Account protection API — live on Free

Fake trials end at the front door.

Signup and login risk with a score, verdict, and reasons — plus lists, rules, and linked accounts. Live API on Free (not dashboard-only). You keep enforcement.

Free forever · 1,000 live API checks / mo · Published overages

POST /api/v1/check

preview

Collecting

Reading this visit…

Network · device · TLS · behavior

SDK probes · edge context · handshake

what we'd knowTry the live demo →

1k

Live API checks / mo on Free

<300ms

Check response time

Lists

Rules + graph on every plan

You

Keep allow / challenge / block

Why teams switch

Account decisions. Full platform. Fair metering.

Built for signup and login abuse — priced per check you run, with policy tools that usually sit behind a sales call.

  • 01

    A verdict you can defend — not a mystery ID

    Every check returns score, verdict, facet scores, and plain reasons. Act on allow / challenge / block in your app — we never force a widget.

    How verdicts work →
  • 02

    Lists, rules, and linked accounts — included

    Allow/block lists and no-code rules run on every check. Query the identity graph for multi-account neighbors — without an enterprise SKU.

    Compare platforms →
  • 03

    Browser + iOS + Android + React Native

    Browser SDK from our CDN for behavior probes; mobile apps call your backend over HTTPS for session→check. Email intel and session bind work the same on every platform.

    iOS integration guide →
  • 04

    Live API on Free. Watch after they get in.

    1,000 live checks / month with a real API — not a dashboard demo. Daily exposure watch on domains you own: your employees, and the people who log in to your app. Alerts say where — never the password.

    Exposure monitoring →

Integrations

Web, iOS, Android, React Native.

Load the browser SDK from our CDN for behavioral probes. Mobile apps call your backend, which runs session→check with the secret key. Use pk_test_… in the browser; keep sk_test_… on your server only.

  • Browser: mouse, typing, device probes
  • Mobile: your backend binds sessionId and checks the account
  • API-only works when browser collection is unavailable

Prefer server-only? Call the API with sk_test_….

signup.html · browser CDN
<!-- Load before your signup/login handler -->
<script src="https://abusegraph.com/sdk/abusegraph.min.js"></script>
<script>
  const sdk = AbuseGraph.init({ publicKey: "pk_test_…" });

  async function checkSignup(email) {
    const collected = await sdk.collect();
    const evaluated = await sdk.evaluate(collected, { email });
    const body = sdk.toCheckBody(collected, {
      email,
      event: "signup",
      verdictToken: evaluated.verdictToken?.token,
    });
    // Your server keeps sk_ and makes the authoritative API check.
    return fetch("/api/abusegraph/check", {
      method: "POST",
      headers: { "content-type": "application/json" },
      body: JSON.stringify(body),
    });
  }
</script>
mobile.ts · calls your backend
// iOS / Android / React Native app
// Send account/device data to your own backend. Never ship sk_ in the app.
const response = await fetch("https://your-api.example.com/signup", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({ email, event: "signup", visitorId }),
});
if (!response.ok) {
  // Show a generic blocked/step-up message. The backend enforces the decision.
  return;
}
// Signup and session creation completed only after your backend allowed it.
api-only.sh · thinner signals
curl -X POST https://abusegraph.com/api/v1/check \
  -H "x-api-key: $ABUSEGRAPH_SECRET_KEY" \
  -H "x-abusegraph-site: yourdomain.com" \
  -H "content-type: application/json" \
  -d '{ "email": "user@example.com", "event": "signup", "site": "yourdomain.com" }'

Integration

Live in minutes

  1. 01

    Add your site

    Create an account and verify you own your production domain.

  2. 02

    Install the SDK

    Load the AbuseGraph browser SDK early so mouse, typing, and device probes collect. API-only is available but less impactful.

  3. 03

    Act on the result

    Allow good users. Challenge or block the rest — with reasons.

Ready for a live account API?

Free forever · 1,000 live API checks / mo · lists & rules included. Test keys never bill.

Compare

Why AbuseGraph?

Live API on Free. Explainable decisions. Lists, rules, and graph without waiting for enterprise.

Feature
AbuseGraph
Typical alternatives
Free tier
1,000 live API checks / mo
Dashboard-only or tiny quota
Decision
Score + verdict + reasons
Visitor ID or opaque risk
Policy tools
Lists, rules, linked accounts
Enterprise add-on or missing
Metering
Per check — published overages
MAU, seats, or sales quotes
Enforcement
You decide in your app
Vendor widget or black box
Entry price
Free · $99 Pro · $199 Scale
$99–$200+/mo before you ship

Pricing

Start free. Known overages.

Free → Pro ($99 + $4/1k) → Scale ($199 + $2/1k). Lists, rules, and graph on every plan. Test keys never bill.

Free

$0forever

1,000 included · then pauses

  • 1,000 live API checks / month
  • Unlimited test checks (sk_test_)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Start free
Most popular

Pro

$99/mo · domain

20,000 included · $4 / 1,000

  • 20,000 live checks / month
  • $4 / 1,000 overage (published)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Get Pro

Scale

$199/mo · domain

100,000 included · $2 / 1,000

  • 100,000 live checks / month
  • $2 / 1,000 overage (published)
  • Lists, rules, linked accounts
  • Email intel + session APIs
Get Scale

Enterprise

Custom

Custom volume, overage, SLA, and security review — email us. No meeting required.

  • Custom check volume + overage
  • SLA + priority support
  • Security review materials
  • Same API as every other plan
Email us

FAQ

Common questions

No. We score the risk and return a verdict with reasons. You enforce the policy in your own product — block, challenge, shadow-ban, or allow. You stay in control.

Ready for a live account API?

Free forever · 1,000 live API checks / mo · lists & rules included.