风控与反欺诈

欺诈评分、制裁（OFAC）筛查、设备 / IP 指纹与实名认证（KYC），统一在一个风控 API 后面。

概览

基础路径: https://api.infrai.cc/v1/risk

鉴权头: Authorization: Bearer $INFRAI_API_KEY

bash

# Call any /v1/risk capability over raw HTTP — no SDK to install.
# curl:
curl https://api.infrai.cc/v1/risk/... \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json"

方法

risk.score

POST /v1/risk/score

对用户 / 账户事件（登录、支付、注册）进行欺诈与滥用风险评分，返回 0..1 归一化分数及接受 / 复核 / 拒绝处置。计费工作动作，ML 高毛利（service_markup）。

参数

名称	类型	必填	说明
`subject_id`	`string`	可选	被评估的用户 / 账户 id。
`event_type`	`string`	可选	被评分 / 上报的事件。
`ip`	`string`	可选	来源 IP 地址。
`email`	`string`	可选	与主体关联的邮箱地址。
`device_fingerprint`	`string`	可选	设备指纹 / 访客 id。
`amount`	`number`	可选	交易金额。
`currency`	`string`	可选	金额的 ISO 货币代码。
`properties`	`Record<string, unknown>`	可选	任意信号属性。
`vendor`	`string`	可选	显式 vendor 锁定。
`idempotency_key`	`string`	可选	客户端提供的幂等键。

RiskScore { score, decision, reasons: string[] }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X POST https://api.infrai.cc/v1/risk/score \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

python

import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/score",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/score",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/score",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

risk.ofac.check

POST /v1/risk/ofac/check

将姓名 / 地址 / 证件比对制裁名单（OFAC SDN、EU、UN 合并清单），返回匹配明细。计费工作动作。

参数

名称	类型	必填	说明
`name`	`string`	必填	要筛查的法定全名。
`address`	`string`	可选	要筛查的地址。
`country`	`string`	可选	国家代码。
`dob`	`string`	可选	出生日期（YYYY-MM-DD）。
`id_number`	`string`	可选	政府证件号码。
`lists`	`string[]`	可选	要比对的制裁名单。

OfacResult { match: boolean, hits: object[] }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X POST https://api.infrai.cc/v1/risk/ofac/check \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "..."}'

python

import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/ofac/check",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'name': '...'},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/ofac/check",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"name": "..."}),
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/ofac/check",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"name": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

risk.device.fingerprint

POST /v1/risk/device/fingerprint

由客户端采集令牌加 IP、user-agent 信号解析出稳定的设备指纹 / 访客 id，用于机器人与隐身检测。由 vendor（sift / castle）提供。

参数

名称	类型	必填	说明
`request_token`	`string`	可选	客户端采集的令牌 / 访客 id。
`ip`	`string`	可选	来源 IP 地址。
`user_agent`	`string`	可选	客户端 user-agent 字符串。
`properties`	`Record<string, unknown>`	可选	任意信号属性。

Device { device_id, signals: object }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X POST https://api.infrai.cc/v1/risk/device/fingerprint \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

python

import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/device/fingerprint",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/device/fingerprint",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/device/fingerprint",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

risk.event.report

POST /v1/risk/event/report

将风险相关事件或标签（拒付、欺诈、滥用）作为反馈回报给 vendor，以改进后续评分。

参数

名称	类型	必填	说明
`subject_id`	`string`	可选	被评估的用户 / 账户 id。
`event_type`	`string`	必填	被评分 / 上报的事件。
`label`	`"fraud" \| "legit" \| "chargeback"`	可选	结果标签——fraud、legit 或 chargeback。
`reason`	`string`	可选	上报的自由文本原因。
`properties`	`Record<string, unknown>`	可选	任意信号属性。

{ ok: boolean }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X POST https://api.infrai.cc/v1/risk/event/report \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"event_type": "..."}'

python

import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/event/report",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'event_type': '...'},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/event/report",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"event_type": "..."}),
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/event/report",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"event_type": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

risk.kyc.submit

POST /v1/risk/kyc/submit

向实名认证 vendor（数美 / 同盾）提交身份核验（KYC）请求——证件类型、姓名、出生日期、证件 / 自拍图像。

参数

名称	类型	必填	说明
`subject_id`	`string`	必填	被评估的用户 / 账户 id。
`document_type`	`string`	可选	身份证件类型。
`document_country`	`string`	可选	证件签发国。
`full_name`	`string`	可选	证件上的全名。
`dob`	`string`	可选	出生日期（YYYY-MM-DD）。
`document_images`	`string[]`	可选	证件图像引用。
`selfie_image`	`string`	可选	自拍图像引用。
`metadata`	`Record<string, unknown>`	可选	任意键值元数据。

KycCase { case_id, status }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X POST https://api.infrai.cc/v1/risk/kyc/submit \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"subject_id": "..."}'

python

import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/kyc/submit",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'subject_id': '...'},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/submit",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"subject_id": "..."}),
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/submit",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"subject_id": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

risk.kyc.status

GET /v1/risk/kyc/status

获取此前提交的 KYC 核验当前状态（pending / approved / rejected / manual_review）。资源粘滞：须在受理提交的同一 vendor 上轮询状态。

参数

名称	类型	必填	说明
`subject_id`	`string`	必填	被评估的用户 / 账户 id。

KycCase { case_id, status, decided_at? }

示例

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

curl -X GET https://api.infrai.cc/v1/risk/kyc/status \
  -H "Authorization: Bearer $INFRAI_API_KEY"

python

import os, requests

resp = requests.get(
    "https://api.infrai.cc/v1/risk/kyc/status",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
)
resp.raise_for_status()
print(resp.json())

javascript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/status",
  {
    method: "GET",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
    },
  },
);
console.log(await resp.json());

typescript

const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/status",
  {
    method: "GET",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
    },
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

高级:指定 vendor

默认情况下 infrai 会把每次调用智能路由到最佳可用供应商——无需自己挑选 vendor。作为高级逃生口,本能力支持可选的 vendor 入参以锁定某个供应商。本能力当前所有可用 vendor 可通过该能力 id 对应的 discovery 端点实时获取——参见 discovery API。

GET /v1/discovery/{capability}

risk.score

全部能力

本模块全部已路由能力——完整的对外 REST 契约。上方方法是带讲解的入门示例,此表是完整参考。

能力	端点	说明
`risk.device.fingerprint`	`POST /v1/risk/device/fingerprint`	Resolve a stable device fingerprint / visitor id from a client-collected token plus IP and user-agent signals, for bot and incognito detection. Served by a vendor (sift / castle).
`risk.event.report`	`POST /v1/risk/event/report`	Report a risk-relevant event or label (chargeback, fraud, abuse) back to the vendor as feedback to improve future scoring.
`risk.kyc.status`	`GET /v1/risk/kyc/status`	Fetch the current state (pending / approved / rejected / manual_review) of a previously submitted KYC verification. Sticky_resource: status must be polled on the same vendor that accepted the submission.
`risk.kyc.submit`	`POST /v1/risk/kyc/submit`	Submit an identity-verification (KYC) request — document type, name, DOB, document/selfie images — to a real-name verification vendor (shumei / tongdun).
`risk.ofac.check`	`POST /v1/risk/ofac/check`	Screen a name / address / id against sanctions lists (OFAC SDN, EU, UN consolidated), returning match details. Billable work-action.
`risk.score`	`POST /v1/risk/score`	Score a user/account event (login, payment, signup) for fraud and abuse risk, returning a normalized 0..1 score plus an accept / review / reject disposition. Billable work-action, ML high-margin (service_markup).

完整示例

本模块的生产级端到端范例:先一次性配置,再运行业务流程,尽量覆盖本模块的多数 API。

单文件可运行 Python 程序(仅标准库、无 SDK):拷贝后填入 INFRAI_API_KEY 运行,即可按真实业务流逐步体验本模块核心 API——每一步都真实调用并计费,后续步骤复用前一步返回的真实字段。12 行 helper 就是全部集成代码。

python

#!/usr/bin/env python3
"""Infrai · risk — runnable real-app example (single file, zero deps).

Copy this file, set your key, run it: every step is a REAL call to
api.infrai.cc, billed at the real (tiny) per-call price, printing the
live JSON response. Get a key at https://console.infrai.cc (Google/
GitHub sign-in grants $2 free credit). No SDK — the 12-line helper
below is the entire integration."""
import json
import os
from urllib import error, request

KEY = os.environ.get("INFRAI_API_KEY") or "ifr_pk_proj_..."  # <- your key
BASE = "https://api.infrai.cc"


# Same raw HTTPS POST/GET as every per-method example on this page —
# wrapped once for reuse. There is nothing else to it: no SDK.
def infrai(method, path, body=None):
    req = request.Request(
        BASE + path, method=method,
        data=json.dumps(body).encode() if body is not None else None,
        headers={"Authorization": f"Bearer {KEY}",
                 "Content-Type": "application/json"})
    try:
        with request.urlopen(req, timeout=60) as r:
            return json.loads(r.read())
    except error.HTTPError as e:
        return json.loads(e.read())


def show(label, resp):
    print(f"\n== {label} ==")
    print(json.dumps(resp, indent=2, ensure_ascii=False))
    return resp


# 1) risk.score — POST /v1/risk/score · Score a user/account event (login, payment, signup) for fraud and abuse risk, returning a normalized 0..1 score plus an accept / review / reject disposition. Billable work-action, ML high-margin (service_markup).
r1 = show("risk.score", infrai("POST", "/v1/risk/score", {}))

# 2) risk.ofac.check — POST /v1/risk/ofac/check · Screen a name / address / id against sanctions lists (OFAC SDN, EU, UN consolidated), returning match details. Billable work-action.
r2 = show("risk.ofac.check", infrai("POST", "/v1/risk/ofac/check", {"name":"..."}))

# 3) risk.device.fingerprint — POST /v1/risk/device/fingerprint · Resolve a stable device fingerprint / visitor id from a client-collected token plus IP and user-agent signals, for bot and incognito detection. Served by a vendor (sift / castle).
r3 = show("risk.device.fingerprint", infrai("POST", "/v1/risk/device/fingerprint", {}))

# 4) risk.kyc.status — GET /v1/risk/kyc/status · Fetch the current state (pending / approved / rejected / manual_review) of a previously submitted KYC verification. Sticky_resource: status must be polled on the same vendor that accepted the submission.
r4 = show("risk.kyc.status", infrai("GET", "/v1/risk/kyc/status"))

一次性前置(每个范例都假定已完成):

bash

# No SDK to install — every call is a plain HTTPS request.
# Get a project key by signing in at the console: Google/GitHub gives you
# $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
# POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."

bash

# 1) Auth: every call is a raw HTTPS request to the Infrai gateway carrying
#    only your project key. No SDK, no install.
#    Get your key: sign in with Google/GitHub at the console for a project key
#    + $2 free credit (email sign-in starts at $0). On 402 INSUFFICIENT_CREDIT,
#    POST /v1/account/topup and open the returned checkout_url.
export INFRAI_API_KEY="ifr_pk_proj_..."   # from the console


# 2) risk.score
curl -X POST https://api.infrai.cc/v1/risk/score \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

# 3) risk.ofac.check
curl -X POST https://api.infrai.cc/v1/risk/ofac/check \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "..."}'

# 4) risk.device.fingerprint
curl -X POST https://api.infrai.cc/v1/risk/device/fingerprint \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

# 5) risk.event.report
curl -X POST https://api.infrai.cc/v1/risk/event/report \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"event_type": "..."}'

# 6) risk.kyc.submit
curl -X POST https://api.infrai.cc/v1/risk/kyc/submit \
  -H "Authorization: Bearer $INFRAI_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"subject_id": "..."}'

# 7) risk.kyc.status
curl -X GET https://api.infrai.cc/v1/risk/kyc/status \
  -H "Authorization: Bearer $INFRAI_API_KEY"

python

# 1) Auth: every call is a raw HTTPS request carrying only your project key.
#    No SDK to install — just the `requests` library.
import os, requests

BASE = "https://api.infrai.cc"
HEADERS = {
    "Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}",
    "Content-Type": "application/json",
}


# 2) risk.score
import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/score",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={},
)
resp.raise_for_status()
print(resp.json())

# 3) risk.ofac.check
import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/ofac/check",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'name': '...'},
)
resp.raise_for_status()
print(resp.json())

# 4) risk.device.fingerprint
import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/device/fingerprint",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={},
)
resp.raise_for_status()
print(resp.json())

# 5) risk.event.report
import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/event/report",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'event_type': '...'},
)
resp.raise_for_status()
print(resp.json())

# 6) risk.kyc.submit
import os, requests

resp = requests.post(
    "https://api.infrai.cc/v1/risk/kyc/submit",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
    json={'subject_id': '...'},
)
resp.raise_for_status()
print(resp.json())

# 7) risk.kyc.status
import os, requests

resp = requests.get(
    "https://api.infrai.cc/v1/risk/kyc/status",
    headers={"Authorization": f"Bearer {os.environ['INFRAI_API_KEY']}"},
)
resp.raise_for_status()
print(resp.json())

javascript

// 1) Auth: every call is a raw HTTPS request carrying only your project key.
//    No SDK to install — just the built-in fetch().
const BASE = "https://api.infrai.cc";
const HEADERS = {
  "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
  "Content-Type": "application/json",
};


// 2) risk.score
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/score",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
console.log(await resp.json());

// 3) risk.ofac.check
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/ofac/check",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"name": "..."}),
  },
);
console.log(await resp.json());

// 4) risk.device.fingerprint
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/device/fingerprint",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
console.log(await resp.json());

// 5) risk.event.report
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/event/report",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"event_type": "..."}),
  },
);
console.log(await resp.json());

// 6) risk.kyc.submit
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/submit",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"subject_id": "..."}),
  },
);
console.log(await resp.json());

// 7) risk.kyc.status
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/status",
  {
    method: "GET",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
    },
  },
);
console.log(await resp.json());

typescript

// 1) Auth: every call is a raw HTTPS request carrying only your project key.
//    No SDK to install — just the built-in fetch(), typed.
const BASE = "https://api.infrai.cc";
const HEADERS: Record<string, string> = {
  "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
  "Content-Type": "application/json",
};


// 2) risk.score
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/score",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

// 3) risk.ofac.check
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/ofac/check",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"name": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

// 4) risk.device.fingerprint
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/device/fingerprint",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

// 5) risk.event.report
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/event/report",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"event_type": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

// 6) risk.kyc.submit
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/submit",
  {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({"subject_id": "..."}),
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);

// 7) risk.kyc.status
const resp = await fetch(
  "https://api.infrai.cc/v1/risk/kyc/status",
  {
    method: "GET",
    headers: {
      "Authorization": `Bearer ${process.env.INFRAI_API_KEY}`,
    },
  },
);
if (!resp.ok) throw new Error(`infrai ${resp.status}`);
const data: unknown = await resp.json();
console.log(data);