Cookbook#

Step-by-step recipes for every RelataDB capability. Each page is focused, copy-pasteable, and follows the same investigation — Operation Shadow Ledger, a $2.8 M embezzlement — as the connective tissue.

Every captured output on these pages is real — taken from a live relata serve process. The scenario is fictional; the data shapes, query patterns, and governance are production-grade.

Setup#

Every snippet below assumes this client is already built:

pip install relata-sdk httpx
relata serve  # starts on localhost:9090

from relata import (
    RelataClient, IngestClient, Memory, McpClient,
    AuditClient, Namespace, QueryResult,
)
 
client = RelataClient(
    "http://localhost:9090",
    bearer_token="perftoken",
    purpose="analytics",
)

PURPOSE is optional but never invisible. Omit it and the server records purpose: null in the audit log; set it once on the client and every query, ingest, and MCP call is tagged. Governance travels in the substrate.

Recipes#

Full Stories#

Prefer the whole tour in one read? These two end-to-end cookbooks run every method through a single fictional investigation.

• 📖 Operation Shadow Ledger — Financial Crime & AML — the $2.8 M embezzlement investigation that exercises every RelataClient method, the full Memory surface, and all 69 MCP tools. The source the recipes above were split from.
• 🛡️ Operation Nightwatch — Cyber Security & SOC — EDR threat hunting: import Sigma rules, hunt lateral movement, correlate IOCs across hosts, trace each alert to its source with full provenance.

The DIY alternative (for contrast)#

Every captured response on these pages was taken from a live RelataDB server. No mockups.