API Reference
Billing
Domains
Emails
Hooks applications
Hooks endpoints
Hooks event types
Hooks messages
Hooks portal
Log drains
Receiving
Risk
Suppressions
Tracking
Webhook endpoints
List allow and block list entries
GET
/v1/risk/list_entries
The environment's list entries, newest first. Pass the last id as after to get the next page while has_more is true.
bearerAuthheader
AuthorizationBearer <token>A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.
list?stringValue in
"allow""block"type?stringemail (matched by mailbox, dots and +tags folded), domain (subdomains included), ip (an address or CIDR range), asn, country (ISO 3166-1 alpha-2), user (your user id).
Value in
"email""domain""ip""asn""country""user"limit?integer1-100, default 50.
Range
1 <= value <= 100after?stringCursor: the id of the last entry of the previous page.
Coss-Version?"2026-10-10"The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.
Value in
"2026-10-10"A page of entries.
application/json- response
- response
- …
object*"list"Value in
"list"data*array<>has_more*booleanimport { Coss } from "coss";const coss = new Coss({ apiKey: process.env.COSS_API_KEY, baseUrl: "https://api.coss.com",});const { data, error } = await coss.risk.lists.list();{ "object": "list", "data": [ { "object": "risk_list_entry", "id": "rskle_01k7c8m4q2f3e9v6t5r1n0p8yz", "list": "block", "type": "domain", "value": "evil.example", "note": "Card testing", "expires_at": null, "created_at": "2026-01-15T09:30:00.000Z" } ], "has_more": false}