Base URL
Partner and management endpoints share the API base URL assigned to your organization. Public documentation does not publish undisclosed production hostnames.Authentication
Set theAuthorization header on every request:
- Partner API (
/api/v1/assess,/api/v1/report-fraud,/api/v1/merchant/*) usesclm_sk_...orclm_pub_...(assess only). Create keys under Integraciones → API Keys. - Webhook ingest (
/api/webhooks/ingest) usesclm_wh_...keys.
- Management endpoints (
/blocklists,/cases) use a dashboard session JWT.
Endpoint groups
Risk
POST /api/v1/assess — real-time scoring and decisions.Fraud
POST /api/v1/report-fraud — confirm fraud and trigger the chain.Blocklists
CRUD over emails, IPs, BINs, devices, and more.
Cases
Create, update, and submit regulatory cases.
Events
POST /api/webhooks/ingest — stream raw provider events.System
GET /api/v1/health — service status.Dashboard
GET /api/v1/dashboard/overview — protection KPIs (session JWT).