- Assess an event POST
- Report an assessment's outcome POST
- Add an allow or block list entry POST
- Create a rule POST
- Remove a list entry DELETE
- Delete a rule DELETE
- Forget a user DELETE
- Retrieve an assessment GET
- Retrieve a list entry GET
- Retrieve a rule GET
- Retrieve the risk settings GET
- List assessments GET
- List allow and block list entries GET
- List rules GET
- Update a rule PATCH
- Update the risk settings PATCH
Update the risk settings
Changes the fields given. review_threshold must not exceed block_threshold. Disabled reasons never fire (rules still see the facts behind them). Setting a captcha provider makes assessments verify their captcha.token with it; required adds captcha.missing to assessments without one.
bearerAuthAuthorizationBearer <token>A secret API key from the dashboard: coss_live_… for production environments, coss_test_… for sandbox environments.
Coss-Version?"2026-10-10"The API version (a date) to use for this request. Defaults to your organization's version, pinned to the latest one when it first used the API and upgraded from the dashboard. The SDK always sends the version it was built for.
"2026-10-10"application/json- body
- body
- …
review_threshold?number0 < value <= 1block_threshold?number0 < value <= 1disabled_reasons?array<>items <= 100captcha?|null turns captcha verification off and deletes the secret.
The settings, updated.
application/json- response
- response
- …
object*"risk_settings""risk_settings"review_threshold*numberScores at or above it are review.
block_threshold*numberScores at or above it are block.
disabled_reasons*array<>Reasons that never fire in this environment (they don't count in the score).
captcha*|The captcha provider assessments verify tokens with (never the secret).
updated_at*|null while on the defaults.
date-timeimport { Coss } from "coss";const coss = new Coss({ apiKey: process.env.COSS_API_KEY, baseUrl: "https://api.coss.com",});const { data, error } = await coss.risk.settings.update({ block_threshold: 0.9, captcha: { provider: "turnstile", secret: "0x4AAA…", required: true, },});{ "object": "risk_settings", "review_threshold": 0.5, "block_threshold": 0.85, "disabled_reasons": [ "email.role_account" ], "captcha": { "provider": "turnstile", "required": true }, "updated_at": "2026-01-15T09:30:00.000Z"}