Use test keys (sk_test_…) in the playground. Test traffic never bills. Live keys need a licensed site.
AbuseGraphDocs
SDK

Mobile SDKs

iOS, Android, and React Native clients for session then check.

Mobile apps should not embed secret keys. Use a publishable flow or mint a sessionId on the server, then bind the account on POST /api/v1/check.

The browser SDK installs from the CDN; mobile apps use their platform-specific client instead: @abusegraph/mobile-client, @abusegraph/sdk-react-native, or the native iOS/Android packages in the repository.

Same events as web: signup | login | password_reset | email_change. Same verdict contract.