Question 1

What is Rhyzlo?

Accepted Answer

Rhyzlo is a trust infrastructure platform for the XRP Ledger. It scores every token using live on-chain data, lets you add trustlines with any major wallet, and provides tools like token escrow and a developer API. The core safety tools are free and always will be. No account needed.

Question 2

What is a trustline?

Accepted Answer

A trustline tells the XRPL that your wallet is willing to hold a particular token. Without one, you can't receive or hold tokens from that issuer. Each trustline raises your minimum balance by 0.2 XRP. That XRP stays in your wallet but can't be spent while the trustline exists. Remove the trustline and it becomes available again.

Question 3

Is Rhyzlo safe to use?

Accepted Answer

Yes. We never see your private keys, seed phrases, or wallet credentials. Rhyzlo builds the transaction and your wallet signs it. Your funds stay in your control the entire time. The platform went through a full security audit in February 2026 with zero production vulnerabilities.

Question 4

Is Rhyzlo free?

Accepted Answer

The core safety tools are free and will stay that way. That includes risk reports, trustline creation, the cleanup tool, the widget, direct links, and the free tier of the API (50 requests per day). Escrow costs 0.5% per transaction. The developer API has paid tiers if you need higher rate limits.

Question 5

How does the risk scoring work?

Accepted Answer

The engine runs over 20 checks on every token. It verifies domain ownership via xrp-ledger.toml, checks account age, evaluates freeze and auth permissions, confirms DefaultRipple is set, counts actual holders, analyzes holding concentration, scans for known scam patterns, checks XRP reserve health, flags excessive transfer fees, reads on-chain KYC credentials (XLS-70), looks for AMM liquidity pools, and recognizes established issuers automatically. Each signal adds or reduces points on a 0 to 100 scale.

Question 6

What do the risk levels mean?

Accepted Answer

Minimal (0 to 15) means strong trust signals and very few red flags. Low (16 to 35) has some minor concerns but is generally reasonable. Medium (36 to 65) means real caution is warranted. High (66 to 100) means significant red flags were found.

Question 7

What are the API pricing tiers?

Accepted Answer

Free gives you 50 requests per day with no API key needed. Builder is 5 RLUSD per month for 1,000 requests per day. Pro is 29 RLUSD per month for 10,000 requests per day and removes the attribution requirement. Enterprise starts at 199 RLUSD per month with custom limits and SLA.

Question 8

What is the Rhyzlo API?

Accepted Answer

A REST API that gives you risk scores, token data, credential checks, and escrow tools for any token on the XRP Ledger. The free tier does not require an API key and gives you 50 requests per day. Paid tiers go up to custom enterprise limits.

Question 9

How does Escrow work?

Accepted Answer

You pick a recipient, an amount (XRP or any IOU token), and a release date. Rhyzlo builds the EscrowCreate transaction and your wallet signs it. The funds get locked on the ledger itself, not in any Rhyzlo wallet. Once the release date arrives, the recipient can claim the funds. The fee is 0.5% of the escrow amount. Everything is powered by the XLS-85 Token Escrow amendment.

Question 10

Which wallets are supported?

Accepted Answer

Xaman (formerly Xumm) for mobile with QR code signing, GemWallet as a browser extension with one-click signing, Crossmark as a browser extension with session-based signing, and Joey Wallet for mobile via WalletConnect. All four work for trustline creation and escrow transactions.

Question 11

What are XLS-70 credentials and how do they affect risk?

Accepted Answer

XLS-70 is an XRPL amendment that lets issuers carry on-chain KYC and AML credentials issued by trusted providers. When we detect these credentials on an issuer account, the risk score drops by up to 25 points. This went live on the XRPL in September 2025.

Question 12

Do I need to create an account?

Accepted Answer

No. Connect your wallet when you need to sign something and disconnect when you are done. API keys are generated and stored locally in your browser. We do not store any personal information on our servers.

Frequently Asked Questions

Explore

Something not covered?