# Docs

- Documentation: Concepts, guides and resources

  - **Get started**
  - [Introduction](/docs): Stop users from creating extra accounts to claim the same benefit again, with one API call and rules you control.
  - [Quickstart](/docs/quickstart): Protect your first benefit. Evaluate a claim on your server, add browser protection and report the outcome.
  - [How AbuseZero works](/docs/how-it-works): The lifecycle of a claim, from benefit to evaluation, result, outcome and history.
  - [Keys and access](/docs/keys-and-access): Credential types, workspaces and scopes, and which credential to use for each part of your integration.

  - **AI Risk Engine**
  - [AbuseZero AI Risk Engine](/docs/ai-risk-engine): The AI at the heart of AbuseZero, working hand in hand with a proprietary algorithm built on 140,000+ risk signal combinations.

  - **Concepts**
  - [Benefits](/docs/concepts/benefits): The trials, free plans, credits and offers you protect, and the settings that decide who can claim each one.
  - [Evaluations](/docs/concepts/evaluations): One call that decides whether a user should receive a benefit, with a result, a risk assessment and a reason.
  - [Risk Score and signals](/docs/concepts/risk-score-and-signals): How AbuseZero reports what it assessed on each evaluation, from one score down to each signal family and input.
  - [Protection levels](/docs/concepts/protection-levels): Lenient, Balanced and Strict, the policies AbuseZero defines and maintains for you.
  - [Policies and rules](/docs/concepts/policies-and-rules): Build your own policy on top of a protection level, with rules, a risk threshold and a default result.
  - [Outcomes](/docs/concepts/outcomes): What happened after AbuseZero allowed a claim, and how that history protects every claim that follows.
  - [Allow and block lists](/docs/concepts/allow-and-block-lists): Decide specific users, email addresses, domains, IP addresses or devices outright, for one benefit or all of them.
  - [Custom identifiers](/docs/concepts/custom-identifiers): Add identifiers from your own business to AbuseZero's claim history, without ever sending their raw values.
  - [Association graph](/docs/concepts/association-graph): See the earlier claims an evaluation connects to, and which kind of identifier connects them.
  - [Browser protection](/docs/concepts/browser-protection): Bring the browser behind each claim into the evaluation, with device and automation evidence your server can't see on its own.
  - [Bots and AI agents](/docs/concepts/bots-and-ai-agents): Stop scripted claims while letting the AI agents you trust claim benefits for real people.

  - **Guides**
  - [Protect a benefit end to end](/docs/guides/protect-a-benefit): Create a benefit, evaluate every claim, act on the result and record what you granted.
  - [Set up browser protection](/docs/guides/browser-setup): List your sites, load the browser SDK, and send its device token with every evaluation.
  - [Add a bot check](/docs/guides/bot-check): Run AbuseZero's bot check when a person submits a claim, and decide how each benefit treats automation.
  - [Verify AI agents](/docs/guides/verify-ai-agents): Recognize AI agents that act for real people, and choose which ones may claim each benefit.
  - [Send identifiers](/docs/guides/send-identifiers): Send every identifier you have with each evaluation, including payment methods, hashed phone numbers and your own custom identifiers.
  - [Report outcomes](/docs/guides/report-outcomes): Tell AbuseZero what you actually granted, so every later evaluation checks against what really happened.
  - [Test changes safely](/docs/guides/test-changes-safely): Preview single claims, replay a policy change against recent traffic, and observe before you protect.
  - [Import outcome history](/docs/guides/import-claim-history): Bring in benefits you granted before AbuseZero, so protection starts with your full history on day one.
  - [Export and delete data](/docs/guides/export-and-delete-data): Export your evaluations to CSV, and permanently delete one user's claim history.
  - [Handle outages and retries](/docs/guides/outages-and-retries): Choose what your app does if AbuseZero can't be reached, retry safely, and handle skipped evaluations.
  - [Monitor your integration](/docs/guides/monitor-your-integration): Watch results over time, trace requests, check browser protection and review changes to your workspace.
  - [Go-live checklist](/docs/guides/go-live-checklist): Everything to check before real users claim a protected benefit.

  - **Resources**
  - [Troubleshooting](/docs/troubleshooting): Find and fix common integration problems, from authentication to browser data to retries.
  - [Reason codes](/docs/reason-codes): Every reason code an evaluation can return, what it means and what you can do.
  - [Glossary](/docs/glossary): The terms used across AbuseZero, its API and its dashboard.
  - [Developer FAQ](/docs/developer-faq): Answers to developer questions about integrating, testing and debugging AbuseZero: the REST API, Node.js SDK, browser SDK, CLI and MCP server.
- SDKs, CLI & MCP: Node.js SDK, browser SDK, CLI and MCP server

  - **SDKs, CLI and MCP server**
  - [SDKs, CLI and MCP server](/docs/tools): Install the AbuseZero Node.js SDK, browser SDK, CLI and MCP server from one npm package, abusezero.
  - [AbuseZero Node.js SDK](/docs/tools/server-sdk): Use the AbuseZero Node.js SDK, abusezero/server, to evaluate claims, report outcomes and manage your workspace from your server.
  - [AbuseZero browser SDK](/docs/tools/browser-sdk): Use the AbuseZero browser SDK, abusezero/browser, to connect your web pages to browser protection and the bot check.
  - [AbuseZero CLI](/docs/tools/cli): Install the AbuseZero CLI to run every AbuseZero action from a terminal, a script or CI.
  - [AbuseZero MCP server](/docs/tools/mcp): Connect AI apps to your AbuseZero workspace with the AbuseZero MCP server, over the Model Context Protocol.

  - **Reference**
  - [REST API, MCP server and CLI coverage](/docs/tools/coverage): Every AbuseZero action, with its REST API endpoint, MCP server tool and CLI command.
- REST API: AbuseZero REST API reference

  - **Overview**
  - [AbuseZero REST API](/docs/api-reference): Base URL, versioning, authentication and the conventions shared by every AbuseZero REST API endpoint.
  - [REST API authentication](/docs/api-reference/authentication): Authenticate AbuseZero REST API requests: credential types, workspace selection, scopes and permissions.
  - [REST API errors](/docs/api-reference/errors): The AbuseZero REST API error envelope, error types and every error code.

  - **Evaluations**
  - [Evaluations](/docs/api-reference/evaluations): Evaluate a benefit claim, and read past evaluations, their evidence and their association graphs.
  - [Previews, simulations and replays](/docs/api-reference/previews-simulations-replays): Try a request or a policy change against the real evaluation engine before it reaches your users.
  - [Outcomes](/docs/api-reference/outcomes): Report whether an allowed claim was granted, and read the outcome of every claim.

  - **Configuration**
  - [Benefits](/docs/api-reference/benefits): Create and manage the benefits AbuseZero protects, and how each one is evaluated.
  - [Policies](/docs/api-reference/policies): Protection levels, custom policies, rule format, versions and the conditions available to your rules.
  - [Allow and block lists](/docs/api-reference/access-lists): Add, read and remove allow and block list entries for emails, domains, networks, users and devices.
  - [Custom identifiers](/docs/api-reference/custom-identifiers): Register, read and remove the identifiers of your own that AbuseZero checks on every evaluation.

  - **Data**
  - [Imports](/docs/api-reference/imports): Bring benefits you granted before AbuseZero into your claim history, as JSON or as a validated CSV upload.
  - [Exports](/docs/api-reference/exports): Export your workspace's evaluations as a CSV file, with or without their signal assessments.
  - [Data deletions](/docs/api-reference/data-deletions): Preview and permanently delete one user's claim history, then follow the deletion to completion.

  - **Monitoring**
  - [Analytics](/docs/api-reference/analytics): Read daily allow and deny counts for your workspace's evaluations.
  - [Request logs](/docs/api-reference/request-logs): Read the record of evaluation requests your workspace made, including failed ones.
  - [Audit logs](/docs/api-reference/audit-logs): Read the record of changes made in your workspace.

  - **Browser and agents**
  - [Browser setup](/docs/api-reference/browser-collection): Manage the sites allowed to send browser data, and read browser protection coverage and issues.
  - [Agents](/docs/api-reference/agents): List the AI agents AbuseZero recognizes, to choose which ones may claim each benefit.

  - **Workspaces**
  - [Workspaces](/docs/api-reference/workspaces): List the workspaces a credential can reach, and choose one for OAuth requests.