coss.comdocs

Retrieve the risk settings

GET
/v1/risk/settings

The API key's environment's decision thresholds, disabled reasons and captcha provider (never its secret).

Authorization

bearerAuth
headerAuthorizationBearer <token>

A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.

Header Parameters

Coss-Version?"2026-10-10"

The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.

Value in"2026-10-10"

Response Body

The settings.

application/json
  1. response
object*"risk_settings"
Value in"risk_settings"
review_threshold*number

Scores at or above it are review.

block_threshold*number

Scores at or above it are block.

disabled_reasons*array<>

Reasons that never fire in this environment (they don't count in the score).

captcha*|

The captcha provider assessments verify tokens with (never the secret).

updated_at*|

null while on the defaults.

Formatdate-time
import { Coss } from "coss";const coss = new Coss({  apiKey: process.env.COSS_API_KEY,  baseUrl: "https://api.coss.com",});const { data, error } = await coss.risk.settings.get();
{  "object": "risk_settings",  "review_threshold": 0.5,  "block_threshold": 0.85,  "disabled_reasons": [    "email.role_account"  ],  "captcha": {    "provider": "turnstile",    "required": true  },  "updated_at": "2026-01-15T09:30:00.000Z"}