# Retrieve risk score blocklist rules

Retrieves risk score blocklist rules.

Endpoint: GET /risk-score-rules/blocklists
Version: latest
Security: SecretApiKey, JWT

## Response 200 fields (application/json):

  - `address` (object,null)
    House number and ZIP code of the customer's address.

  - `address.riskScoreThreshold` (integer, required)
    Pass and fail threshold for the blocklist.

  - `address.ttl` (integer, required)
    Amount of seconds a blocklist exists before it expires.
If value for this field is  then blocklist record never expires.

  - `bank-account` (object,null)
    Bank account being charged.

  - `bin` (object,null)
    Bank Identification Number (BIN) of the payment card being charged.

  - `country` (object,null)
    Country where the customer is making the purchase, and of the payment card billing address.

  - `customer-id` (object,null)
    Rebilly  of the customer making the purchase.

  - `email` (object,null)
    Email address of the customer making the purchase.

  - `email-domain` (object,null)
    Email address domain of the customer making the purchase.

  - `fingerprint` (object,null)
    Fingerprint of the user's device.
A device fingerprint is a unique token that is used to identify the user.
The device fingerprint is generated based on device attributes,
such as: hardware, software, IP address, language, browser, and more.

  - `ip-address` (object,null)
    IP address of the customer making the purchase.

  - `payment-card` (object,null)
    Payment card number being charged.

## Response 401 fields (application/json):

  - `status` (integer)
    HTTP status code.

  - `type` (string)
    Problem type in the form of a [URI](https://tools.ietf.org/html/rfc3986) reference.
It should provide human-readable documentation for the problem type.
When this member is not present, its value is assumed to be "about:blank".

  - `title` (string)
    Short, human-readable summary of the problem type.
Other than for the purposes of localization, this should not change from occurrence to occurrence of the problem.

  - `detail` (string)
    Human-readable explanation that is specific to this occurrence of the problem.

  - `instance` (string)
    URI reference that identifies the specific occurrence of the problem.
It may or may not yield further information if dereferenced.

## Response 403 fields (application/json):

  - `status` (integer)
    HTTP status code.

  - `type` (string)
    Problem type in the form of a [URI](https://tools.ietf.org/html/rfc3986) reference.
It should provide human-readable documentation for the problem type.
When this member is not present, its value is assumed to be "about:blank".

  - `title` (string)
    Short, human-readable summary of the problem type.
Other than for the purposes of localization, this should not change from occurrence to occurrence of the problem.

  - `detail` (string)
    Human-readable explanation that is specific to this occurrence of the problem.

  - `instance` (string)
    URI reference that identifies the specific occurrence of the problem.
It may or may not yield further information if dereferenced.