Evaluates an email, a phone number and an IP address and returns explained risk signals, with no customer and no stored record. Send at least one of the three.

• Email: syntax, disposable mailbox services and, for a business, the domain itself (exists, mail server, SPF/DMARC, registration age, related to the company name). The domain of an individual is never looked up on the network.
• Phone: valid number for the declared country, virtual, toll-free or premium-rate lines, and a calling code from another country.
• IP address: Tor exit nodes, cloud or hosting networks, and an address block registered to a country other than the declared one. The address is never returned, not even masked.

checks says what happened to each input: evaluated, unavailable (it could not run now) or not_provided. A check that could not run never counts as "nothing found": it holds suggested_decision at review. When none of the inputs sent could be evaluated, the answer is 503 SIGNALS_UNAVAILABLE and the charge is refunded; retry.

suggested_decision is review on any high signal or on any unavailable check, and clear otherwise. No signal approves anything.

A private, loopback or reserved address is 400 INVALID_IP_ADDRESS; the charge is refunded.

Send an Idempotency-Key to retry safely: the same key and body return the same answer and are not charged again.