Look up on-device address hashes against the caller's organization known-address list. The caller sends one hash per match granularity (exact / building / street, computed on-device); the endpoint returns the finest matched level's entry — its identifier, entry_type (fraud/employee), and matched level — and 404 on a miss. The raw address never leaves the browser; only the hashes are sent. Gated by the activity-tracking flag and scoped to the caller's organization; enablement is driven by the org's activity policy (security.addressFraudRules).
Query parameters
UUID of the organization whose known-address list to look up.
On-device HMAC-SHA256 hashes of the normalized entered address, one per match granularity (exact / building / street), each 64-char hex. Repeated (?hash=a&hash=b); the endpoint returns the finest matched level. The raw address is never sent.
Changes
No recorded changes to this endpoint across all 1 revision of this API.