Use test keys (sk_test_…) in the playground. Test traffic never bills. Live keys need a licensed site.
AbuseGraphDocs
SDK

Mobile SDKs

iOS, Android, and React Native clients for session then check.

Mobile apps should not embed secret keys. Use a publishable flow or mint a sessionId on the server, then bind the account on POST /api/v1/check.

iOS (Swift)

Android (Kotlin)

React Native

Packages: @abusegraph/mobile-client, @abusegraph/sdk-react-native, plus native iOS/Android packages in the repo.

Same events as web: signup | login | password_reset | email_change. Same verdict contract.

Browser SDK

Publishable key in the browser. collect, evaluate, then toCheckBody on your server with a secret key.

API reference

OpenAPI 3.1 — generated from the same spec as /openapi.json. Try requests with sk_test_….