curl --request POST \
--url https://api.sandbox.verisoul.ai/session/authenticate \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"account": {
"id": "<string>",
"email": "<string>",
"metadata": {},
"group": "<string>",
"lists": [
"<string>"
]
},
"session_id": "<string>"
}
'{
"project_id": "00000000-0000-0000-0000-000000000001",
"session_id": "7fd9d3e5-a5d3-4e47-9c2a-69fd8f0e0bd7",
"account_id": "john-doe",
"request_id": "055ce1fc-0219-4909-9cb4-091be9d374d6",
"decision": "Real",
"account_score": 0.17,
"bot": 0,
"multiple_accounts": 0,
"risk_signals": 0.17,
"accounts_linked": 0,
"lists": [
"us_users"
],
"session": {
"start_time": "2025-06-10T16:35:22.184Z",
"true_country_code": "US",
"network": {
"ip_address": "107.209.253.92",
"service_provider": "AT&T Internet",
"connection_type": "isp"
},
"location": {
"continent": "NA",
"country_code": "US",
"state": "Texas",
"city": "Austin",
"zip_code": "78729",
"timezone": "America/Chicago",
"latitude": 30.3773,
"longitude": -97.71
},
"browser": {
"type": "Chrome",
"version": "137.0.0.0",
"language": "en-US",
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
"timezone": "America/Chicago"
},
"device": {
"category": "desktop",
"type": "Mac",
"os": "macOS 10.15.7",
"cpu_cores": 16,
"memory": 8,
"gpu": "ANGLE (Apple, ANGLE Metal Renderer: Apple M4 Max, Unspecified Version)",
"screen_height": 1329,
"screen_width": 2056
},
"bot": {
"mouse_num_events": 0,
"click_num_events": 0,
"keyboard_num_events": 0,
"touch_num_events": 0,
"clipboard_num_events": 0
},
"risk_signals": {
"device_risk": false,
"proxy": false,
"vpn": false,
"tor": false,
"spoofed_ip": false,
"datacenter": false,
"recent_fraud_ip": false,
"impossible_travel": false,
"device_network_mismatch": false
},
"risk_signal_scores": {
"device_risk": 0.1431,
"proxy": 0,
"vpn": 0,
"tor": 0,
"datacenter": 0,
"recent_fraud_ip": 0,
"impossible_travel": 0,
"device_network_mismatch": 0.0001
}
},
"account": {
"account": {
"id": "john-doe",
"email": "johndoe.example@gmail.com",
"metadata": {},
"group": ""
},
"num_sessions": 3,
"first_seen": "2025-06-10T16:35:22.184Z",
"last_seen": "2025-06-10T16:35:52.018Z",
"last_session": "7fd9d3e5-a5d3-4e47-9c2a-69fd8f0e0bd7",
"country": "US",
"countries": [
"US"
],
"unique_devices": {
"1_day": 1,
"7_day": 1
},
"unique_networks": {
"1_day": 1,
"7_day": 1
},
"email": {
"email": "johndoe.example@gmail.com",
"disposable": false,
"personal": true,
"valid": true,
"domain_type": "personal",
"email_score": 0,
"trust_signals": [
"email_age_greater_than_5_years",
"email_known_online_history"
],
"risk_signals": [
"email_alias"
],
"num_account_from_domain": 156
},
"risk_signal_average": {
"device_risk": 0.2266,
"proxy": 0,
"vpn": 0,
"tor": 0,
"spoofed_ip": 0,
"datacenter": 0,
"recent_fraud_ip": 0,
"impossible_travel": 0,
"device_network_mismatch": 0.0001
}
}
}Authenticates a session with an account
curl --request POST \
--url https://api.sandbox.verisoul.ai/session/authenticate \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"account": {
"id": "<string>",
"email": "<string>",
"metadata": {},
"group": "<string>",
"lists": [
"<string>"
]
},
"session_id": "<string>"
}
'{
"project_id": "00000000-0000-0000-0000-000000000001",
"session_id": "7fd9d3e5-a5d3-4e47-9c2a-69fd8f0e0bd7",
"account_id": "john-doe",
"request_id": "055ce1fc-0219-4909-9cb4-091be9d374d6",
"decision": "Real",
"account_score": 0.17,
"bot": 0,
"multiple_accounts": 0,
"risk_signals": 0.17,
"accounts_linked": 0,
"lists": [
"us_users"
],
"session": {
"start_time": "2025-06-10T16:35:22.184Z",
"true_country_code": "US",
"network": {
"ip_address": "107.209.253.92",
"service_provider": "AT&T Internet",
"connection_type": "isp"
},
"location": {
"continent": "NA",
"country_code": "US",
"state": "Texas",
"city": "Austin",
"zip_code": "78729",
"timezone": "America/Chicago",
"latitude": 30.3773,
"longitude": -97.71
},
"browser": {
"type": "Chrome",
"version": "137.0.0.0",
"language": "en-US",
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
"timezone": "America/Chicago"
},
"device": {
"category": "desktop",
"type": "Mac",
"os": "macOS 10.15.7",
"cpu_cores": 16,
"memory": 8,
"gpu": "ANGLE (Apple, ANGLE Metal Renderer: Apple M4 Max, Unspecified Version)",
"screen_height": 1329,
"screen_width": 2056
},
"bot": {
"mouse_num_events": 0,
"click_num_events": 0,
"keyboard_num_events": 0,
"touch_num_events": 0,
"clipboard_num_events": 0
},
"risk_signals": {
"device_risk": false,
"proxy": false,
"vpn": false,
"tor": false,
"spoofed_ip": false,
"datacenter": false,
"recent_fraud_ip": false,
"impossible_travel": false,
"device_network_mismatch": false
},
"risk_signal_scores": {
"device_risk": 0.1431,
"proxy": 0,
"vpn": 0,
"tor": 0,
"datacenter": 0,
"recent_fraud_ip": 0,
"impossible_travel": 0,
"device_network_mismatch": 0.0001
}
},
"account": {
"account": {
"id": "john-doe",
"email": "johndoe.example@gmail.com",
"metadata": {},
"group": ""
},
"num_sessions": 3,
"first_seen": "2025-06-10T16:35:22.184Z",
"last_seen": "2025-06-10T16:35:52.018Z",
"last_session": "7fd9d3e5-a5d3-4e47-9c2a-69fd8f0e0bd7",
"country": "US",
"countries": [
"US"
],
"unique_devices": {
"1_day": 1,
"7_day": 1
},
"unique_networks": {
"1_day": 1,
"7_day": 1
},
"email": {
"email": "johndoe.example@gmail.com",
"disposable": false,
"personal": true,
"valid": true,
"domain_type": "personal",
"email_score": 0,
"trust_signals": [
"email_age_greater_than_5_years",
"email_known_online_history"
],
"risk_signals": [
"email_alias"
],
"num_account_from_domain": 156
},
"risk_signal_average": {
"device_risk": 0.2266,
"proxy": 0,
"vpn": 0,
"tor": 0,
"spoofed_ip": 0,
"datacenter": 0,
"recent_fraud_ip": 0,
"impossible_travel": 0,
"device_network_mismatch": 0.0001
}
}
}Whether to include linked accounts in the response
Session authentication information
The account to authenticate. See Account Object for more information.
Show child attributes
The account identifier
The email associated with the account
Additional metadata about the account
Groups must be enabled for the project to use this field. See Multi Accounting Groups for more information.
The ID of the session to authenticate
Session authentication response
The ID of the project
The ID of the session
The ID of the account
The ID of the request
Decision about the authenticity (Real/Fake)
Overall account risk score
Bot detection score
Multiple accounts detection score
Risk signals score
Number of accounts linked to this account
Lists the account belongs to
Show child attributes
Timestamp when the session started
The true country code of the session
Show child attributes
Continent code
Country code
State or region
City name
Postal/ZIP code
Timezone of the location
Latitude coordinate
Longitude coordinate
Show child attributes
Device category (desktop, mobile, etc.)
Device type
Operating system
Number of CPU cores
Amount of memory in GB
GPU information
Screen height in pixels
Screen width in pixels
Show child attributes
Number of mouse events
Number of click events
Number of keyboard events
Number of touch events
Number of clipboard events
Show child attributes
Device risk flag
Proxy usage flag
VPN usage flag
Tor usage flag
Spoofed IP flag
Datacenter IP flag
Recent fraud IP flag
Impossible travel flag
Device network mismatch flag
Show child attributes
Device risk score
Proxy detection score
VPN detection score
Tor detection score
Datacenter detection score
Recent fraud IP detection score
Impossible travel detection score
Device network mismatch score
Show child attributes
Number of sessions associated with this account
Timestamp when the account was first seen
Timestamp when the account was last seen
ID of the last session
Country code of the account
List of countries associated with this account
Show child attributes
Email address
Whether the email is disposable
Whether the email is personal
Whether the email is valid
The type of domain. See Domain Types for details.
relay, personal, disposable, business, government, education, impersonation, invalid, not_active Email risk score from -1 (most trustworthy) to 1 (most risky)
Array of trust signals detected for this email. See Trust Flags for descriptions.
Array of risk signals detected for this email. See Risk Flags for descriptions.
Number of accounts from the same apex domain seen in your project. Capped at 1000. See Domain Account Velocity for details.
Show child attributes
Device risk score
Proxy detection score
VPN detection score
Tor detection score
Spoofed IP detection score
Datacenter detection score
Recent fraud IP detection score
Impossible travel detection score
Device network mismatch score
List of accounts linked to the authenticated account (only included when accounts_linked=true)
Show child attributes
The ID of the linked account
Confidence score of the link between accounts
Email associated with the linked account
Types of matches that linked these accounts
Lists the linked account belongs to
Additional metadata about the linked account