'  # Use 'me' or your specific account ID

# Base configuration for requests
base_url = 'https://api.tenderly.co/api/v1'
headers = {
    'X-Access-Key': TENDERLY_API_KEY,
    'Content-Type': 'application/json'
}

表达式类型

您可以使用不同的表达式类型来指定 Alerts 的触发规则。

表达式类型	监控对象	主要用途	必填参数	可选参数
`method_call`	合约中特定函数的调用（适用于直接或内部事务）	跟踪重要函数何时被调用	- `address`：合约地址；`signature`：包含 `function_name` 和 `input_types`（有序 ABI 输入类型，例如 `["address", "uint256"]`）的对象	- `transaction_type`：“any”（默认）、“direct”、“source” 或 “internal”；`parameter_conditions`：条件数组；`not`：布尔值
`whitelisted_caller_addresses`	来自特定地址的调用	基于白名单的访问控制	- `addresses`：Ethereum 地址数组	无
`blacklisted_caller_addresses`	来自被拉黑地址的调用	基于黑名单的访问控制	- `addresses`：Ethereum 地址数组	无
`contract_address`	特定合约的交互	跟踪与某合约的所有交互	- `address`：合约地址	- `transaction_type`：“direct”、“source” 或 “internal”；省略时，direct 和 internal 调用都匹配
`network`	特定网络上的事件	多链监控	- `network_id`：网络/链 ID	无
`tag`	具有特定标签的合约	基于分组的监控	- `tag`：标签字符串	- `transaction_type`：“direct”、“source” 或 “internal”；省略时行为等同于 “internal”
`tx_status`	事务成功/失败	跟踪失败的事务	无	- `transaction_success`：布尔值
`tx_value`	事务金额	跟踪大额转账	- `transaction_value`：金额（wei）；`operator`：比较运算符	无
`emitted_log`	合约事件	跟踪特定事件	- `address`：合约地址；`event_name`：事件名称；`event_id`：事件签名	- `match_any`：布尔值（匹配任何合约的日志）；`match_non_project_contracts`：布尔值；`decode_events`：布尔值；`parameter_conditions`：条件数组；`not`：布尔值
`state_change`	合约状态变化	跟踪存储变更	- `address`：合约地址；`parameter_conditions`：条件数组	- `match_any`：布尔值（匹配任何合约的状态变化）；`match_non_project_contracts`：布尔值；`not`：布尔值；比较选项（阈值、百分比）
`view_function`	只读函数结果	跟踪计算得到的值	- `address`：合约地址；`input`：ABI 编码的函数数据；`network_id`：网络 ID	- `parameter_condition`：值比较；`not`：布尔值
`eth_balance`	ETH 余额变化	跟踪余额阈值	- `address`：合约地址；`threshold`：余额（wei）	- `operator`：比较运算符（默认 `<=`）；`not`：布尔值
`erc20_transfer_matcher`	ERC20 转账一致性	校验转账机制	- `address`：代币地址；`log_name`：事件名称；`balances`：状态变量名	无
`erc20_token_transfer`	被监控地址发送或接收的 ERC-20 代币	跟踪代币流入和流出	二选一：`addresses`：被监控地址数组；`match_any`：`true`（项目中的所有地址）	- `address_tag`：字符串（与 `match_any` 一起使用）；`token_addresses`：`{network_id, address}` 数组；`token_tag`：字符串；`match_non_project_contracts`：布尔值；`require_dollar_value`：布尔值（与 `match_non_project_contracts` 一起使用）；`direction`：“any”（默认）、“received” 或 “sent”；`min_amount`、`max_amount`：以字符串表示的原始代币单位；`net`：布尔值

说明

以上是 API 接受的全部表达式类型。任何其他 type 值的负载都会被拒绝并返回 400（“Expressions are not in the right format”）。
告警内的所有表达式都是 AND 关系：只有当每个表达式都匹配同一笔事务时，告警才会触发。要监控相互独立的条件，请为每个条件创建单独的告警。
比较运算符（operator）的有效取值：>、>=、<、<=、==、!=、contains、notContains
参数类型（parameter_type）包括：uint、int、bool、address、string、slice、array、tuple、fixed_bytes、bytes、hash、function
表达式类型 emitted_log、erc20_transfer_matcher、eth_balance、tx_value、method_call、state_change、tx_status 和 view_function 支持可选的 not: true 字段来对匹配取反
erc20_token_transfer 规则：设置 addresses 或 match_any 其中之一，不能同时设置。address_tag 将 match_any 缩小到带有该标签的项目地址。未设置 token_addresses 时，代币范围为项目中的 ERC-20 合约（可通过 token_tag 缩小，或通过 match_non_project_contracts 扩大到任意代币）。require_dollar_value: true 会跳过没有已知美元价格的代币转账，且仅可与 match_non_project_contracts 一起使用。min_amount 和 max_amount 包含边界值，比较的是绝对金额，并且要求 token_addresses 中恰好有一个条目。设置 net: true 时，方向和金额作用于事务中每个地址和代币的余额净变化。参见 ERC-20 代币转账监控。
eth_balance 仅在事务使余额跨越阈值（从不满足变为满足）时触发，而不是在条件持续满足期间的每笔事务上触发
所有地址必须是有效的 Ethereum 地址（以 0x 开头，40 个十六进制字符）
Wei 值应作为字符串传入以处理大数
网络 ID 应与目标区块链一致（例如 Ethereum 主网为 “1”）

更多详情请参阅 Alerting API 参考。

简单表达式示例

以下示例展示如何设置简单表达式规则。

1. 方法调用监控

使用场景：监控智能合约中的特定函数调用。

JavaScript
Shell
Python

const methodCallAlert = {
  name: "Critical Function Call Alert",
  description: "Monitors calls to critical functions",
  enabled: true,
  expressions: [{
    type: "method_call",
    expression: {
      address: "0xe592427a0aece92de3edee1f18e0157c05861564",
      signature: {
        function_name: "unwrapWETH9", // name of the function to match
        input_types: ["uint256", "address"] // ordered ABI input types
      }
    }
  },
  {
      "type": "contract_address",
      "expression": {
          "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
      }
  }
  ],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  methodCallAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Critical Function Call Alert",
  "description": "Monitors calls to critical functions",
  "enabled": true,
  "expressions": [
    {
    "type": "method_call",
      "expression": {
        "address": "0xe592427a0aece92de3edee1f18e0157c05861564",
        "signature": {
          "function_name": "unwrapWETH9",
          "input_types": ["uint256", "address"]
        }
      }
    },
    {
      "type": "contract_address",
      "expression": {
          "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
      }
    }
  ],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

method_call_alert = {
    "name": "Critical Function Call Alert",
    "description": "Monitors calls to critical functions",
    "enabled": True,
    "expressions": [{
        "type": "method_call",
        "expression": {
            "address": "0xe592427a0aece92de3edee1f18e0157c05861564",
            "signature": {
                "function_name": "unwrapWETH9",
                "input_types": ["uint256", "address"]
            }
        }
    },
     {
          "type": "contract_address",
          "expression": {
              "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
          }
        }],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=method_call_alert
)

2. 状态变化监控

使用场景：监控合约状态变量的变化，特别适用于跟踪关键参数，例如暂停状态或余额阈值。

JavaScript
Shell
Python

const stateChangeAlert = {
  name: "Critical State Change Alert",
  description: "Monitors important state changes",
  enabled: true,
  expressions: [{
    type: "state_change",
    expression: {
      address: "0x1234....",
      parameter_conditions: [
        {
          parameter_name: "pause",
          parameter_type: "bool",
          compare_change: true
        },
        {
          parameter_name: "totalSupply",
          parameter_type: "uint",
          compare_percentage: true,
          comparison_value: "5",
          operator: ">="
        }
      ]
    }
  }],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  stateChangeAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Critical State Change Alert",
  "description": "Monitors important state changes",
  "enabled": true,
  "expressions": [{
    "type": "state_change",
    "expression": {
      "address": "0x1234....",
      "parameter_conditions": [
        {
          "parameter_name": "pause",
          "parameter_type": "bool",
          "compare_change": true
        },
        {
          "parameter_name": "totalSupply",
          "parameter_type": "uint",
          "compare_percentage": true,
          "comparison_value": "5",
          "operator": ">="
        }
      ]
    }
  }],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

state_change_alert = {
    "name": "Critical State Change Alert",
    "description": "Monitors important state changes",
    "enabled": True,
    "expressions": [{
        "type": "state_change",
        "expression": {
            "address": "0x1234....",
            "parameter_conditions": [
                {
                    "parameter_name": "pause",
                    "parameter_type": "bool",
                    "compare_change": True
                },
                {
                    "parameter_name": "totalSupply",
                    "parameter_type": "uint",
                    "compare_percentage": True,
                    "comparison_value": "5",
                    "operator": ">="
                }
            ]
        }
    }],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=state_change_alert
)

3. 事件监控

使用场景：监控您的合约发出的特定事件，并支持参数过滤。

JavaScript
Shell
Python

const eventAlert = {
  name: "Large Transfer Event Alert",
  description: "Monitors large transfer events",
  enabled: true,
  expressions: [{
    type: "emitted_log",
    expression: {
      address: "0x1234....",
      event_name: "Transfer",
      event_id: "0x241ea03ca20251805084d27d4440371c34a0b85ff108f6bb5611248f73818b80",
      parameter_conditions: [
        {
          parameter_name: "amount",
          parameter_type: "uint",
          operator: ">=",
          comparison_value: "1000000000000000000" // 1 ETH
        }
      ],
      decode_events: true
    }
  }],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  eventAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Large Transfer Event Alert",
  "description": "Monitors large transfer events",
  "enabled": true,
  "expressions": [{
    "type": "emitted_log",
    "expression": {
      "address": "0x1234....",
      "event_name": "Transfer",
      "event_id": "0x241ea03ca20251805084d27d4440371c34a0b85ff108f6bb5611248f73818b80",
      "parameter_conditions": [
        {
          "parameter_name": "amount",
          "parameter_type": "uint",
          "operator": ">=",
          "comparison_value": "1000000000000000000"
        }
      ],
      "decode_events": true
    }
  }],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

event_alert = {
    "name": "Large Transfer Event Alert",
    "description": "Monitors large transfer events",
    "enabled": True,
    "expressions": [{
        "type": "emitted_log",
        "expression": {
            "address": "0x1234....",
            "event_name": "Transfer",
            "event_id": "0x241ea03ca20251805084d27d4440371c34a0b85ff108f6bb5611248f73818b80",
            "parameter_conditions": [
                {
                    "parameter_name": "amount",
                    "parameter_type": "uint",
                    "operator": ">=",
                    "comparison_value": "1000000000000000000"
                }
            ],
            "decode_events": True
        }
    }],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=event_alert
)

4. 原生 ETH 余额监控

使用场景：当某个地址的原生 ETH 余额低于阈值时告警，例如必须保持有充足资金的中继器或运营钱包。将告警范围限定到某个网络和地址，然后将原生余额与阈值（以 wei 表示）进行比较。

JavaScript
Shell
Python

const balanceAlert = {
  name: "Low ETH balance alert",
  description: "Alerts when the native ETH balance falls below 0.1 ETH",
  enabled: true,
  expressions: [
    // Scope to a specific network
    {
      type: "network",
      expression: {
        network_id: "1" // Ethereum mainnet
      }
    },
    // Scope to the watched address
    {
      type: "contract_address",
      expression: {
        address: "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"
      }
    },
    // Trigger when the native balance drops below the threshold
    {
      type: "eth_balance",
      expression: {
        address: "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b",
        threshold: "100000000000000000", // 0.1 ETH in wei
        operator: "<"
      }
    }
  ],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  balanceAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Low ETH balance alert",
  "description": "Alerts when the native ETH balance falls below 0.1 ETH",
  "enabled": true,
  "expressions": [
    {
      "type": "network",
      "expression": {
        "network_id": "1"
      }
    },
    {
      "type": "contract_address",
      "expression": {
        "address": "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"
      }
    },
    {
      "type": "eth_balance",
      "expression": {
        "address": "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b",
        "threshold": "100000000000000000",
        "operator": "<"
      }
    }
  ],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

balance_alert = {
    "name": "Low ETH balance alert",
    "description": "Alerts when the native ETH balance falls below 0.1 ETH",
    "enabled": True,
    "expressions": [
        {
            "type": "network",
            "expression": {
                "network_id": "1"
            }
        },
        {
            "type": "contract_address",
            "expression": {
                "address": "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"
            }
        },
        {
            "type": "eth_balance",
            "expression": {
                "address": "0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b",
                "threshold": "100000000000000000",
                "operator": "<"
            }
        }
    ],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=balance_alert
)

5. ERC-20 代币转账监控

使用场景：当金库钱包在 Ethereum mainnet 上发送至少 100,000 USDT 时告警。network 表达式将告警限定在一个网络上，min_amount 以原始单位表示（USDT 有 6 位 decimals）。ERC20 Token Transfer 介绍了各字段。

JavaScript
Shell
Python

const transferAlert = {
  name: "Treasury USDT outflow",
  description: "Treasury sent 100,000 USDT or more",
  enabled: true,
  expressions: [
    // Scope to a specific network
    {
      type: "network",
      expression: {
        network_id: "1" // Ethereum mainnet
      }
    },
    {
      type: "erc20_token_transfer",
      expression: {
        addresses: ["0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"],
        token_addresses: [
          { network_id: "1", address: "0xdac17f958d2ee523a2206206994597c13d831ec7" } // USDT
        ],
        direction: "sent",
        min_amount: "100000000000", // 100,000 USDT (6 decimals)
        net: true
      }
    }
  ],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  transferAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Treasury USDT outflow",
  "description": "Treasury sent 100,000 USDT or more",
  "enabled": true,
  "expressions": [
    {
      "type": "network",
      "expression": {
        "network_id": "1"
      }
    },
    {
      "type": "erc20_token_transfer",
      "expression": {
        "addresses": ["0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"],
        "token_addresses": [
          { "network_id": "1", "address": "0xdac17f958d2ee523a2206206994597c13d831ec7" }
        ],
        "direction": "sent",
        "min_amount": "100000000000",
        "net": true
      }
    }
  ],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

transfer_alert = {
    "name": "Treasury USDT outflow",
    "description": "Treasury sent 100,000 USDT or more",
    "enabled": True,
    "expressions": [
        {
            "type": "network",
            "expression": {
                "network_id": "1"
            }
        },
        {
            "type": "erc20_token_transfer",
            "expression": {
                "addresses": ["0x3b8c2f1a9d7e4605c8a1b2d3e4f5061728394a5b"],
                "token_addresses": [
                    {"network_id": "1", "address": "0xdac17f958d2ee523a2206206994597c13d831ec7"}
                ],
                "direction": "sent",
                "min_amount": "100000000000",
                "net": True
            }
        }
    ],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=transfer_alert
)

如需监控项目中的所有地址而不是单个地址，请将 addresses 替换为 "match_any": true，并可选择搭配 "address_tag"。如需覆盖项目中的所有代币，请省略 token_addresses；金额边界要求单个代币，因此还需删除 min_amount 和 max_amount。如需匹配任意 ERC-20 代币（包括未添加到项目中的代币），请省略 token_addresses 并设置 "match_non_project_contracts": true。添加 "require_dollar_value": true 可跳过没有已知美元价格的代币，例如垃圾代币和空投代币。以下表达式会在任何有价格的 ERC-20 代币从带有 treasury 标签的项目地址转出时触发：

{
  "type": "erc20_token_transfer",
  "expression": {
    "match_any": true,
    "address_tag": "treasury",
    "match_non_project_contracts": true,
    "require_dollar_value": true,
    "direction": "sent"
  }
}

复杂告警示例

以下示例展示复杂的表达式规则。只有当 expressions 数组中的每个表达式都被满足时，告警才会触发。

1. 安全监控系统

使用场景：结合多个条件的全面安全监控：

监控管理员函数调用
跟踪大额转账
监视黑名单地址
对关键参数的状态变化进行告警

JavaScript
Shell
Python

const securityAlert = {
  name: "Security Monitoring System",
  description: "Comprehensive security monitoring for contract",
  enabled: true,
  expressions: [
    {
      "type": "contract_address",
      "expression": {
          "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
      }
    },
    // Admin function monitoring
    {
      type: "method_call",
      expression: {
        address: "0xe592427a0aece92de3edee1f18e0157c05861564",
        signature: {
          function_name: "transferOwnership",
          input_types: ["address"]
        }
      }
    },
    // Blacklist checking
    {
      type: "blacklisted_caller_addresses",
      expression: {
        addresses: [
          "0xblacklisted1...",
          "0xblacklisted2..."
        ]
      }
    },
    // Large value transfers
    {
      type: "tx_value",
      expression: {
        transaction_value: "100000000000000000000", // 100 ETH
        operator: ">"
      }
    },
    // Critical state changes
    {
      type: "state_change",
      expression: {
        address: "0x1234....",
        parameter_conditions: [
          {
            parameter_name: "pause",
            parameter_type: "bool",
            compare_change: true
          },
          {
            parameter_name: "owner",
            parameter_type: "address",
            compare_change: true
          }
        ]
      }
    }
  ],
  delivery_channels: [{
    id: "your_channel_id",
    enabled: true
  }]
};

await axios.post(
  `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
  securityAlert,
  baseConfig
);

curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Security Monitoring System",
  "description": "Comprehensive security monitoring for contract",
  "enabled": true,
  "expressions": [
   {
      "type": "contract_address",
      "expression": {
          "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
      }
    },
    {
      "type": "method_call",
      "expression": {
        "address": "0xe592427a0aece92de3edee1f18e0157c05861564",
        "signature": {
          "function_name": "transferOwnership",
          "input_types": ["address"]
        }
      }
    },
    {
      "type": "blacklisted_caller_addresses",
      "expression": {
        "addresses": [
          "0xblacklisted1...",
          "0xblacklisted2..."
        ]
      }
    },
    {
      "type": "tx_value",
      "expression": {
        "transaction_value": "100000000000000000000",
        "operator": ">"
      }
    },
    {
      "type": "state_change",
      "expression": {
        "address": "0x1234....",
        "parameter_conditions": [
          {
            "parameter_name": "pause",
            "parameter_type": "bool",
            "compare_change": true
          },
          {
            "parameter_name": "owner",
            "parameter_type": "address",
            "compare_change": true
          }
        ]
      }
    }
  ],
  "delivery_channels": [{
    "id": "your_channel_id",
    "enabled": true
  }]
}'

security_alert = {
    "name": "Security Monitoring System",
    "description": "Comprehensive security monitoring for contract",
    "enabled": True,
    "expressions": [
     {
        "type": "contract_address",
        "expression": {
            "address": "0xe592427a0aece92de3edee1f18e0157c05861564"
        }
      },
        {
            "type": "method_call",
            "expression": {
                "address": "0xe592427a0aece92de3edee1f18e0157c05861564",
                "signature": {
                    "function_name": "transferOwnership",
                    "input_types": ["address"]
                }
            }
        },
        {
            "type": "blacklisted_caller_addresses",
            "expression": {
                "addresses": [
                    "0xblacklisted1...",
                    "0xblacklisted2..."
                ]
            }
        },
        {
            "type": "tx_value",
            "expression": {
                "transaction_value": "100000000000000000000",
                "operator": ">"
            }
        },
        {
            "type": "state_change",
            "expression": {
                "address": "0x1234....",
                "parameter_conditions": [
                    {
                        "parameter_name": "pause",
                        "parameter_type": "bool",
                        "compare_change": True
                    },
                    {
                        "parameter_name": "owner",
                        "parameter_type": "address",
                        "compare_change": True
                    }
                ]
            }
        }
    ],
    "delivery_channels": [{
        "id": "your_channel_id",
        "enabled": True
    }]
}

response = requests.post(
    f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
    headers=headers,
    json=security_alert
)

2. DeFi 协议监控

用例：监控 DeFi 池的以下情况：

大额交易/兑换
流动性变化
失败的事务

由于告警内的表达式是 AND 关系，每个条件都是一个单独的告警。下面的示例一次性创建三个告警。

JavaScript
Shell
Python

const defiAlerts = [
  // Alert 1: large swaps via events
  {
    name: "Large Swaps",
    description: "Swap events moving 1000+ tokens out of the pool",
    enabled: true,
    expressions: [{
      type: "emitted_log",
      expression: {
        address: "0xpool_address",
        event_name: "Swap",
        event_id: "0x...", // Swap event signature
        parameter_conditions: [
          {
            parameter_name: "amountOut",
            parameter_type: "uint",
            operator: ">=",
            comparison_value: "1000000000000000000000" // 1000 tokens
          }
        ],
        decode_events: true
      }
    }],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  },
  // Alert 2: liquidity changes
  {
    name: "Liquidity Shift",
    description: "Pool reserves moved by 10% or more",
    enabled: true,
    expressions: [{
      type: "state_change",
      expression: {
        address: "0xpool_address",
        parameter_conditions: [
          {
            parameter_name: "reserve0",
            parameter_type: "uint",
            compare_percentage: true,
            comparison_value: "10",
            operator: ">="
          },
          {
            parameter_name: "reserve1",
            parameter_type: "uint",
            compare_percentage: true,
            comparison_value: "10",
            operator: ">="
          }
        ]
      }
    }],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  },
  // Alert 3: failed transactions on the pool
  {
    name: "Failed Transactions",
    description: "Failed transactions involving the pool",
    enabled: true,
    expressions: [
      {
        type: "contract_address",
        expression: { address: "0xpool_address" }
      },
      {
        type: "tx_status",
        expression: { transaction_success: false }
      }
    ],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  }
];

for (const alert of defiAlerts) {
  await axios.post(
    `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
    alert,
    baseConfig
  );
}

# Alert 1: large swaps via events
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Large Swaps",
  "description": "Swap events moving 1000+ tokens out of the pool",
  "enabled": true,
  "expressions": [{
    "type": "emitted_log",
    "expression": {
      "address": "0xpool_address",
      "event_name": "Swap",
      "event_id": "0x...",
      "parameter_conditions": [
        {
          "parameter_name": "amountOut",
          "parameter_type": "uint",
          "operator": ">=",
          "comparison_value": "1000000000000000000000"
        }
      ],
      "decode_events": true
    }
  }],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

# Alert 2: liquidity changes
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Liquidity Shift",
  "description": "Pool reserves moved by 10% or more",
  "enabled": true,
  "expressions": [{
    "type": "state_change",
    "expression": {
      "address": "0xpool_address",
      "parameter_conditions": [
        {
          "parameter_name": "reserve0",
          "parameter_type": "uint",
          "compare_percentage": true,
          "comparison_value": "10",
          "operator": ">="
        },
        {
          "parameter_name": "reserve1",
          "parameter_type": "uint",
          "compare_percentage": true,
          "comparison_value": "10",
          "operator": ">="
        }
      ]
    }
  }],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

# Alert 3: failed transactions on the pool
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Failed Transactions",
  "description": "Failed transactions involving the pool",
  "enabled": true,
  "expressions": [
    {
      "type": "contract_address",
      "expression": { "address": "0xpool_address" }
    },
    {
      "type": "tx_status",
      "expression": { "transaction_success": false }
    }
  ],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

defi_alerts = [
    # Alert 1: large swaps via events
    {
        "name": "Large Swaps",
        "description": "Swap events moving 1000+ tokens out of the pool",
        "enabled": True,
        "expressions": [{
            "type": "emitted_log",
            "expression": {
                "address": "0xpool_address",
                "event_name": "Swap",
                "event_id": "0x...",
                "parameter_conditions": [
                    {
                        "parameter_name": "amountOut",
                        "parameter_type": "uint",
                        "operator": ">=",
                        "comparison_value": "1000000000000000000000"
                    }
                ],
                "decode_events": True
            }
        }],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    },
    # Alert 2: liquidity changes
    {
        "name": "Liquidity Shift",
        "description": "Pool reserves moved by 10% or more",
        "enabled": True,
        "expressions": [{
            "type": "state_change",
            "expression": {
                "address": "0xpool_address",
                "parameter_conditions": [
                    {
                        "parameter_name": "reserve0",
                        "parameter_type": "uint",
                        "compare_percentage": True,
                        "comparison_value": "10",
                        "operator": ">="
                    },
                    {
                        "parameter_name": "reserve1",
                        "parameter_type": "uint",
                        "compare_percentage": True,
                        "comparison_value": "10",
                        "operator": ">="
                    }
                ]
            }
        }],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    },
    # Alert 3: failed transactions on the pool
    {
        "name": "Failed Transactions",
        "description": "Failed transactions involving the pool",
        "enabled": True,
        "expressions": [
            {
                "type": "contract_address",
                "expression": {"address": "0xpool_address"}
            },
            {
                "type": "tx_status",
                "expression": {"transaction_success": False}
            }
        ],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    }
]

for alert in defi_alerts:
    response = requests.post(
        f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
        headers=headers,
        json=alert
    )

3. ERC20 代币监控

用例：代币监控，包括：

Transfer 一致性检查
大额转账监控
总供应量变化

与上一个示例一样，每个条件都是各自独立的告警。

JavaScript
Shell
Python

const tokenAlerts = [
  // Alert 1: Transfer event consistency
  {
    name: "Transfer Consistency",
    description: "Transfer events inconsistent with balance changes",
    enabled: true,
    expressions: [{
      type: "erc20_transfer_matcher",
      expression: {
        address: "0xtoken_address",
        log_name: "Transfer",
        balances: "balances"
      }
    }],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  },
  // Alert 2: large transfers
  {
    name: "Large Transfers",
    description: "Transfers of 1000+ tokens",
    enabled: true,
    expressions: [{
      type: "emitted_log",
      expression: {
        address: "0xtoken_address",
        event_name: "Transfer",
        event_id: "0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",
        parameter_conditions: [
          {
            parameter_name: "value",
            parameter_type: "uint",
            operator: ">=",
            comparison_value: "1000000000000000000000" // 1000 tokens
          }
        ]
      }
    }],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  },
  // Alert 3: total supply changes
  {
    name: "Supply Change",
    description: "totalSupply moved by 1% or more",
    enabled: true,
    expressions: [{
      type: "state_change",
      expression: {
        address: "0xtoken_address",
        parameter_conditions: [
          {
            parameter_name: "totalSupply",
            parameter_type: "uint",
            compare_percentage: true,
            comparison_value: "1",
            operator: ">="
          }
        ]
      }
    }],
    delivery_channels: [{ id: "your_channel_id", enabled: true }]
  }
];

for (const alert of tokenAlerts) {
  await axios.post(
    `/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert`,
    alert,
    baseConfig
  );
}

# Alert 1: Transfer event consistency
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Transfer Consistency",
  "description": "Transfer events inconsistent with balance changes",
  "enabled": true,
  "expressions": [{
    "type": "erc20_transfer_matcher",
    "expression": {
      "address": "0xtoken_address",
      "log_name": "Transfer",
      "balances": "balances"
    }
  }],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

# Alert 2: large transfers
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Large Transfers",
  "description": "Transfers of 1000+ tokens",
  "enabled": true,
  "expressions": [{
    "type": "emitted_log",
    "expression": {
      "address": "0xtoken_address",
      "event_name": "Transfer",
      "event_id": "0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",
      "parameter_conditions": [
        {
          "parameter_name": "value",
          "parameter_type": "uint",
          "operator": ">=",
          "comparison_value": "1000000000000000000000"
        }
      ]
    }
  }],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

# Alert 3: total supply changes
curl -X POST "https://api.tenderly.co/api/v1/account/${ACCOUNT_ID}/project/${PROJECT_SLUG}/alert" \
--header "Content-Type: application/json" \
--header "X-Access-Key: ${TENDERLY_API_KEY}" \
--data-raw '{
  "name": "Supply Change",
  "description": "totalSupply moved by 1% or more",
  "enabled": true,
  "expressions": [{
    "type": "state_change",
    "expression": {
      "address": "0xtoken_address",
      "parameter_conditions": [
        {
          "parameter_name": "totalSupply",
          "parameter_type": "uint",
          "compare_percentage": true,
          "comparison_value": "1",
          "operator": ">="
        }
      ]
    }
  }],
  "delivery_channels": [{ "id": "your_channel_id", "enabled": true }]
}'

token_alerts = [
    # Alert 1: Transfer event consistency
    {
        "name": "Transfer Consistency",
        "description": "Transfer events inconsistent with balance changes",
        "enabled": True,
        "expressions": [{
            "type": "erc20_transfer_matcher",
            "expression": {
                "address": "0xtoken_address",
                "log_name": "Transfer",
                "balances": "balances"
            }
        }],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    },
    # Alert 2: large transfers
    {
        "name": "Large Transfers",
        "description": "Transfers of 1000+ tokens",
        "enabled": True,
        "expressions": [{
            "type": "emitted_log",
            "expression": {
                "address": "0xtoken_address",
                "event_name": "Transfer",
                "event_id": "0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",
                "parameter_conditions": [
                    {
                        "parameter_name": "value",
                        "parameter_type": "uint",
                        "operator": ">=",
                        "comparison_value": "1000000000000000000000"
                    }
                ]
            }
        }],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    },
    # Alert 3: total supply changes
    {
        "name": "Supply Change",
        "description": "totalSupply moved by 1% or more",
        "enabled": True,
        "expressions": [{
            "type": "state_change",
            "expression": {
                "address": "0xtoken_address",
                "parameter_conditions": [
                    {
                        "parameter_name": "totalSupply",
                        "parameter_type": "uint",
                        "compare_percentage": True,
                        "comparison_value": "1",
                        "operator": ">="
                    }
                ]
            }
        }],
        "delivery_channels": [{"id": "your_channel_id", "enabled": True}]
    }
]

for alert in token_alerts:
    response = requests.post(
        f"{base_url}/account/{ACCOUNT_ID}/project/{PROJECT_SLUG}/alert",
        headers=headers,
        json=alert
    )

Getting Started

Simulator

Console

Monitor

Node RPC

AI Tools

Account & Settings

使用 Alerts API

Alerting API 参考

简介

身份验证

表达式类型

说明

简单表达式示例

1. 方法调用监控

2. 状态变化监控

3. 事件监控

4. 原生 ETH 余额监控

5. ERC-20 代币转账监控

复杂告警示例

1. 安全监控系统

2. DeFi 协议监控

3. ERC20 代币监控

Alerting API 参考

​简介

​身份验证

​表达式类型

​说明

​简单表达式示例

​1. 方法调用监控

​2. 状态变化监控

​3. 事件监控

​4. 原生 ETH 余额监控

​5. ERC-20 代币转账监控

​复杂告警示例

​1. 安全监控系统

​2. DeFi 协议监控

​3. ERC20 代币监控

简介

身份验证

表达式类型

说明

简单表达式示例

1. 方法调用监控

2. 状态变化监控

3. 事件监控

4. 原生 ETH 余额监控

5. ERC-20 代币转账监控

复杂告警示例

1. 安全监控系统

2. DeFi 协议监控

3. ERC20 代币监控