Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: FFraud Device API
version: 1.0.0
summary: Free, open IP and email fraud intelligence.
description: 'Check any IP or email for fraud, VPN, proxy, Tor, datacenter, and abuse history. Free for everyone, no usage caps. The public endpoints need no API key; a free key adds batch lookups, usage stats, and the community reporting API. The database behind this API is published daily as MIT-licensed open data at https://github.com/FFraud-com .
Drop-in compatibility endpoints let you migrate off AbuseIPDB, IPQualityScore, or ipinfo by changing one URL.'
contact:
name: FFraud
url: https://ffraud.com
email: team@ffraud.com
license:
name: MIT
url: https://github.com/FFraud-com/ip-fraud-database/blob/main/LICENSE
servers:
- url: https://api.ffraud.com
description: Production
security:
- {}
- ApiKeyHeader: []
tags:
- name: Device
description: A stable ID and a risk score for every device on your site.
paths:
/v1/events:
get:
tags:
- Device
summary: Your latest device events
description: The newest device events of your account, newest first.
operationId: deviceEvents
security:
- ApiKeyHeader: []
parameters:
- name: limit
in: query
schema:
type: integer
minimum: 1
maximum: 200
default: 50
responses:
'200':
description: The events.
'401':
$ref: '#/components/responses/Unauthorized'
/v1/events/{id}:
get:
tags:
- Device
summary: One device event
description: 'The verdict for one event: the device, a score from 0 to 100, and its flags. Use your secret key, from your server. The browser gets the event id from the SDK.'
operationId: deviceEvent
security:
- ApiKeyHeader: []
parameters:
- name: id
in: path
required: true
schema:
type: string
responses:
'200':
description: The verdict.
'401':
$ref: '#/components/responses/Unauthorized'
'404':
description: No event with this id for your account.
components:
schemas:
Error:
type: object
properties:
success:
type: boolean
example: false
error_code:
type: integer
example: 1002
error:
type: string
example: INVALID_API_KEY
message:
type: string
example: The API key provided is not valid.
responses:
Unauthorized:
description: Missing or invalid API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
securitySchemes:
ApiKeyHeader:
type: apiKey
in: header
name: X-API-Key
description: Your FFraud API key (ff_live_...). Create one free at https://ffraud.com/register .
AbuseIpdbKey:
type: apiKey
in: header
name: Key
description: Your FFraud API key, sent in AbuseIPDB's `Key` header for the compatibility endpoint.
IpinfoToken:
type: apiKey
in: query
name: token
description: Your FFraud API key, sent as ipinfo's `token` query param.
externalDocs:
description: Full docs
url: https://ffraud.com/docs