Skip to main content
Explore the details of the Stytch Fraud and Risk Prevention API. Our Fraud and Risk Prevention API is organized around REST principles: it has resource-oriented URLs, returns JSON-encoded responses, and uses standard HTTP response codes, authentication, and verbs. All Fraud API resources are scoped to the Project of the API keys you provide.

​
API keys

The Stytch API uses basic authentication with your project_id and secret from the API Keys section in the Dashboard. You’ll need to pass these values into the Authorization request header for every Stytch API call.

​
Environments

For every Stytch project, there are multiple TEST environments and a single LIVE environment. For Device Fingerprinting calls, you must provide the project_id and secret of the project and environment of your preference.