You're up and running in under 5 minutes.

Sign up for a free account and grab your API key from the dashboard. No credit card required.

Send your clientId and apiKey. Get back a JWT token. Done.

POST /api/auth/token

{
  "clientId": "your-client-id",
  "apiKey":   "your-api-key"
}

// Response
{
  "accessToken": "eyJhbGci..."
}

That's it. The engine takes it from here.

POST /api/events
Authorization: Bearer <token>

{
  "type":     "LoginFailed",
  "entityId": "user-123",
  "payload":  { "ip": "1.2.3.4" }
}

Four endpoints. Full picture of what the engine decided and why.

GET /api/risk/:entityId
// Current risk score (0–100)

GET /api/state/:entityId
// Entity state: Normal, Suspicious, Alert, Critical, Blocked

GET /api/decision/:entityId
// Automated decision: Allow, Throttle, Challenge, Block

GET /api/audit/:entityId
// Full forensic trail