Documentation

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://scan.sv-1.global.canton.network.sync.global/api/scan/v2/holdings/state' \ --header 'Content-Type: application/json' \ --data '{ "migration_id": 123, "record_time": "2026-01-01T00:00:00Z", "record_tim

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://scan.sv-1.global.canton.network.sync.global/api/scan/v1/updates' \ --header 'Content-Type: application/json' \ --data '{ "after": { "after_migration_id": 123, "after_record_time": "<string>" },

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://scan.sv-1.global.canton.network.sync.global/api/scan/v2/state/acs' \ --header 'Content-Type: application/json' \ --data '{ "migration_id": 123, "record_time": "2026-01-01T00:00:00Z", "record_time_mat

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://scan.sv-1.global.canton.network.sync.global/api/scan/v1/holdings/summary' \ --header 'Content-Type: application/json' \ --data '{ "migration_id": 123, "record_time": "2026-01-01T00:00:00Z", "record_t

cURL Python JavaScript PHP Go Java Ruby curl --request GET \ --url 'https://example.com/api/validator/v1/scan-proxy/dso' import json import requests url = "https://example.com/api/validator/v1/scan-proxy/dso" response = requests.request("GET", url) print(response.text)

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://example.com/api/validator/v1/scan-proxy/holdings/summary' \ --header 'Content-Type: application/json' \ --data '{ "migration_id": 123, "record_time": "2026-01-01T00:00:00Z", "record_time_match": "exa

cURL Python JavaScript PHP Go Java Ruby curl --request POST \ --url 'https://example.com/api/validator/v0/scan-proxy/holdings/summary' \ --header 'Content-Type: application/json' \ --data '{ "migration_id": 123, "record_time": "2026-01-01T00:00:00Z", "record_time_match": "exa

cURL Python JavaScript PHP Go Java Ruby curl --request GET \ --url 'https://example.com/api/validator/v0/scan-proxy/dso' import json import requests url = "https://example.com/api/validator/v0/scan-proxy/dso" response = requests.request("GET", url) print(response.text)

darsyncer darsyncer synchronizes one or more DAR files to a participant ledger. It can upload missing DARs, verify that required packages are present, or wait until synchronization has completed. Docker Image europe-docker.pkg.dev/da-images/public/docker/darsyncer:latest Features •

split by participant and synchronizer, put shared commands in extend/participant section, and add a section for the synchronizer Console Commands Top-level Commands The following commands are available for convenience: exit Leave the console. help Help with console commands. Type

Externally Signed Topology Transactions Canton’s Topology formalizes a shared state on a synchronizer and provides a secure, distributed mechanism for modifying this state. This tutorial demonstrates how to build, sign, and submit topology transactions. It is particularly useful for cases where t

Topology management All Participant Nodes and Synchronizer components must know the topology state of a Synchronizer, which includes all identities on the Synchronizer and their associated keys. The two-phase commit protocol on a Synchronizer can therefore assume that identities and keys are commo

Third-party Daml apps As an SV operator, you are most welcome to review, install, and use third-party Daml apps provided you install third-party Daml apps on a validator node separate from your SV node . Installing additional Daml apps on an SV node is not supported and may compromise its secure o

Run and prune To run PQS you need the following: • PostgreSQL database server • Daml Sandbox or Canton Participant Node as the source of ledger data • Any access tokens or TLS certificates required by the above • PQS’ pqs.jar or Docker image Running PQS PQS application mostly runs as

The splice-topology-key-monitor Helm chart deploys a small service that watches the topology state of a participant and logs a warning whenever a topology transaction or proposal signed by one of a configured set of keys appears. Use it to get alerted when one such key is used. The chart is avai

In Daml, you must specify who can view data using stakeholder annotations in your template definitions. To change who can see the data, you would typically need to recreate a contract with a template that computes different stakeholder parties. Explicit contract disclosure allows you to delegate co

Structure This section looks at the structure of a ledger that records the interactions between the parties as ledger changes. The definitions presented here address the first question: “What do changes and ledgers look like?”. The basic building blocks of the recorded interactions are actions, wh

This page covers advanced console operations: topology management, key rotation, and repair procedures. These operations go beyond day-to-day administration and typically require a deeper understanding of Canton’s internal state. Topology management Canton uses a topology state to track the mapp

While all components in the system are designed to be crash-fault-tolerant, there is always a chance of failures from which the system cannot immediately recover, e.g. due to misconfiguration or bugs. In such cases, you will need to restore a component or a full validator node from backups or from d

Backup of Node Identities Once your SV node is up and onboarded, please make sure to backup the node identities of your SV node. Note that this information is highly sensitive, and contains the private keys of your participant, sequencer and mediator, so make sure to store it in a secure location,

Transaction failures on the Global Synchronizer produce specific error codes that point to the root cause. This page covers the three most common categories: authorization errors, package vetting issues, and timeouts. Authorization Errors Authorization failures appear when a party attempts an ac

Repair procedures Choose one of the following repair procedures based on the type of participant node fault in need of repair. Repairing participant nodes is dangerous and complex. Therefore, you are discouraged from attempting to repair participant nodes on your own unless you have expert knowl

Smart Contract Upgrade Overview What is Smart Contract Upgrade (SCU)? Smart Contract Upgrade (SCU) allows Daml models (packages in DAR files) to be updated on Canton transparently, provided some guidelines in making the changes are followed. For example, you can fix an application bug by uploa

Canton Improvement Proposals (CIPs) are the governance mechanism for the Global Synchronizer. A CIP is discussed on the cip-discuss mailing list, voted on by the Super Validator node operators, and announced on cip-announce once approved. The canonical text of every CIP lives in the canton-foundatio

This page is a reference for configuring, bootstrapping, and operating synchronizer nodes. Setup order • Configure — Write Canton configs for sequencer/mediator APIs, sequencer backend, and TLS (sections below). • Start — Start the synchronizer nodes with those configs. • Bootstrap — Initialize

Metrics The following sections contain the common metrics exposed for Daml services supporting a Prometheus metrics reporter. For the metric types referenced below, see the relevant Prometheus documentation . Participant Metrics daml.cache.evicted_weight • Summary : The sum of weights of cac

When developing Daml applications using SDK tools, your local setup will most likely not perform any Ledger API request authorization —by default, any valid Ledger API request will be accepted by the sandbox. This is not the case for participant nodes of deployed ledgers. For every Ledger API reque

High-level Overview Canton Network is a public layer 1 blockchain network with privacy. It is designed for financial institutions and DeFi alike to facilitate secure, interoperable, and privacy-preserving transactions and drive the confluence of TradFi and DeFi. Key Features: • It uniquely balan

End users work with the Wallet Gateway through its User UI : a web app the Wallet Gateway serves at its root URL. From it they log in, create and manage parties, review transactions, and approve requests from dApps. This guide covers logging in and managing parties in the UI. To drive the same opera

A Wallet Gateway connects users to one or more networks . Each network points at a Canton validator’s Ledger API and references an identity provider (IDP) that issues the JWT used to authenticate against that validator. This guide covers both, plus the authentication methods a network can use. Netw