Control surface
Score signup and login risk. You keep enforcement. Free includes 1,000 live checks per month after DNS verify.
AbuseGraph is an account-protection API. You send a check at signup, login, password reset, or email change. You get a score, a verdict, and reasons. Your app decides what to do.
This is the operator manual — dense on purpose.
Two calls
Browser (optional)
Publishable key pk_… → SDK collect / evaluate on https://api.abusegraph.com.
Server (required)
Secret key sk_… → POST /api/v1/check on https://abusegraph.com. Never put sk_ in a client bundle. Live secrets also send x-abusegraph-site with a licensed hostname.
Start here
Quickstart
Curl a check with sk_test_…
Keys
Test vs live, site header, Free quota
Risk Check
Interactive OpenAPI for POST /api/v1/check
Browser SDK
collect → evaluate → toCheckBody
Guides
Clerk, Better Auth, Next.js, mobile, …
Agents
Paste the integration prompt into your coding agent
Spec
The pages under API are generated from the same document as /openapi.json. If the JSON and the docs disagree, treat the JSON as the contract.
Machine index: /llms.txt.