Overview
Base URL, authentication, decision types, risk scores, and rate limits.
Overview
Getting Started
Naiza provides a RESTful JSON API for real-time fraud detection. Submit events with customer, device, and session context to receive instant ALLOW / BLOCK / REVIEW decisions with risk scores and matched rules.
Base URL
https://api.naiza.ai/api/v1
Authentication
All API requests require an API key passed via the x-api-key header. Keys follow the format naiza_api_sk_live_... for production or naiza_api_sk_test_... for testing.
curl -X POST https://api.naiza.ai/api/v1/events \
-H "x-api-key: naiza_api_sk_live_abc123..." \
-H "Content-Type: application/json" \
-d '{"eventName": "user.login", ...}'Decision Types
Decisions are determined by your configured rules. BLOCK rules short-circuit immediately. REVIEW is triggered when a review rule matches or the accumulated score reaches the threshold.
Risk Score
Risk scores accumulate from SCORE-type rules during evaluation. A score of 100 or above triggers a REVIEW decision.
| Range | Level | Description |
|---|---|---|
| 0-25 | Low | Normal behavior, minimal fraud indicators |
| 26-50 | Medium | Some suspicious indicators present |
| 51-75 | High | Multiple fraud indicators detected |
| 76-100+ | Critical | Strong fraud signals — score >= 100 triggers REVIEW |
Rate Limits
API requests are subject to quota limits per tenant. Exceeding the limit returns a 429 status with a Retry-After header.