Skip to main content

Authentication

Each partner receives a unique API token. Include it in the x-api-key header on every request.

Passing the customer IP address​

Guardarian uses the customer's IP address for country detection, risk scoring and fraud checks. If the request comes from partner backend instead of the customer's device, pass the customer's IP address. Guardarian reads it in this order:

  1. The ip, ipV4, and ipV6 fields inside the customer object in the request body.
  2. Deprecated: The ip query parameter
  3. Deprecated: The X-Forwarded-For header