Account protection API — live on Free

Fake trials end at the front door.

Signup and login risk with a score, verdict, and reasons — plus lists, rules, and linked accounts. Live API on Free (not dashboard-only). You keep enforcement.

Free forever · 1,000 live API checks / mo · Published overages

POST /api/v1/check

preview

Collecting

Reading this visit…

Network · device · TLS · behavior

SDK probes · edge context · handshake

what we'd knowTry the live demo →

1k

Live API checks / mo on Free

<300ms

Check response time

Lists

Rules + graph on every plan

You

Keep allow / challenge / block

Why teams switch

Account decisions. Full platform. Fair metering.

Built for signup and login abuse — priced per check you run, with policy tools that usually sit behind a sales call.

  • 01

    A verdict you can defend — not a mystery ID

    Every check returns score, verdict, facet scores, and plain reasons. Act on allow / challenge / block in your app — we never force a widget.

    How verdicts work →
  • 02

    Lists, rules, and linked accounts — included

    Allow/block lists and no-code rules run on every check. Query the identity graph for multi-account neighbors — without an enterprise SKU.

    Compare platforms →
  • 03

    Browser + iOS + Android + React Native

    Web SDK for behavior probes; native Swift/Kotlin and React Native clients for session→check. Email intel and session bind work the same on every platform.

    iOS integration guide →
  • 04

    Live API on Free. Watch after they get in.

    1,000 live checks / month with a real API — not a dashboard demo. Daily exposure watch on domains you own: your employees, and the people who log in to your app. Alerts say where — never the password.

    Exposure monitoring →

SDKs

Web, iOS, Android, React Native.

Browser SDK for behavioral probes. Native clients for session→check on mobile. Same fail-open rules — use pk_test_… in the browser and sk_test_… on the server (or a backend proxy).

  • Browser: mouse, typing, device probes
  • Native: sessionId bind + check on iOS / Android / RN
  • API-only still works — thinner without collect

Prefer server-only? Call the API with sk_test_….

sdk.ts · browser
import { init } from "@abusegraph/sdk";

const sdk = init({
  publicKey: process.env.NEXT_PUBLIC_ABUSEGRAPH_PUBLISHABLE_KEY!, // pk_test_…
});

// Init early → mouse, typing, device probes collect
// Call at signup / login:
const result = await sdk.check({ email, event: "signup" });
// result.score · result.verdict · result.riskSignals
mobile.ts · iOS / Android / RN
// iOS / Android / React Native — session → check
// Prefer a backend proxy for sk_test_… / sk_live_…
import { createAbuseGraphRNClient, rnDeviceCollect } from "@abusegraph/sdk-react-native";

const client = createAbuseGraphRNClient({
  apiKey: process.env.ABUSEGRAPH_SECRET_KEY!, // sk_test_…
  site: "yourdomain.com",
});

const result = await client.sessionThenCheck({
  email,
  event: "signup",
  device: rnDeviceCollect({ fingerprint: visitorId }),
});
// failOpen → allow · verdict → enforce in your app
api-only.sh · thinner signals
curl -X POST https://abusegraph.com/api/v1/check \
  -H "x-api-key: $ABUSEGRAPH_SECRET_KEY" \
  -H "x-abusegraph-site: yourdomain.com" \
  -H "content-type: application/json" \
  -d '{ "email": "user@example.com", "event": "signup", "site": "yourdomain.com" }'

Integration

Live in minutes

  1. 01

    Add your site

    Create an account and verify you own your production domain.

  2. 02

    Install the SDK

    Load the AbuseGraph browser SDK early so mouse, typing, and device probes collect. API-only is available but less impactful.

  3. 03

    Act on the result

    Allow good users. Challenge or block the rest — with reasons.

Ready for a live account API?

Free forever · 1,000 live API checks / mo · lists & rules included. Test keys never bill.

Compare

Why AbuseGraph?

Live API on Free. Explainable decisions. Lists, rules, and graph without waiting for enterprise.

Feature
AbuseGraph
Typical alternatives
Free tier
1,000 live API checks / mo
Dashboard-only or tiny quota
Decision
Score + verdict + reasons
Visitor ID or opaque risk
Policy tools
Lists, rules, linked accounts
Enterprise add-on or missing
Metering
Per check — published overages
MAU, seats, or sales quotes
Enforcement
You decide in your app
Vendor widget or black box
Entry price
Free · $99 Pro · $199 Scale
$99–$200+/mo before you ship

Pricing

Start free. Known overages.

Free → Pro ($99 + $4/1k) → Scale ($199 + $2/1k). Lists, rules, and graph on every plan. Test keys never bill.

Free

$0forever

1,000 included · then pauses

  • 1,000 live API checks / month
  • Unlimited test checks (sk_test_)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Start free
Most popular

Pro

$99/mo · domain

20,000 included · $4 / 1,000

  • 20,000 live checks / month
  • $4 / 1,000 overage (published)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Get Pro

Scale

$199/mo · domain

100,000 included · $2 / 1,000

  • 100,000 live checks / month
  • $2 / 1,000 overage (published)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Get Scale

Enterprise

Custom

Custom volume, overage, SLA, and security review — email us. No meeting required.

  • Custom check volume + overage
  • SLA + priority support
  • Security review materials
  • Same API as every other plan
Email us

FAQ

Common questions

No. We score the risk and return a verdict with reasons. You enforce the policy in your own product — block, challenge, shadow-ban, or allow. You stay in control.

Ready for a live account API?

Free forever · 1,000 live API checks / mo · lists & rules included.