- Check an email address POST
- Check an IP address POST
- Check a rate limit POST
- Classify content POST
- Assess an event POST
- Report an assessment's outcome POST
- Create a rate limit bucket POST
- Add an allow or block list entry POST
- Create a rule POST
- Delete a rate limit bucket DELETE
- Remove a list entry DELETE
- Delete a rule DELETE
- Forget a user DELETE
- Retrieve an assessment GET
- Retrieve the calibration GET
- Retrieve a rate limit bucket GET
- Retrieve a list entry GET
- Retrieve a rule GET
- Retrieve the risk settings GET
- List assessments GET
- List rate limit buckets GET
- List allow and block list entries GET
- List rules GET
- Update a rate limit bucket PATCH
- Update a rule PATCH
- Update the risk settings PATCH
Check an IP address
IP intelligence on its own: Tor exit nodes, cloud and hosting networks, networks mostly used by VPN and proxy services, the network (ASN) and its country. Stateless. Missing IP data is reported in degraded. Sandbox keys see the documentation addresses (192.0.2.1 Tor, .2 cloud, .3 VPN, the rest residential).
bearerAuthAuthorizationBearer <token>A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.
Coss-Version?"2026-10-10"The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.
"2026-10-10"application/json- body
- body
- …
ip*|The address to check.
What COSS knows about the address.
application/json- response
- response
- …
version*|private*booleantor*booleanhosting*booleanhosting_provider*string|nullhosting_kind*|"cloud""hosting""vpn"nullasn*integer|nullas_name*string|nullcountry*|ISO 3166-1 alpha-2.
privacy*|From COSS's IP privacy data provider (VPNs, proxies, relays). null when it isn't available or was not asked (private addresses).
object*"risk_ip_check""risk_ip_check"ip*stringdegraded*array<>ip_data when some IP data (Tor exits, cloud ranges, networks and countries) is unavailable at the moment; ip_privacy when the privacy data provider failed or timed out.
import { Coss } from "coss";const coss = new Coss({ apiKey: process.env.COSS_API_KEY, baseUrl: "https://api.coss.com",});const { data, error } = await coss.risk.checkIp("185.220.101.1");{ "object": "risk_ip_check", "ip": "185.220.101.1", "version": 4, "private": false, "tor": true, "hosting": false, "hosting_provider": null, "hosting_kind": null, "asn": 60729, "as_name": "Stiftung Erneuerbare Freiheit", "country": "DE", "privacy": null, "degraded": []}