RiskScore API
Getting started
Subscribe, copy your secret key, and run your first RiskScore lookup.
The Syndaq RiskScore API evaluates public IP addresses for anonymity signals, reputation, and threat indicators. Each lookup returns location context, a verdict, numeric scores, and boolean flags you can use in fraud prevention, access control, and security logging.
What you need
- A RiskScore plan from the Syndaq API catalog.
- A secret key (
rs_sec_) from the Syndaq client area after your order is provisioned.
RiskScore lookups are server-side only. Send your secret key from your backend or trusted worker. Do not embed it in client-side code, mobile apps, or public repositories.
Base URL
All RiskScore endpoints are served from:
https://api.syndaq.com/v1/riskscore/Quick start
Replace rs_sec_YOUR_SECRET_KEY with the secret shown in Services for your RiskScore subscription.
curl -sS "https://api.syndaq.com/v1/riskscore/lookup/8.8.8.8" \
-H "Authorization: Bearer rs_sec_YOUR_SECRET_KEY"You can also pass the IP as a query parameter:
curl -sS "https://api.syndaq.com/v1/riskscore/lookup?ip=8.8.8.8" \
-H "Authorization: Bearer rs_sec_YOUR_SECRET_KEY"A successful response includes location summary, network metadata, a verdict, risk and threat scores, and flags such as VPN, proxy, Tor, and hosting detection.
How lookups work
| Step | What happens |
|---|---|
| 1 | Your server sends a lookup request with your secret key. |
| 2 | Syndaq checks an in-memory cache, then the local RiskScore database. |
| 3 | If the IP is not stored yet, Syndaq enriches it from an upstream intelligence provider and saves the result. |
| 4 | JSON is returned with a cached flag so you can tell cache hits from fresh enrichments. |
Private, reserved, and invalid addresses return a clear error without billing an upstream lookup.
GeoIP vs RiskScore
| Product | Best for |
|---|---|
| GeoIP | Country, city, ISP, ASN, coordinates, and EU membership |
| RiskScore | VPN and proxy detection, threat scoring, verdicts, and fraud signals |
Many teams use GeoIP for personalization and RiskScore for security decisions at login, checkout, or API gateways.
Manage your subscription
Sign in to the Syndaq client area and open Services. Select your RiskScore service to:
- View usage and remaining monthly quota
- Copy or rotate your secret key
- Configure optional IP allowlists for API access
Next steps
- Authentication and limits: keys, rate limits, quotas, and IP restrictions
- Risk intelligence guide: verdicts, scores, and recommended actions
- API reference: endpoints, response fields, and error codes