find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/layercall-com:layercall-com-rules-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: LayerCall Rules API
  version: 1.0.0
  summary: Trust and risk intelligence for IPs, emails, phones, domains and devices.
  description: 'Score any IP address, email, phone number, domain or device — or a whole signup in one call — and get back a 0–100 risk score plus an allow / review / block verdict.


    Authenticate with an API key from https://www.layercall.com/get-key. Free tier: 1,000 lookups per month, no card required. Test-mode keys are never billed.


    Every endpoint accepts an optional `strictness` parameter (`lenient`, `balanced`, `strict`) that shifts the verdict thresholds without changing the underlying signals.'
  termsOfService: https://www.layercall.com/terms
  contact:
    name: LayerCall Support
    email: support@layercall.com
    url: https://www.layercall.com/contact
  license:
    name: Proprietary
    url: https://www.layercall.com/terms
  x-logo:
    url: https://www.layercall.com/logo-icon.png
    altText: LayerCall
servers:
- url: https://www.layercall.com
  description: Production
security:
- ApiKeyAuth: []
- BearerAuth: []
tags:
- name: Rules
paths:
  /v1/rules:
    get:
      tags:
      - Rules
      summary: List your allow/block rules
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  count:
                    type: integer
                    example: 1
                  processing_time_sec:
                    type: number
                    example: 0.183
                  request_id:
                    type: string
                    example: req_f0beb003-675e-46b1-aae9-9ee1a02bd2c6
                  rules:
                    type: array
                    items:
                      type: object
                      properties:
                        action:
                          type: string
                          example: block
                        created_at:
                          type: string
                          example: '2026-08-06T23:43:32.323+00:00'
                        id:
                          type: string
                          example: 11111111-2222-3333-4444-555555555555
                        kind:
                          type: string
                          example: domain
                        value:
                          type: string
                          example: mailinator.com
              example:
                count: 1
                processing_time_sec: 0.183
                request_id: req_f0beb003-675e-46b1-aae9-9ee1a02bd2c6
                rules:
                - action: block
                  created_at: '2026-08-06T23:43:32.323+00:00'
                  id: 11111111-2222-3333-4444-555555555555
                  kind: domain
                  value: mailinator.com
          headers:
            x-ratelimit-limit:
              description: Requests allowed per minute (600).
              schema:
                type: integer
            x-ratelimit-remaining:
              description: Requests left in the current minute.
              schema:
                type: integer
      operationId: getV1Rules
      x-operation-id-source: derived
    post:
      tags:
      - Rules
      summary: Create a rule
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  added:
                    type: integer
                    example: 1
                  rules:
                    type: array
                    items:
                      type: object
                      properties:
                        action:
                          type: string
                          example: block
                        created_at:
                          type: string
                          example: '2026-08-06T23:43:32.323+00:00'
                        id:
                          type: string
                          example: 11111111-2222-3333-4444-555555555555
                        kind:
                          type: string
                          example: domain
                        value:
                          type: string
                          example: mailinator.com
                  skipped:
                    type: array
              example:
                added: 1
                rules:
                - action: block
                  created_at: '2026-08-06T23:43:32.323+00:00'
                  id: 11111111-2222-3333-4444-555555555555
                  kind: domain
                  value: mailinator.com
                skipped: []
          headers:
            x-ratelimit-limit:
              description: Requests allowed per minute (600).
              schema:
                type: integer
            x-ratelimit-remaining:
              description: Requests left in the current minute.
              schema:
                type: integer
      operationId: postV1Rules
      x-operation-id-source: derived
    delete:
      tags:
      - Rules
      summary: Delete every rule
      description: Requires ?confirm=true.
      parameters:
      - name: confirm
        in: query
        required: true
        schema:
          type: boolean
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  deleted:
                    type: integer
                    example: 11
              example:
                deleted: 11
          headers:
            x-ratelimit-limit:
              description: Requests allowed per minute (600).
              schema:
                type: integer
            x-ratelimit-remaining:
              description: Requests left in the current minute.
              schema:
                type: integer
      operationId: deleteV1Rules
      x-operation-id-source: derived
  /v1/rules/{id}:
    delete:
      tags:
      - Rules
      summary: Delete one rule
      description: Removes a single allow/block rule by id. The coarse operation — DELETE /v1/rules?confirm=true, which removes EVERY rule — was in this spec and this precise one was not, so a generated client got clearRules and no deleteRule. Returns 404 when the id is a well-formed uuid that belongs to no rule on your account, and 400 when it is not a uuid at all.
      parameters:
      - name: id
        in: path
        required: true
        description: The rule id, as returned by GET /v1/rules.
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: The rule was deleted.
          content:
            application/json:
              schema:
                type: object
                properties:
                  deleted:
                    type: boolean
                    example: true
                  id:
                    type: string
                    format: uuid
                  request_id:
                    type: string
                    example: req_8f2c1e90
              example:
                deleted: true
                id: 11111111-2222-3333-4444-555555555555
                request_id: req_8f2c1e90
          headers:
            x-ratelimit-limit:
              description: Requests allowed per minute (600).
              schema:
                type: integer
            x-ratelimit-remaining:
              description: Requests left in the current minute.
              schema:
                type: integer
        '400':
          description: The id is not a uuid.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No rule with that id on this account.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      operationId: deleteV1RulesById
      x-operation-id-source: derived
  /v1/rules/import:
    post:
      tags:
      - Rules
      summary: Bulk-import rules
      description: Up to 10,000 rules in one request.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  action:
                    type: string
                    example: merge
                  by_kind:
                    type: object
                    properties:
                      domain:
                        type: integer
                        example: 3
                  duplicates:
                    type: integer
                    example: 0
                  duplicates_in_file:
                    type: integer
                    example: 0
                  imported:
                    type: integer
                    example: 3
                  skipped:
                    type: array
              example:
                action: merge
                by_kind:
                  domain: 3
                duplicates: 0
                duplicates_in_file: 0
                imported: 3
                skipped: []
          headers:
            x-ratelimit-limit:
              description: Requests allowed per minute (600).
              schema:
                type: integer
            x-ratelimit-remaining:
              description: Requests left in the current minute.
              schema:
                type: integer
        '400':
          description: Invalid input
        '402':
          description: Quota exceeded, or account paused after a failed payment
        '403':
          description: Invalid or revoked API key
        '429':
          description: Rate limited — honour Retry-After
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - rules
              properties:
                rules:
                  type: array
                  items:
                    type: object
      operationId: postV1RulesImport
      x-operation-id-source: derived
components:
  schemas:
    Error:
      type: object
      required:
      - error
      properties:
        error:
          type: string
          description: Human-readable message, safe to log.
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: Your API key from https://www.layercall.com/get-key
    BearerAuth:
      type: http
      scheme: bearer
      description: 'Same key, sent as `Authorization: Bearer <key>`.'
externalDocs:
  description: Guides and examples
  url: https://www.layercall.com/docs