allow, review, or block.
Make your first check
Create a test key and call
POST /v1/check.Understand decisions
Learn how risk levels, actions, reasons, and policy versions fit together.
The integration point
Call SignupBear from your backend immediately before account creation. Treatrecommended_action as the stable policy output and keep request_id for
support and audit trails.
Never put a SignupBear API key in browser code. Your signup endpoint should call
SignupBear from a trusted server environment.
Private beta scope
The current policy evaluates disposable email domains, subaddressing when enabled, and your custom email or domain blocklist. IP input is accepted but is reported as unavailable during private beta.Private beta behavior
Use deterministic test addresses before sending production signup traffic.