Skip to main content
POST
VPN Detection
Checks the applicant’s IP address against the anonymizer feed — Tor exit nodes, VPN ranges, and datacenter ranges — using the session’s vpn-detection step configuration. Persists its result to the session. Each match type carries a fixed confidence — Tor 95, datacenter 90, VPN 85 — and is checked in that order; the first enabled match wins and is compared against confidence_threshold (default 70). A threshold above a type’s confidence effectively disables that type. trusted_ip_list (CIDRs) and trusted_asn_list short-circuit to CLEAR.
This check fails soft. If an internal error occurs, or the supplied ip_address isn’t a valid IPv4 address, it returns 200 with verdict: "UNAVAILABLE" and action: "allow" rather than blocking or erroring.

Request

Headers

Body parameters

Bodies use snake_case field names — there are no camelCase aliases.

Example request

Response

200 — Success

Verdicts

Evidence

Error responses