# Retrieve risk score rules

Retrieves risk score rules.

Endpoint: GET /risk-score-rules
Version: latest
Security: SecretApiKey, JWT

## Response 200 fields (application/json):

  - `isProxy` (object,null, required)
    Specifies whether the customer's IP address is related to a proxy.

  - `isProxy.value` (integer, required)
    Value added to the risk score of the transaction.

  - `isVpn` (object,null, required)
    Specifies whether the customer's IP address is related to a VPN.

  - `isTor` (object,null, required)
    Specifies whether the customer's IP address is related to TOR.

  - `isHosting` (object,null, required)
    Specifies whether the customer's IP address is related to hosting.

  - `hasMismatchedBillingAddressCountry` (object,null, required)
    Specifies whether the customer's billing address country and geo-IP address are not the same.

  - `hasMismatchedBankCountry` (object,null, required)
    Specifies whether the customer's bank country and geo-IP address are not the same.

  - `hasMismatchedTimeZone` (object,null, required)
    Specifies whether the customer's browser time zone and the IP address associated time zone are not the same.

  - `hasMismatchedHolderName` (object,null, required)
    Specifies whether the customer's billing address name and primary address name are not the same.

  - `hasFakeName` (object,null, required)
    Specifies whether the holder name seems fake.

  - `isHighRiskCountry` (object,null, required)
    Specifies whether the geo-IP country, or the customer's billing country, is considered a high risk country.

  - `paymentInstrumentVelocity` (object,null, required)
    Number of transactions for this payment instrument, based on fingerprint, in the last 24 hours.

  - `paymentInstrumentVelocity.brackets` (array, required)
    Risk factor values range with corresponding risk score increment value. First matched bracket is applied.

  - `paymentInstrumentVelocity.brackets.start` (integer, required)
    Minimal risk factor value when condition is applied.

  - `paymentInstrumentVelocity.brackets.end` (integer, required)
    Maximal risk factor value when condition is applied.

  - `declinedPaymentInstrumentVelocity` (object,null, required)
    Number of declined transactions for this payment instrument fingerprint in the last 24 hours.

  - `deviceVelocity` (object,null, required)
    Number of transactions for this device, based on fingerprint, in the last 24 hours.

  - `ipVelocity` (object,null, required)
    Number of transactions for this IP address in the last 24 hours.

  - `emailVelocity` (object,null, required)
    Number of transactions for this email address in the last 24 hours.

  - `billingAddressVelocity` (object,null, required)
    Number of transactions for this billing address in the last 24 hours.

  - `isRebill` (object,null, required)
    Specifies whether the transaction is one of a number of recurring payments in a subscription, excluding trials or setup fees.

  - `isRetry` (object,null, required)
    Specifies whether the transaction is a retry.

  - `customerLifetimeValue` (object,null, required)
    Total revenue from the customer, in USD.

  - `browserAdBlockEnabled` (object,null, required)
    Specifies whether an ad blocker was detected.

  - `paymentInstrumentApprovedTransactionCount` (object,null, required)
    Number of approved transactions for this payment instrument.

## Response 401 fields (application/json):

  - `status` (integer)
    HTTP status code.

  - `type` (string)
    Problem type in the form of a [URI](https://tools.ietf.org/html/rfc3986) reference.
It should provide human-readable documentation for the problem type.
When this member is not present, its value is assumed to be "about:blank".

  - `title` (string)
    Short, human-readable summary of the problem type.
Other than for the purposes of localization, this should not change from occurrence to occurrence of the problem.

  - `detail` (string)
    Human-readable explanation that is specific to this occurrence of the problem.

  - `instance` (string)
    URI reference that identifies the specific occurrence of the problem.
It may or may not yield further information if dereferenced.

## Response 403 fields (application/json):

  - `status` (integer)
    HTTP status code.

  - `type` (string)
    Problem type in the form of a [URI](https://tools.ietf.org/html/rfc3986) reference.
It should provide human-readable documentation for the problem type.
When this member is not present, its value is assumed to be "about:blank".

  - `title` (string)
    Short, human-readable summary of the problem type.
Other than for the purposes of localization, this should not change from occurrence to occurrence of the problem.

  - `detail` (string)
    Human-readable explanation that is specific to this occurrence of the problem.

  - `instance` (string)
    URI reference that identifies the specific occurrence of the problem.
It may or may not yield further information if dereferenced.