Allowlist Control

This allowlist management empowers Travel Rule Receiver VASPs to control which Travel Rule Initiator VASPs can send them Travel Rule requests. This enhancement provides receiver-side filtering to ensure that they will receive Travel Rule requests from only approved VASPs.

The allowlist is visible and manageable on GTR Website for every VASP. You can manage this list with simple clicks.

Furthermore, if your VASP plans to integrate this allowlist control flow with GTR into your in-house admin system, please continue to read the following content.

Get Allowlist

GET /api/vasp/whitelist returns the allowlist of your VASP. This list shows which VASPs you expect to receive Travel Rule requests from.

💡 If a VASP newly connected to GTR Network, it will appear as CLOSE by default in your allowlist.

By invoking GET /api/vasp/whitelist, you can expect to get the following response:

{
  "verifyStatus": 100000,
  "verifyMessage": "Success",
  "data": [
    {
      "vaspCode": "VASPCODE_A",
      "visibilityStatus": "OPEN"
    },
    {
      "vaspCode": "VASPCODE_B",
      "visibilityStatus": "OPEN"
    },
    {
      "vaspCode": "VASPCODE_C",
      "visibilityStatus": "CLOSE"
    }
  ]
}

• visibilityStatus=OPEN: Travel Rule requests from this Initiator VASP will be forwarded to you by GTR.
• visibilityStatus=CLOSE: Travel Rule requests from this Initiator VASP will be rejected by GTR and not forwarded to you.

Initiator VASP	Status
VASPCODE_A	Allow ✅
VASPCODE_B	Allow ✅
VASPCODE_C	Block ❌

For further details of VASP Allowlist API, see API Reference: /api/vasp/whitelist

Update Allowlist

POST /api/vasp/whitelist/manage endpoint is for your VASP to update your allowlist. By invoking this endpoint, GTR expects to receive the following request body from your VASP.

{
  "vaspVisibilityList": [
    {
      "vaspCode": "VASPCODE_A",
      "visibilityStatus": "CLOSE"
    },
    {
      "vaspCode": "VASPCODE_C",
      "visibilityStatus": "OPEN"
    }
  ]
}

Initiator VASP	Before	After
VASPCODE_A	Allow ✅	Block ❌
VASPCODE_B	Allow ✅	Allow ✅
VASPCODE_C	Block ❌	Allow ✅

For further details of VASP Allowlist Management API, see API Reference: /api/vasp/whitelist/manage