API Reference
Billing
Domains
Emails
Hooks applications
Hooks endpoints
Hooks event types
Hooks messages
Hooks portal
Log drains
Receiving
Risk
- Assess an event POST
- Report an assessment's outcome POST
- Add an allow or block list entry POST
- Create a rule POST
- Remove a list entry DELETE
- Delete a rule DELETE
- Forget a user DELETE
- Retrieve an assessment GET
- Retrieve a list entry GET
- Retrieve a rule GET
- Retrieve the risk settings GET
- List assessments GET
- List allow and block list entries GET
- List rules GET
- Update a rule PATCH
- Update the risk settings PATCH
Suppressions
Tracking
Webhook endpoints
List rules
GET
/v1/risk/rules
Every rule of the API key's environment, in evaluation order.
bearerAuthheader
AuthorizationBearer <token>A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.
Coss-Version?"2026-10-10"The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.
Value in
"2026-10-10"The rules.
application/json- response
- response
- …
Every rule of the environment (at most 50), in evaluation order.
object*"list"Value in
"list"data*array<>has_more*falseValue in
falseimport { Coss } from "coss";const coss = new Coss({ apiKey: process.env.COSS_API_KEY, baseUrl: "https://api.coss.com",});const { data, error } = await coss.risk.rules.list();{ "object": "list", "data": [ { "object": "risk_rule", "id": "rskrule_01k7c8m4q2f3e9v6t5r1n0p8yz", "name": "Disposable email from a data center", "enabled": true, "position": 0, "events": [ "signup" ], "match": "all", "conditions": [ { "field": "email.disposable", "operator": "is", "value": true }, { "field": "ip.hosting", "operator": "is", "value": true } ], "action": "block", "created_at": "2026-01-15T09:30:00.000Z", "updated_at": "2026-01-15T09:30:00.000Z" } ], "has_more": false}