---
title: "Overview"
description: "Base URL, authentication, decision types, risk scores, and rate limits."
collection: "guides"
slug: "overview"
url: "https://naiza.ai/docs/guides/overview"
markdown: "https://naiza.ai/docs/guides/overview.md"
full_docs: "https://naiza.ai/docs.md"
product: "Naiza"
base_url: "https://api.naiza.ai/api/v1"
---

# Overview

> Base URL, authentication, decision types, risk scores, and rate limits.

## Table of contents

- [Base URL](#base-url)
- [Authentication](#authentication)
- [Decision Types](#decision-types)
- [Risk Score](#risk-score)
- [Rate Limits](#rate-limits)
- [Response Time](#response-time)
- [Next Steps](#next-steps)

Naiza provides a RESTful JSON API for real-time fraud detection. Submit events with customer, device, and session context to receive instant ALLOW / BLOCK / REVIEW decisions with risk scores and matched rules.

## Base URL

```text
https://api.naiza.ai/api/v1
```

## Authentication

All API requests require an API key passed via the `x-api-key` header. Keys follow the format `naiza_api_sk_live_...` for production or `naiza_api_sk_test_...` for testing.

```bash
curl -X POST https://api.naiza.ai/api/v1/events \
  -H "x-api-key: naiza_api_sk_live_abc123..." \
  -H "Content-Type: application/json" \
  -d '{"eventName": "user.login", ...}'
```

## Decision Types

| Decision | Description | Typical action |
|----------|-------------|----------------|
| `ALLOW` | No fraud signals detected | Proceed normally |
| `REVIEW` | Suspicious indicators found | Require additional verification (e.g., MFA) |
| `BLOCK` | High-confidence fraud detected | Deny access immediately |

Decisions are determined by your configured rules. BLOCK rules short-circuit immediately. REVIEW is triggered when a review rule matches or the accumulated score reaches the threshold.

## Risk Score

Risk scores accumulate from SCORE-type rules during evaluation. A score of 100 or above triggers a REVIEW decision.

| Range | Level | Description |
|-------|-------|-------------|
| 0–25 | Low | Normal behavior, minimal fraud indicators |
| 26–50 | Medium | Some suspicious indicators present |
| 51–75 | High | Multiple fraud indicators detected |
| 76–100+ | Critical | Strong fraud signals — score ≥ 100 triggers REVIEW |

## Rate Limits

API requests are subject to quota limits per tenant. Exceeding the limit returns a `429` status with a `Retry-After` header.

| Metric | Value |
|--------|-------|
| Default quota | 10,000 req/hr |
| Window | 1 hour (rolling) |

See [Rate Limiting](https://naiza.ai/docs/api-reference/rate-limiting.md) for headers and retry guidance.

## Response Time

| Metric | Value |
|--------|-------|
| Typical | 50–200ms |
| 99th percentile | <500ms |

## Next Steps

- [Getting Started](https://naiza.ai/docs/guides/getting-started.md) — first API call
- [Quick Start](https://naiza.ai/docs/guides/quick-start.md) — common operations
- [API Overview](https://naiza.ai/docs/api-reference/overview.md) — full surface area
- [Best Practices](https://naiza.ai/docs/guides/best-practices.md) — production rollout

## Related documentation

- [Getting Started](https://naiza.ai/docs/guides/getting-started.md) — Make your first Naiza API call and verify your integration.
- [Tenant Onboarding](https://naiza.ai/docs/guides/tenant-onboarding.md) — Create tenants, invite operators, and configure webhooks.
- [Web SDK — Install & CDN](https://naiza.ai/docs/guides/web-sdk-install.md) — Install the browser SDK via CDN, self-host, and verify ingest.
- [Quick Start](https://naiza.ai/docs/guides/quick-start.md) — Common operations for events, decisions, lists, and feedback.
- [Event Monitoring](https://naiza.ai/docs/guides/event-monitoring.md) — Model product events and turn rule outcomes into decisions.
- [AML Integration](https://naiza.ai/docs/guides/aml-integration.md) — Screen customers and counterparties against AML watchlists.
- [Integration Examples](https://naiza.ai/docs/guides/integration-examples.md) — Node.js, Python, cURL, and webhook handler examples.
- [Best Practices](https://naiza.ai/docs/guides/best-practices.md) — Production guidance for keys, idempotency, and enforcement.

---

*Source: [https://naiza.ai/docs/guides/overview](https://naiza.ai/docs/guides/overview) · Full docs: [https://naiza.ai/docs.md](https://naiza.ai/docs.md)*