Introduction
Stop users from creating extra accounts to claim the same benefit again, with one API call and rules you control.
AbuseZero is an abuse prevention API for SaaS. It stops people from creating extra accounts to claim your trials, free plans, credits and other benefits again and again.
Before you grant a benefit, your server sends AbuseZero the claim through the AbuseZero REST API or the AbuseZero Node.js SDK. AbuseZero returns one final result, allow or deny, with the AbuseZero Risk Score and a reason you can show your team.
How an evaluation works
Your server makes one request. Behind it, on every evaluation, AbuseZero:
- checks every identifier you send against your workspace's full claim history;
- runs the claim through the AbuseZero AI Risk Engine;
- assesses five signal families: identity, device, network, automation and benefit history;
- tells legitimate AI agents apart from automation that hides what it is (see Bots and AI agents);
- applies your protection level, custom rules and allow and block lists;
- records the decision with the exact policy version it ran under, so you can explain it later.
All of it finishes within the evaluation's time limit. When a source of evidence is slow, the evaluation doesn't wait for it. It returns on time and tells you which inputs it received.
Benefits you can protect
One model for every benefit
Free and discounted trials, including paid introductory offers. Free plans, where extra accounts would multiply the free allowance. Sign-up credits, API credits, AI credits and free generations. Promotional offers and any other limited benefit you choose to protect. Every benefit uses the same evaluation, matching, eligibility and outcome model.
Your application keeps doing what it already does: authentication, payment, delivering the benefit and enforcing usage limits. After you grant a benefit, you can report the outcome. AbuseZero answers one question at the moment of the claim: should this claim receive the benefit?
Get started
Quickstart
Protect your first benefit: evaluate a claim, add browser protection and report the outcome.
How AbuseZero works
The lifecycle of a claim, from benefit to evaluation to outcome and history.
AbuseZero AI Risk Engine
AI and a proprietary algorithm built on 140,000+ risk signal combinations.
Evaluations
What goes into an evaluation and everything that comes back.
Protect a benefit end to end
A complete, production-ready integration, step by step.
SDKs, CLI and MCP server
The abusezero package: Node.js SDK, browser SDK, AbuseZero CLI and MCP server.
AbuseZero REST API
Every endpoint, field, sample and error.
Markdown and llms.txt
Every page is available as Markdown. Add .md to any documentation address, or use the Markdown option at the top of each page. The complete documentation is also available at /llms.txt and /llms-full.txt.
AI apps that support MCP can work with your workspace directly through the AbuseZero MCP server. For terminals and CI, use the AbuseZero CLI. Common integration questions are answered in the Developer FAQ.
How is this guide?
Last updated on