Signup Risk API combines email and domain analysis, identity consistency checks, optional IP context, explainable scoring, and operational workflows into one developer-friendly API for deciding whether a registration should receive access.
200 requests/month · No credit card required
Instead of stitching together isolated checks, Signup Risk API combines the available evidence into a deterministic 0–100 risk score, risk band, recommended action, and decision context for each registration.
Receive a deterministic score based on the available signup evidence and the current versioned scoring model.
Classify signups as low, moderate, high, or very high risk so your application can route registrations consistently.
Use decision.action to allow lower-risk users, review uncertain registrations, or block very-high-risk attempts according to your application’s policy.
Signup Risk API first validates and normalizes the email input, then evaluates eight core areas of signup risk using email, domain, identity, and optional network context.
Detect confirmed, likely, and suspicious disposable-email usage using curated domain intelligence and infrastructure-based analysis.
Evaluate domain existence and mail-related DNS infrastructure, including MX, SPF, DMARC, reserved or special-use domains, and authoritative versus temporary DNS failures.
Classify common consumer, business, education, government, and unknown email providers without treating provider type alone as proof of abuse.
Identify shared or functional addresses such as admin@, support@, billing@, info@, and other role-based mailboxes.
Detect known provider-domain typos and guarded near-match domains that may represent mistyped email addresses.
Identify placeholder-style email patterns, keyboard patterns, numeric-only local parts where unusual, and other synthetic registration characteristics.
When a name is supplied, evaluate how well it aligns with the email address and whether the supplied identity appears plausible without claiming to verify the person’s real identity.
When IP context is supplied and supported by the customer’s plan, evaluate network characteristics such as datacenter, VPN, proxy, or Tor usage.
Raw signup IPs are not returned in the API response, and privacy safeguards prevent raw PII from entering risk-cache keys, persisted cache payloads, or analytics.
A risk score is more useful when developers can understand what produced it. Signup Risk API can return the check-level evidence, primary reasons, confidence context, and plain-English explanation behind a decision.
See up to the most important findings behind the decision and which checks produced them.
Review the concrete findings that contributed to the final score and recommendation.
Understand why the API recommends allow, review, or block without treating inconclusive evidence as certainty.
Use confidence, evidence strength, evidence coverage, uncertainty, and limitations to understand how strongly the available evidence supports the result.
Use Signup Risk API in real time during account creation, process batch lists asynchronously, or trigger automated downstream workflows.
Call Signup Risk API from your backend while a user is registering and receive a deterministic 0–100 score plus an allow, review, or block recommendation before granting valuable account benefits.
Authoritative results can be reused for identical request context under the same scoring and component versions, reducing unnecessary repeated analysis while preserving deterministic behavior.
Analyze larger datasets asynchronously when real-time, one-at-a-time requests are not the best fit. Available on Scale and above. Upload a CSV of up to 1,000,000 rows per job, with row-level errors isolated.
Use signed signup.high_risk webhooks (Scale+) to trigger downstream workflows when a signup meets configured criteria. Deliveries are signed with a reveal-once secret for verification.
Signup Risk API is designed to minimize unnecessary exposure of signup data. Raw PII is excluded from risk-cache keys, persisted risk-cache payloads, analytics, and URLs, and raw signup IPs are never returned.
Temporary DNS or network failures are treated as unavailable or inconclusive evidence rather than being converted into fabricated risk findings. Non-authoritative results are not cached as final truth.
Signup Risk API works alongside your existing authentication and registration stack. Send the signup context from your backend, receive an actionable decision, and apply the result using your own product policy.
Integrate using server-side REST API requests and first-party API keys. Receive a decision-first JSON response containing score, risk band, action recommendation, check details, and explanation.
Use Signup Risk API alongside Clerk, Auth0, Supabase, Firebase, Cognito, or a custom authentication system. It adds signup-risk analysis without replacing your identity provider.
Inspect requests in the API playground, configure signed webhook endpoints, review plan-aware feature gates, and manage versioned scoring behavior.
decision.actionStart with 200 requests per month and add explainable allow, review, or block decisions to your application with one server-side API.
200 requests/month · No credit card required