{ "opencollection": "1.0.0", "info": { "name": "Stytch B2B Authentication Application Fraud API", "version": "2.0.0" }, "items": [ { "info": { "name": "Fraud", "type": "folder" }, "items": [ { "info": { "name": "Lookup", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/fingerprint/lookup", "body": { "type": "json", "data": "{}" } }, "docs": "Lookup the associated fingerprint for the `telemetry_id` returned from the `GetTelemetryID()` function.\nLearn more about the different fingerprint types and verdicts in our [DFP guide](https://stytch.com/docs/fraud/guides/device-fingerprinting/overview).\n\nYou can make a decision based on the recommended `verdict` in the response:\n* `ALLOW` - This is a known valid device grouping or device profile that is part of the default `ALLOW` listed set of known devices by Stytch. This grouping is made up " }, { "info": { "name": "Set", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/rules/set", "body": { "type": "json", "data": "{}" } }, "docs": "Set a rule for a particular `visitor_id`, `browser_id`, `visitor_fingerprint`, `browser_fingerprint`, `hardware_fingerprint`, `network_fingerprint`, `cidr_block`, `asn`, or `country_code`. This is helpful in cases where you want to allow or block a specific user or fingerprint. You should be careful when setting rules for `browser_fingerprint`, `hardware_fingerprint`, or `network_fingerprint` as they can be shared across multiple users, and you could affect more users than intended.\n\nYou may not" }, { "info": { "name": "List", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/rules/list", "body": { "type": "json", "data": "{}" } }, "docs": "Get all rules that have been set for your project." }, { "info": { "name": "Override", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/verdict_reasons/override", "body": { "type": "json", "data": "{}" } }, "docs": "Use this endpoint to override the action returned for a specific verdict reason during a fingerprint lookup. For example, Stytch Device Fingerprinting returns a `CHALLENGE` verdict action by default for the verdict reason `VIRTUAL_MACHINE`. You can use this endpoint to override that reason to return an `ALLOW` verdict instead if you expect many legitimate users to be using a browser that runs in a virtual machine." }, { "info": { "name": "List", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/verdict_reasons/list", "body": { "type": "json", "data": "{}" } }, "docs": "Get the list of verdict reasons returned by the Stytch Device Fingerprinting product along with their default actions and any overrides you may have defined. This is not an exhaustive list of verdict reasons, but it contains all verdict reasons that you may set an override on.\n\nFor a full list of possible verdict reasons, see [Warning Flags (Verdict Reasons)](https://stytch.com/docs/docs/fraud/guides/device-fingerprinting/reference/warning-flags-verdict-reasons)." }, { "info": { "name": "Risk", "type": "http" }, "http": { "method": "POST", "url": "https://api.stytch.com/v1/email/risk", "body": { "type": "json", "data": "{}" } }, "docs": "Get risk information for a specific email address.\nThe response will contain a recommended action (`ALLOW`, `BLOCK`, or `CHALLENGE`) and a more granular `risk_score`.\nYou can also check the `address_information` and `domain_information` fields for more information about the email address and email domain.\n\nThis feature is in beta. Reach out to us [here](mailto:fraud-team@stytch.com?subject=Email_Intelligence_Early_Access) if you'd like to request early access." } ] } ], "bundled": true }