IPQualityScore API

{
  "service_type": "platform",
  "base_url": "https://ipqualityscore.com",
  "auth_method": "api_key",
  "auth_config": {
    "parameter_name": "key",
    "location": "query_string",
    "notes": "API key is passed as a query parameter named 'key' in all requests. Keys are obtained by signing up for an account and are used to authenticate and identify the requesting user for usage tracking and quota enforcement."
  },
  "endpoints": [
    "https://ipqualityscore.com/api/json/ip/{API_KEY}/{IP_ADDRESS}",
    "https://ipqualityscore.com/api/json/url/{API_KEY}/{URL}",
    "https://ipqualityscore.com/api/json/email/{API_KEY}/{EMAIL}",
    "https://ipqualityscore.com/api/json/phone/{API_KEY}/{PHONE_NUMBER}",
    "https://ipqualityscore.com/api/json/device/{API_KEY}/{DEVICE_ID}"
  ],
  "pricing_model": {
    "type": "freemium",
    "details": {
      "free_tier": {
        "description": "Free plan offers limited API requests per month (historically 5,000 lookups/month) with basic fraud detection features. Requires account signup.",
        "limitations": [
          "Limited monthly API quota",
          "May lack advanced features like full proxy/VPN detection or chargeback scoring",
          "No SLA or priority support"
        ]
      },
      "paid_tiers": {
        "description": "Subscription plans scale monthly request volumes and unlock additional features, higher rate limits, and support. Enterprise plans offer custom quotas, SLAs, and dedicated support.",
        "billing": "Monthly subscription with volume-based tiers. Annual billing discounts may be available.",
        "features_by_tier": [
          "IP Reputation & Fraud Score",
          "Proxy, VPN, Tor, and bot detection",
          "Email validation (deliverability, spam traps, disposable domains)",
          "URL scanning and malware/phishing detection",
          "Phone number validation and carrier lookup",
          "Device fingerprinting and fraud scoring",
          "Chargeback and transaction fraud scoring"
        ]
      }
    }
  },
  "rate_limits": {
    "notes": "Rate limits vary by plan. Free tier typically allows a limited number of requests per second (e.g., 1-5 req/sec) and a monthly quota. Paid plans offer significantly higher throughput. Exact limits are documented in the account dashboard.",
    "details": {
      "free_tier_rps": "~1-5 requests per second",
      "paid_tier_rps": "Tier-dependent, up to hundreds of requests per second",
      "monthly_quota": "Based on subscription plan; overages may be billed or blocked"
    }
  },
  "capabilities": [
    "IP address reputation and fraud scoring",
    "Proxy, VPN, Tor, and residential proxy detection",
    "Bot and crawler detection",
    "Email address validation and deliverability checking",
    "Disposable email and spam trap detection",
    "URL scanning for malware, phishing, and suspicious content",
    "Phone number validation and carrier/line type lookup",
    "Device fingerprinting and fraud analysis",
    "Chargeback and transaction fraud risk scoring",
    "User activity and abuse prevention monitoring",
    "Real-time API access with JSON responses",
    "Batch processing capabilities (plan-dependent)",
    "Detailed risk scores and reason codes",
    "Integration with fraud prevention workflows"
  ],
  "raw_analysis": "IPQualityScore (IPQS) is a well-established API-first platform specializing in fraud prevention, risk scoring, and digital identity validation. The service provides a RESTful JSON API for assessing the risk of IP addresses, URLs, email addresses, phone numbers, and devices. It is widely used by e-commerce, ad tech, cybersecurity, and fintech companies to prevent fraud, block bots, validate user data, and reduce chargebacks.\n\nMaturity: IPQS has been operating for over a decade and is considered a mature, reliable provider in the fraud detection space. It maintains a large, frequently updated threat intelligence database and offers consistent API performance.\n\nIntegration: The API is straightforward to integrate, using a simple API key passed as a query parameter. Responses are JSON, making parsing easy across languages. SDKs and code examples are available for common languages (PHP, Python, JavaScript, etc.). The platform also supports webhooks and batch processing on higher-tier plans.\n\nTarget Users: The primary audience includes developers, fraud analysts, and product teams at companies needing to screen user activity, registrations, transactions, and content. It is suitable for both small startups and large enterprises, with scalable pricing.\n\nStrengths: High accuracy, broad coverage of use cases (IP, email, URL, phone, device), real-time response, and a generous free tier for testing. The API is simple and well-documented.\n\nLimitations: Rate limits and quotas are plan-dependent and can become costly at scale. Some advanced features may require higher-tier subscriptions. The service is API-only; there is no significant public REST AP

2/3 tests passed

{
  "overall": 76,
  "dimensions": {
    "token_efficiency": 8.5,
    "first_try_success": 7.5,
    "response_parseability": 9.0,
    "error_clarity": 7.0,
    "doc_quality": 7.5,
    "auth_simplicity": 7.0,
    "latency": 6.5,
    "consistency": 7.5
  },
  "pricing_normalized": {
    "model": "freemium",
    "free_tier": "~5,000 lookups/month",
    "entry_paid": "not specified",
    "notes": "Volume-tiered monthly subscription; enterprise custom quotes. Free tier requires signup and has feature/rate limitations."
  },
  "issues": [
    "No /llms.txt (404) — agents lack a machine-readable capability/usage summary.",
    "Measured homepage latency ~625–781ms — above the sub-500ms 'excellent' threshold but below 2s.",
    "Security headers not observed on probed responses — minor hardening/trust signal gap.",
    "Pricing page details (exact tier quotas, per-request pricing) unclear from provided data, complicating cost estimation for agents.",
    "robots.txt is fully open (Disallow:) — good for crawlers, but no structured agent metadata."
  ],
  "recommendations": [
    "Publish an /llms.txt (or equivalent agent manifest) describing endpoints, auth, rate limits, and pricing tiers to boost agent token efficiency and first-try success.",
    "Expose a public, structured pricing/limits endpoint or JSON schema so agents can compute quotas and costs programmatically.",
    "Add standard security headers (HSTS, CSP, X-Content-Type-Options) to improve trust signals and consistency perception.",
    "Optimize frontend/edge caching to push homepage latency under 500ms.",
    "Provide clear, parseable API error codes and rate-limit headers (e.g., X-RateLimit-*) in documentation and responses."
  ]
}