Risk evaluate
Risk Evaluation
Risk Evaluate
Unified risk evaluation endpoint. Ingests a signal, evaluates it against your tenant policies, creates a signed risk decision, and optionally mints a fraud_decision_receipt for non-repudiation.
POST
Risk evaluate
How Evaluation Works
- The signal is ingested into
risk_signals - Your active policy rules are evaluated (highest priority match wins)
- A
risk_decisionrecord is created with the outcome - If
mint_receipt: trueandissuer_id/kidare provided, afraud_decision_receiptis minted via the attestation service
Decision Outcomes
Built-in receipt types
Request
string
required
Signal type:
velocity, ato, deepfake, impersonation, geo_anomaly, behavior, device_fingerprintstring
required
Subject identifier.
integer
required
Risk score (0–100).
string
Defaults to
user.boolean
If
true, mints a fraud_decision_receipt after evaluation. Requires issuer_id and kid.string
Issuer UUID for receipt minting.
string
Key ID for receipt signing.
Response
string
allow | challenge | block | reviewstring
UUID of the risk decision record.
string
UUID of the ingested risk signal.
string
UUID of the matching policy rule (if any).
string
UUID of the minted receipt (only if
mint_receipt: true and succeeded).Authorizations
API key for machine-to-machine authentication
Body
application/json

