Payments Fraud Data on Demand — Data Dictionary

Data Point

PATH

Definition

Sample Data

aggregateVelocities

aggregateVelocities

An array containing the velocity response objects for each requested field.

[]

 (Array)

field

aggregateVelocities[*].field

The specific field for which the velocity was calculated.

"CUSTOMER_ID"

responseCode

aggregateVelocities[*].responseCode

The status code for the velocity calculation request on the specific field.

"OK"

response

aggregateVelocities[*].response

The container object for the actual velocity count results.

{}

 (Object)

velocityCount

aggregateVelocities[*].response.velocityCount

An array containing the individual velocity count results for different time buckets.

[]

 (Array)

timeBucketMinutes

aggregateVelocities[*].response.velocityCount[*].timeBucketMinutes

The duration of the time window used for the velocity count calculation.

"TIME_BUCKET_MINUTES_24_HOURS"

count

aggregateVelocities[*].response.velocityCount[*].count

The number of times the field was observed within the specified time bucket. This is typically omitted if the count is zero.

"2"

Data Point

PATH

Definition

Sample Data

clientErrors

clientErrors

An array containing specific error messages encountered during client-side processing or validation.

"invalid string custom field: SHOPIFY_IS_RECURRING is not a string"

"invalid boolean custom field: SHOPIFY_ORDERS_COUNT is not a boolean"

"invalid boolean custom field: SHOPIFY_TOTAL_PYMT_TRANS is not a boolean"

"invalid boolean custom field: SHOPIFY_FAILED_PYMT_TRANS is not a boolean"

Data Point

PATH

Definition

Sample Data

currency

currency

The container object for currency-related information, typically including conversion details.

{}

 (Object)

responseCode

currency.responseCode

The status code for the currency request or calculation.

"OK"

currencyData

currency.currencyData

The container object holding the details of the currency conversion.

{}

 (Object)

conversionTimestamp

currency.currencyData.conversionTimestamp

The timestamp when the conversion was performed.

"1234567890"

rateTimestamp

currency.currencyData.rateTimestamp

The timestamp corresponding to when the conversion rates were valid.

"1758236400"

ratesUsed

currency.currencyData.ratesUsed

An object containing the currency conversion rates used, keyed by currency code.

{}

 (Object)

USD

currency.currencyData.ratesUsed.USD

The conversion rate for US Dollars (USD).

1

convertedMoney

currency.currencyData.convertedMoney

An array of money objects representing the amounts after conversion.

[]

 (Array)

sourceMoney

currency.currencyData.sourceMoney

An array of money objects representing the original amounts before conversion.

[]

 (Array)

currencyCode

currency.currencyData.convertedMoney[*].currencyCode

The currency code for the converted amount.

"USD"

units

currency.currencyData.convertedMoney[*].units

The major units of the monetary amount (for example, the dollar amount).

"2734"

nanos

currency.currencyData.convertedMoney[*].nanos

The sub-units of the monetary amount (for example, the cents/nanos part).

790168512

units

currency.currencyData.sourceMoney[*].units

The major units of the monetary amount (for examlpe, the dollar amount).

"4135"

nanos

currency.currencyData.sourceMoney[*].nanos

The sub-units of the monetary amount (for example, the cents/nanos part).

0

Data Point

PATH

Definition

Sample Data

customFields

customFields

An array of custom key-value pairs used to store additional transaction or order metadata.

[]

 (Array)

[Item]

customFields[*]

An individual custom field object within the array.

{}

 (Object)

name

customFields[*].name

The name or key of the custom field.

"PROVINCE"

value

customFields[*].value

The value associated with the custom field name.

"New South Wales"

Data Point

PATH

Definition

Sample Data

device

device

The container object for device-related information or the status of device data retrieval.

{}

 (Object)

responseCode

device.responseCode

The status code indicating the result of the device information request.

"DataNotFound"

Data Point

PATH

Definition

Sample Data

evaluatePaymentEventRequest

evaluatePaymentEventRequest

The primary object containing all data and signals used for evaluating a payment event.

{}

 (Object)

clientId

evaluatePaymentEventRequest.clientId

The unique identifier for the client associated with the request.

"102447"

accountProtectionTags

evaluatePaymentEventRequest.accountProtectionTags

Placeholder for Account Protection tags.

{}

 (Object)

advancedVelocities

evaluatePaymentEventRequest.advancedVelocities

Placeholder for advanced velocity calculations.

{}

 (Object)

device

evaluatePaymentEventRequest.device

The container object for all device and network-related information.

{}

 (Object)

deviceIdPresent

evaluatePaymentEventRequest.device.deviceIdPresent

A boolean indicating whether a unique device identifier was successfully collected.

false

ipAddress

evaluatePaymentEventRequest.device.ipAddress

The IP address of the device making the request.

"2001:8003:c417:8201:818d:9d73:972b:320d"

noHtmlCookieCollection

evaluatePaymentEventRequest.device.noHtmlCookieCollection

A boolean indicating if HTML cookie collection was disabled or unsuccessful.

false

neustar

evaluatePaymentEventRequest.device.neustar

A container object for IP intelligence data provided by a third-party service (Neustar).

{}

 (Object)

ipAddress

evaluatePaymentEventRequest.device.neustar.ipAddress

The IP address sent to or returned by the Neustar service.

"2001:8003:c417:8201:818d:9d73:972b:320d"

proxyLastDetected

evaluatePaymentEventRequest.device.neustar.proxyLastDetected

A timestamp indicating the last time a proxy/VPN was detected for this IP address.

"0001-01-01T00:00:00.00000Z"

distances

evaluatePaymentEventRequest.distances

An array containing details for calculating geographical distances between specified points.

[]

 (Array)

[Item]

evaluatePaymentEventRequest.distances[*]

An individual object specifying the origin and destination for a distance calculation.

{}

 (Object)

from

evaluatePaymentEventRequest.distances[*].from

The starting geographical point for the distance calculation.

"BillingAddress"

to

evaluatePaymentEventRequest.distances[*].to

The ending geographical point for the distance calculation.

"ShippingAddress"

billingEmailInsights

evaluatePaymentEventRequest.billingEmailInsights

An object containing various risk and behavioral insights related to the billing email address.

{}

 (Object)

AverageCartSize

evaluatePaymentEventRequest.billingEmailInsights.AverageCartSize

The average monetary size of transactions/carts associated with this email.

2.5

DateFirstSeen

evaluatePaymentEventRequest.billingEmailInsights.DateFirstSeen

The date and time when this email address was first observed.

"2023-03-19T21:43:44.000Z"

DistinctBins

evaluatePaymentEventRequest.billingEmailInsights.DistinctBins

The number of distinct credit card BINs (first 4-6 digits) used with this email.

"1"

DistinctPToks

evaluatePaymentEventRequest.billingEmailInsights.DistinctPToks

The number of distinct payment tokens (or credit cards) associated with this email.

"2"

MaxDollarAmount

evaluatePaymentEventRequest.billingEmailInsights.MaxDollarAmount

The maximum dollar amount seen in a single transaction for this email.

220.34

age

evaluatePaymentEventRequest.billingEmailInsights.age

The number of days since the email address was first seen.

914

chargebacks

evaluatePaymentEventRequest.billingEmailInsights.chargebacks

The total count of chargebacks associated with this email address.

0

emailTrustWorthinessScore

evaluatePaymentEventRequest.billingEmailInsights.emailTrustWorthinessScore

A risk score assessing the estimated trustworthiness of the email domain and history.

0.7949533011079388

occurrenceMostCommonBillAddress

evaluatePaymentEventRequest.billingEmailInsights.occurrenceMostCommonBillAddress

The count of transactions using the most frequent billing address seen for this email.

"10"

usernameLength

evaluatePaymentEventRequest.billingEmailInsights.usernameLength

The character length of the email address's local part (before the '@' symbol).

13

Data Point

PATH

Definition

Sample Data

omniscore

omniscore

A numerical score representing the overall risk or evaluation result for the transaction.

83

orderId

orderId

The unique identifier for the order/transaction.

"6565825452154"

order

order

The container object for all details related to the customer's order.

{}

 (Object)

orderNumber

order.orderNumber

The order number field.

"6516523811154"

billingShippingMatch

order.billingShippingMatch

A boolean indicating if the billing and shipping addresses match.

true

postalCodeMatch

order.postalCodeMatch

A boolean indicating if the billing and shipping postal codes match.

true

siteId

order.siteId

The identifier for the merchant's e-commerce site or platform.

"example.myshopify.com"

userId

order.userId

The customer's unique user ID on the merchant's system.

"8512345666936"

billing

order.billing

The container object for billing contact information.

{}

 (Object)

firstName

order.billing.firstName

The billing contact's first name.

"Jane"

lastName

order.billing.lastName

The billing contact's last name.

"Doe"

emailAddress

order.billing.emailAddress

The billing email address.

"EXAMPLE@GMAIL.COM"

phoneNumber

order.billing.phoneNumber

The billing phone number.

"+15555556869"

phoneCountry

order.billing.phoneCountry

The country associated with the phone number.

"US"

emailValidationCodes

order.billing.emailValidationCodes

Array of validation codes for the email address.

["ES01"]

address

order.billing.address

The container object for the billing physical address.

{}

 (Object)

line1

order.billing.address.line1

The first line of the billing address.

"96 EXAMPLE AVENUE"

city

order.billing.address.city

The billing city.

"EXAMPLE TOWN"

countryCode

order.billing.address.countryCode

The two-letter ISO country code for the billing address.

"AU"

postalCode

order.billing.address.postalCode

The billing postal or ZIP code.

"2956"

shipping

order.shipping

The container object for shipping contact information.

{}

 (Object)

firstName

order.shipping.firstName

The shipping contact's first name.

"Jane"

address

order.shipping.address

The container object for the shipping physical address.

{}

 (Object)

line1

order.shipping.address.line1

The first line of the shipping address.

"96 EXAMPLE AVENUE"

payment

order.payment

The container object for payment instrument and authorization details.

{}

 (Object)

total

order.payment.total

The total monetary value of the payment.

"4135"

curr

order.payment.curr

The three-letter currency code for the payment.

"AUD"

authorizationStatus

order.payment.authorizationStatus

A boolean indicating if the payment authorization was successful.

true

authorizationResult

order.payment.authorizationResult

The string result of the payment authorization.

"APPROVED"

cvvr

order.payment.cvvr

The Card Verification Value (CVV) response code.

"M"

bin

order.payment.bin

The container object for card BIN (Bank Identification Number) details.

{}

 (Object)

bankName

order.payment.bin.bankName

The name of the bank or institution issuing the card.

"EXAMPLE BANK"

bin

order.payment.bin.bin

The first 4-6 digits of the payment card number.

"123456"

shoppingCart

order.shoppingCart

The container object for items in the customer's cart.

{}

 (Object)

items

order.shoppingCart.items

An array of individual items in the shopping cart.

[]

 (Array)

name

order.shoppingCart.items[*].name

The item's SKU or product name.

"inst_2450ASS1"

price

order.shoppingCart.items[*].price

The price of the individual item (cents).

"3750"

quantity

order.shoppingCart.items[*].quantity

The quantity of this item purchased.

1

customerInfo

order.customerInfo

Container for various customer and unique identifiers.

{}

 (Object)

uniqueID

order.customerInfo.uniqueID

A unique customer ID associated with the order.

"1234567890123"

persona

persona

Container for Persona intelligence and velocity metrics.

{}

 (Object)

distinctBillEmails

persona.distinctBillEmails

The number of distinct billing email addresses used by this persona.

"1"

maxVelocity

persona.maxVelocity

The maximum frequency/velocity metric observed for this persona.

"2"

riskiestCountry

persona.riskiestCountry

The country associated with the highest risk for this persona.

"AU"

shippingEmailInsights

shippingEmailInsights

Container for insights specifically related to the shipping email address.

{}

 (Object)

emailAddressAssociation

shippingEmailInsights.emailAddressAssociation

Boolean flag on email address association data.

false

emailNameAssociation

shippingEmailInsights.emailNameAssociation

Boolean flag on email name association data.

false

Data Point

PATH

Definition

Sample Data

userData

userData

The container object for general information about the user/customer.

{}

 (Object)

userIP

userData.userIP

The IP address associated with the user's session or request.

"2001:8003:c417:8201:818d:9d73:972b:320d"

Data Point

PATH

Definition

Sample Data

velocityCounts

velocityCounts

An array containing the velocity results for various requested fields.

[]

 (Array)

[Item]

velocityCounts[*]

An object holding the velocity results for a single specified field.

{}

 (Object)

field

velocityCounts[*].field

The specific field (e.g., customer ID, email) that was analyzed for velocity.

"CUSTOMER_ID"

velocitycount

velocityCounts[*].velocitycount

An array of objects, each detailing the count for a specific time window. Note the lowercase 'c' in the JSON key.

[]

 (Array)

[Item]

velocityCounts[*].velocitycount[*]

An individual object detailing the count for one time bucket.

{}

 (Object)

timeBucketMinutes

velocityCounts[*].velocitycount[*].timeBucketMinutes

The duration of the time window used for the velocity count calculation.

"TIME_BUCKET_MINUTES_24_HOURS"

count

velocityCounts[*].velocitycount[*].count

The number of times the field was observed within the specified time bucket. This is typically omitted if the count is zero.

"2"

Data Point

PATH

Definition

Sample Data

geolocation

geolocation

The container object for all IP-based geographical and network data.

{}

 (Object)

responseCode

geolocation.responseCode

The status code indicating the result of the geolocation data lookup.

"OK"

geolocationData

geolocation.geolocationData

The container object holding the IP address and its associated attributes.

{}

 (Object)

ipv4Address

geolocation.geolocationData.ipv4Address

The IP address that was geolocated.

"123.0.0.1 "

isAppleRelay

geolocation.geolocationData.isAppleRelay

A boolean indicating if the IP address is identified as an Apple Private Relay exit node.

false

isTorNode

geolocation.geolocationData.isTorNode

A boolean indicating if the IP address is identified as a Tor exit node.

false

location

geolocation.geolocationData.location

The container object for derived geographical coordinates.

{}

 (Object)

countryCode

geolocation.geolocationData.location.countryCode

The two-letter country code of the geolocated address (A1 often means anonymous proxy or unknown).

"A1"

neustarAttributes

geolocation.geolocationData.neustarAttributes

The container object for IP intelligence data provided by Neustar.

{}

 (Object)

anonymizerStatus

geolocation.geolocationData.neustarAttributes.anonymizerStatus

Status indicating if the IP is linked to an anonymizer service.

connectionType

geolocation.geolocationData.neustarAttributes.connectionType

The type of internet connection (for example, Cable, DSL, Cellular).

hostingFacility

geolocation.geolocationData.neustarAttributes.hostingFacility

A boolean indicating if the IP belongs to a hosting provider or data center.

false

kountNetworkType

geolocation.geolocationData.neustarAttributes.kountNetworkType

A proprietary network type classification.

"A"

proxyLastDetected

geolocation.geolocationData.neustarAttributes.proxyLastDetected

Timestamp of the last time a proxy/VPN was detected for this IP address.

"0001-01-01T00:00:00.00000Z"

Data Point

PATH

Definition

Sample Data

merchantBaseCurrency

merchantBaseCurrency

The container object for currency conversion details related to the merchant's base currency.

{}

 (Object)

responseCode

merchantBaseCurrency.responseCode

The status code for the currency data retrieval.

"OK"

currencyData

merchantBaseCurrency.currencyData

The container object holding the details of the currency conversion.

{}

 (Object)

conversionTimestamp

merchantBaseCurrency.currencyData.conversionTimestamp

The timestamp when the conversion was performed.

""0001-01-01T00:00:00.00000Z" "

rateTimestamp

merchantBaseCurrency.currencyData.rateTimestamp

The timestamp corresponding to when the conversion rates were valid.

""0001-01-01T00:00:00.00000Z" "

ratesUsed

merchantBaseCurrency.currencyData.ratesUsed

An object containing the currency conversion rates used, keyed by currency code.

{}

 (Object)

AUD

merchantBaseCurrency.currencyData.ratesUsed.AUD

The conversion rate for Australian Dollars (AUD).

1.511999

convertedMoney

merchantBaseCurrency.currencyData.convertedMoney

An array of money objects representing the amounts after conversion to the base currency.

sourceMoney

merchantBaseCurrency.currencyData.sourceMoney

An array of money objects representing the original amounts before conversion.

value

merchantBaseCurrency.currencyData.convertedMoney[*].value

The converted monetary amount represented as a string.

"2734"

minorUnit

merchantBaseCurrency.currencyData.convertedMoney[*].minorUnit

The number of decimal places or minor unit precision (for example, '2' for cents).

"2"

money

merchantBaseCurrency.currencyData.convertedMoney[*].money

The nested money object providing standardized detail.

{}

 (Object)

currencyCode

merchantBaseCurrency.currencyData.convertedMoney[*].money.currencyCode

The three-letter currency code (usually the merchant's base currency).

"USD"

units

merchantBaseCurrency.currencyData.convertedMoney[*].money.units

The major units of the monetary amount (for example, the dollar amount).

"27"

nanos

merchantBaseCurrency.currencyData.convertedMoney[*].money.nanos

The sub-units of the monetary amount.

347901685

units

merchantBaseCurrency.currencyData.sourceMoney[*].units

The major units of the original monetary amount.

"41"

nanos

merchantBaseCurrency.currencyData.sourceMoney[*].nanos

The sub-units of the original monetary amount.

350000000

Data Point

PATH

Definition

Sample Data

merchantResponse

merchantResponse

The top-level container for the response sent back to the merchant/client.

{}

 (Object)

version

merchantResponse.version

The version number of the API or schema used for this response.

"v2.69.0"

order

merchantResponse.order

The container object for order-specific response details.

{}

 (Object)

channel

merchantResponse.order.channel

The merchant's sales channel or site identifier.

"company@example.com"

deviceSessionId

merchantResponse.order.deviceSessionId

A unique identifier for the customer's device/session.

"hWN38DKF213DWUCqHyAmSUrvF"

merchantOrderId

merchantResponse.order.merchantOrderId

The order ID as provided by the merchant.

"6123456781154"

orderId

merchantResponse.order.orderId

The unique identifier assigned to the order by the risk service.

"JB8NBH9VN9123456"

fulfillment

merchantResponse.order.fulfillment

An array containing details about order fulfillment statuses or IDs.

[]

 (Array)

fulfillmentId

merchantResponse.order.fulfillment[*].fulfillmentId

The unique ID for a specific fulfillment record.

"JB8NBH9VN123456789"

transactions

merchantResponse.order.transactions

An array containing transaction details for the order.

[]

 (Array)

transactionId

merchantResponse.order.transactions[*].transactionId

The unique ID for a specific transaction within the order.

"JB8NBH9VN965H12345"

payment

merchantResponse.order.transactions[*].payment

An array of payment details for the transaction.

[]

 (Array)

cardBrand

merchantResponse.order.transactions[*].payment[*].cardBrand

The general type or brand of the payment card.

"CARD"

riskInquiry

merchantResponse.order.riskInquiry

The container object for the risk evaluation outcome.

{}

 (Object)

decision

merchantResponse.order.riskInquiry.decision

The final risk decision made for the order.

"APPROVE"

omniscore

merchantResponse.order.riskInquiry.omniscore

The numerical score representing the overall risk of the transaction.

83

persona

merchantResponse.order.riskInquiry.persona

The container for aggregated velocity counts related to the customer Persona.

{}

 (Object)

reasonCode

merchantResponse.order.riskInquiry.reasonCode

The name of the reason code assigned from a triggered policy.

"ATO"

maxVelocity

merchantResponse.order.riskInquiry.persona.maxVelocity

The maximum observed velocity count for the customer Persona.

2

uniqueEmails

merchantResponse.order.riskInquiry.persona.uniqueEmails

The number of unique email addresses associated with the Persona.

1

segmentExecuted

merchantResponse.order.riskInquiry.segmentExecuted

The container for the risk segment that was evaluated.

{}

 (Object)

segment

merchantResponse.order.riskInquiry.segmentExecuted.segment

Details about the specific risk segment applied.

{}

 (Object)

name

merchantResponse.order.riskInquiry.segmentExecuted.segment.name

The name of the executed segment.

"Default"

Data Point

PATH

Definition

Sample Data

transactionData

transactionData

The container object for a collection of data related to individual transactions within an order.

{}

 (Object)

0

transactionData.0

The container object for the first transaction (indexed by "0") in the order.

{}

 (Object)

billDataQuality

transactionData.0.billDataQuality

The container for quality and verification checks performed on billing data.

{}

 (Object)

responseCode

transactionData.0.billDataQuality.responseCode

The status code for the bill data quality check.

"OK"

melissaData

transactionData.0.billDataQuality.melissaData

The container for validation results provided by the Melissa Data service.

{}

 (Object)

lookupAddress

transactionData.0.billDataQuality.melissaData.lookupAddress

Results from the address validation service.

{}

 (Object)

address1

transactionData.0.billDataQuality.melissaData.lookupAddress.address1

The verified or looked-up address line 1.

"5 ENGLISH AVENUE"

city

transactionData.0.billDataQuality.melissaData.lookupAddress.city

The verified or looked-up city.

"CASTLE HILL"

countryCode

transactionData.0.billDataQuality.melissaData.lookupAddress.countryCode

The two-letter ISO country code.

"AU"

latitude

transactionData.0.billDataQuality.melissaData.lookupAddress.latitude

The geographical latitude of the address.

-33.7323

longitude

transactionData.0.billDataQuality.melissaData.lookupAddress.longitude

The geographical longitude of the address.

151.0056

lookupEmail

transactionData.0.billDataQuality.melissaData.lookupEmail

Results from the email validation service.

{}

 (Object)

emailAddress

transactionData.0.billDataQuality.melissaData.lookupEmail.emailAddress

The validated email address.

"TYNEESHA.KERR@OUTLOOK.COM"

resultCodes

transactionData.0.billDataQuality.melissaData.lookupEmail.resultCodes

Array of result codes from the email validation check.

["ES01"]

lookupName

transactionData.0.billDataQuality.melissaData.lookupName

Results from the name validation service.

{}

 (Object)

fullName

transactionData.0.billDataQuality.melissaData.lookupName.fullName

The verified full name.

"TYNEESHA KERR"

gender

transactionData.0.billDataQuality.melissaData.lookupName.gender

The predicted gender (U for Unknown).

"U"

lookupPhone

transactionData.0.billDataQuality.melissaData.lookupPhone

Results from the phone validation service.

{}

 (Object)

phone

transactionData.0.billDataQuality.melissaData.lookupPhone.phone

The validated phone number.

"+10407636664"

isValidated

transactionData.0.billDataQuality.melissaData.lookupPhone.isValidated

A boolean indicating if the phone number validation was successful.

false

countryCallingCode

transactionData.0.billDataQuality.melissaData.lookupPhone.countryCallingCode

The country calling code.

"1"

Data Point

PATH

Definition

Sample Data

billEmailData

billEmailData

The top-level container for all historical and calculated risk metrics associated with the billing email address.

{}

 (Object)

responseCode

billEmailData.responseCode

The status code for the email data retrieval.

"OK"

data

billEmailData.data

The container object holding the raw and calculated velocity/insight metrics.

{}

 (Object)

BILLEMAIL

billEmailData.data.BILLEMAIL

The billing email address the data pertains to.

"EMAIL@EXAMPLE.COM"

BILLEMAILDOMAIN

billEmailData.data.BILLEMAILDOMAIN

The domain of the billing email address.

"example.com"

DATEFIRSTSEEN

billEmailData.data.DATEFIRSTSEEN

The date the email address was first observed.

"2023-03-19T21:43:44.000Z"

DATELASTSEEN

billEmailData.data.DATELASTSEEN

The date the email address was last observed.

"2025-03-02T17:10:27.000Z"

daysSinceFirstSeen

billEmailData.data.daysSinceFirstSeen

The age of the email record in days.

"914"

OCCURRENCE

billEmailData.data.OCCURRENCE

The total number of transactions/orders observed for this email.

"12"

CHARGEBACKS

billEmailData.data.CHARGEBACKS

The total number of chargebacks associated with this email.

"0"

CHARGEBACKRATIO

billEmailData.data.CHARGEBACKRATIO

The ratio of chargebacks to total orders.

0

DECLINESAUTH

billEmailData.data.DECLINESAUTH

Total number of authorization declines.

"1"

DECLINEAUTHRATIO

billEmailData.data.DECLINEAUTHRATIO

The ratio of auth declines to total orders.

0.083333

TOTALDOLLARAMOUNT

billEmailData.data.TOTALDOLLARAMOUNT

The cumulative dollar amount of all transactions.

1459.04

MAXDOLLARAMOUNT

billEmailData.data.MAXDOLLARAMOUNT

The largest single dollar amount seen.

220.34

AVERAGECARTSIZE

billEmailData.data.AVERAGECARTSIZE

The historical average cart size (number of items).

2.5

MINOMNISCORE

billEmailData.data.MINOMNISCORE

The lowest Omniscore seen historically.

22

MEANOMNISCORE

billEmailData.data.MEANOMNISCORE

The mean Omniscore across all transactions.

80.483333333

RECURRENCESCORE

billEmailData.data.RECURRENCESCORE

A score indicating the pattern/likelihood of repeat use.

0.7541477526837184

EMAILTRUSTWORTHINESS SCORE

billEmailData.data.EMAILTRUSTWORTHINESS SCORE

A score assessing the estimated trustworthiness of the email.

0.7949533011079388

DISTINCTIPADS

billEmailData.data.DISTINCTIPADS

Number of unique IP addresses/devices used.

"5"

DISTINCTBINS

billEmailData.data.DISTINCTBINS

Number of distinct credit card BINs used.

"1"

MOSTCOMMONBILLADDRESS

billEmailData.data.MOSTCOMMONBILLADDRESS

The billing address used most frequently.

"69 EXAMPLE AVENUE"

OCCURRENCEMOSTCOMMONBILLADDRESS

billEmailData.data.OCCURRENCEMOSTCOMMONBILLADDRESS

Count of transactions using the most common billing address.

"10"

MOSTCOMMONSHIPPOSTALCODE

billEmailData.data.MOSTCOMMONSHIPPOSTALCODE

The shipping postal code used most frequently.

"2154"

PROPORTIONNULLSHIPEMAIL

billEmailData.data.PROPORTIONNULLSHIPEMAIL

Proportion of transactions where the shipping email was null.

1

PROPORTIONNULLLATLON

billEmailData.data.PROPORTIONNULLLATLON

Proportion of transactions missing latitude/longitude data.

0.833333

PROPORTIONWEEKDAY

billEmailData.data.PROPORTIONWEEKDAY

Proportion of transactions occurring on a weekday.

0.6666666667

Data Point

PATH

Definition

Sample Data

billingEmailInsightV2

billingEmailInsightV2

The container object for the second version of email risk insights and data.

{}

 (Object)

responseCode

billingEmailInsightV2.responseCode

The status code indicating the result of the service call to fetch email insights.

"ServiceUnavailable"

Data Point

PATH

Definition

Sample Data

bin

bin

The top-level container for all Bank Identification Number (BIN) lookup results and metadata.

{}

 (Object)

responseCode

bin.responseCode

The status code indicating the result of the BIN lookup request.

"OK"

binData

bin.binData

The container object holding the detailed card intelligence attributes.

{}

 (Object)

Bin

bin.binData.Bin

The specific Bank Identification Number (first 4-6 digits of a card).

"123456"

BankName

bin.binData.BankName

The name of the issuing bank or financial institution.

"EXAMPLE BANK"

BankCountryCode2Alpha

bin.binData.BankCountryCode2Alpha

The two-letter ISO country code of the issuing bank.

"AU"

CardProductDescription

bin.binData.CardProductDescription

The card network/product type (e.g., Visa, Mastercard).

"Mastercard"

CardIndicatorDescription

bin.binData.CardIndicatorDescription

Description of the card type or indicator (for example, Credit, Debit).

"Debit Card (No PIN)"

PrepaidIndicator

bin.binData.PrepaidIndicator

Indicator if the card is a prepaid card.

"N"

AccountLength

bin.binData.AccountLength

The standard length of the full card number associated with this BIN.

"16"

LowerBin

bin.binData.LowerBin

The lower bound of the card number range for this BIN.

"5217290000000000"

UpperBin

bin.binData.UpperBin

The upper bound of the card number range for this BIN.

"5217295999999999"

ConsumerDigitalPaymentTokenIndicator

bin.binData.ConsumerDigitalPaymentTokenIndicator

Indicator if the card supports consumer digital payment tokens (for example, Apple Pay).

"N"

P2PMoneyTransferIndicatorDescription

bin.binData.P2PMoneyTransferIndicatorDescription

Description of whether Person-to-Person money transfers are allowed.

"P2P Money Transfer not allowed"

Data Point

PATH

Definition

Sample Data

boost

boost

The top-level container for risk feature data.

{}

 (Object)

responseCode

boost.responseCode

The status code for the boost data lookup.

"OK"

boostData

boost.boostData

The container object holding the calculated count and risk metrics.

{}

 (Object)

lookupKeys

boost.boostData.lookupKeys

An array of formatted key strings used internally to retrieve the risk data.

[]

 (Array)

[Item]

boost.boostData.lookupKeys[*]

An individual lookup key string.

"bEml:FIRSTNAME.LASTNAMER@EMAIL.COM"

bill_address_postal_count

boost.boostData.bill_address_postal_count

The total count of the billing address postal code globally/across the merchant network.

4539.8574

bill_address_postal_positive

boost.boostData.bill_address_postal_positive

The count of "positive" (e.g., fraudulent) transactions associated with the billing postal code.

174.11128

bill_address_postal_risk

boost.boostData.bill_address_postal_risk

The calculated risk rate for the billing address postal code.

0.038351707

bill_email_domain_count

boost.boostData.bill_email_domain_count

The total count of the billing email's domain.

7056817

bill_email_risk

boost.boostData.bill_email_risk

The calculated risk rate associated with the full billing email address.

0.011435086

bin_count

boost.boostData.bin_count

The total count of the payment card's BIN.

585887.2

bin_risk

boost.boostData.bin_risk

The calculated risk rate associated with the payment card's BIN.

0.067122936

device_id_count

boost.boostData.device_id_count

The total count of the observed device ID.

156868670

ptok_risk

boost.boostData.ptok_risk

The calculated risk rate associated with the payment token (ptok).

0.033239834

ship_address_postal_risk

boost.boostData.ship_address_postal_risk

The calculated risk rate associated with the shipping address postal code.

0.07904551

usd_cents_amount_risk

boost.boostData.usd_cents_amount_risk

The calculated risk rate associated with the specific dollar amount of the transaction.

0.02393374

user_agent_count

boost.boostData.user_agent_count

The total count of the observed user agent string.

149847780

distances

boost.distances

The container object for geographical distance calculation results.

{}

 (Object)

value

boost.distances.value

The container object holding the distance key-value pairs.

{}

 (Object)

BillAddressToShipAddress

boost.distances.value.BillAddressToShipAddress

The calculated distance between the billing and shipping addresses.

0

Data Point

PATH

Definition

Sample Data

engineEvaluateResponse

engineEvaluateResponse

Container for the risk engine's direct decision and policy metadata.

{}

 (Object)

responseCode

engineEvaluateResponse.responseCode

Status code for the engine evaluation service.

"OK"

evaluateData

engineEvaluateResponse.evaluateData

The core results from the rule execution.

{}

 (Object)

decision

engineEvaluateResponse.evaluateData.decision

The final decision reached by the rule engine.

"Approve"

guidance

engineEvaluateResponse.evaluateData.guidance

Supplementary guidance on the decision.

"Approve"

userProfile

engineEvaluateResponse.evaluateData.userProfile

The risk profile applied to the user/transaction.

"Default"

policySetInfo

engineEvaluateResponse.evaluateData.policySetInfo

Metadata describing the set of policies used for evaluation.

{}

 (Object)

policySetName

engineEvaluateResponse.evaluateData.policySetInfo.policySetName

The name of the policy set executed.

"Default"

versionName

engineEvaluateResponse.evaluateData.policySetInfo.versionName

The version identifier for the policy set.

"9"

versionPublishedBy

engineEvaluateResponse.evaluateData.policySetInfo.versionPublishedBy

The name of the person who published this policy version.

"Jane Doe"

versionPublishedTime

engineEvaluateResponse.evaluateData.policySetInfo.versionPublishedTime

The timestamp when this specific policy version was published.

"2025-08-20T12:45:45.600121Z"

segmentExecuted

engineEvaluateResponse.evaluateData.segmentExecuted

Details about the specific segment executed.

{}

 (Object)

ID

engineEvaluateResponse.evaluateData.segmentExecuted.ID

Unique identifier for the executed segment.

"ne123dcc-3eef-12c5-b123-23d1a45b04678"

name

engineEvaluateResponse.evaluateData.segmentExecuted.name

The name of the executed segment.

"Default"

Data Point

PATH

Definition

Sample Data

exactListMatches

exactListMatches

The container object for results of checking input data against client-managed exact match lists.

{}

 (Object)

listData

exactListMatches.listData

The container where any specific matching data points would be returned.

{}

 (Object)

responseCode

exactListMatches.responseCode

The status code indicating the result of the list lookup.

"OK"

Data Point

PATH

Definition

Sample Data

inferenceEngine

inferenceEngine

The primary container for machine learning model scoring results and features.

{}

 (Object)

responseCode

inferenceEngine.responseCode

Status code for the inference engine service call.

"OK"

omniscoreData

inferenceEngine.omniscoreData

The container for the transaction's calculated Omniscore details.

{}

 (Object)

score

inferenceEngine.omniscoreData.score

The final risk score assigned to the transaction (scaled 0-100).

83

rawScore

inferenceEngine.omniscoreData.rawScore

The raw, unscaled probability output from the model.

0.022933267

mleapFailed

inferenceEngine.omniscoreData.mleapFailed

Boolean indicating if the model execution failed.

false

modelId

inferenceEngine.omniscoreData.modelId

The unique identifier for the specific machine learning model version used for scoring.

"K360_2025Q2_Add360_MLEAP_wK360_PipelineModel..."

transformVersion

inferenceEngine.omniscoreData.transformVersion

The version of the data transformation logic applied to the input features.

"123456:example.myshopify.com:v1"

useCase

inferenceEngine.omniscoreData.useCase

The specific business use case this model was trained for.

"k360-mlproc-omniscore-202504"

imputedFeatures

inferenceEngine.omniscoreData.imputedFeatures

An array listing the features that were calculated or inferred during the process, often due to missing inputs.

[]

 (Array)

[Item]

inferenceEngine.omniscoreData.imputedFeatures[*]

A string indicating a specific imputed feature.

"distance:bill_address_to_bill_phone"

mungedFeatures

inferenceEngine.omniscoreData.mungedFeatures

A map of all engineered and transformed features that were fed into the final machine learning model for scoring.

{}

 (Object)

boost:bin_risk

inferenceEngine.omniscoreData.mungedFeatures.boost:bin_risk

A sample engineered risk feature (risk rate associated with the card's BIN).

0.067122936

cart:usd_cents_amount

inferenceEngine.omniscoreData.mungedFeatures.cart:usd_cents_amount

A sample engineered feature detailing the total amount in US cents.

2735

distance:bill_address_to_ship_address

inferenceEngine.omniscoreData.mungedFeatures.distance:bill_address_to_ship_address

The calculated distance between billing and shipping addresses.

0

email_insights:days_since_first_seen

inferenceEngine.omniscoreData.mungedFeatures.email_insights:days_since_first_seen

A sample email insight feature (age of the email record in days).

914

pinned:bin_country_code_risk

inferenceEngine.omniscoreData.mungedFeatures.pinned:bin_country_code_risk

A sample "pinned" feature representing the risk of the country code associated with the BIN.

0.01902245851952251

Data Point

PATH

Definition

Sample Data

persona

persona

The container for Persona and aggregated velocity/distinct count data.

{}

 (Object)

responseCode

persona.responseCode

The status code for the Persona data retrieval.

"OK"

personaData

persona.personaData

The container holding the distinct data cluster counts and associated records.

{}

 (Object)

clusterCount

persona.personaData.clusterCount

The total number of unique orders/records contributing to this Persona cluster.

"3"

orderNumbers

persona.personaData.orderNumbers

An array of order IDs belonging to this Persona cluster.

["JB8JLIHHK965HW6Z", "J3ZHJ362DKDFK9SK", ...]

billing

persona.personaData.billing

Aggregated counts for billing-related fields within the Persona cluster.

{}

 (Object)

address

persona.personaData.billing.address

Map of distinct billing addresses and their occurrence count (for example, address: count).

{...}

 (Object)

emailAddress

persona.personaData.billing.emailAddress

Map of distinct billing email addresses and their count.

{"EXAMPLE@OUTLOOK.COM": 3}

namePostal

persona.personaData.billing.namePostal

Map of combined name and postal code records and their count.

{"USER\u005e5554": 3}

device

persona.personaData.device

Aggregated counts for device-related fields within the persona cluster.

{}

 (Object)

ipad

persona.personaData.device.ipad

Map of distinct IP addresses (ipad) and their occurrence count.

{"2001:8003...": 1}

payment

persona.personaData.payment

Aggregated counts for payment-related fields.

{}

 (Object)

brand

persona.personaData.payment.brand

Map of distinct payment brands and their count.

{"CARD\u001f": 2, "NONE\u001f": 1}

total

persona.personaData.payment.total.sum

The sum of all transaction totals for this persona cluster.

"27178"

velocities

persona.personaData.velocities

Container for various velocity scores and buckets (for example, all orders, authorized only).

{}

 (Object)

authA

persona.personaData.velocities.authA

A map where keys are time buckets and values are velocity counts for authorized transactions.

{"84": 2}

---

---

---

---

ruleMetadata

ruleMetadata

The container for information about the rules and data requirements used for the transaction.

{}

 (Object)

responseCode

ruleMetadata.responseCode

Status code for the rule metadata retrieval.

"OK"

RequiredConditionalSubTypes

ruleMetadata.ruleMetadata.RequiredConditionalSubTypes

Array of required conditional subtypes for processing.

["UKNOWN_TYPE"]

clientManagedLists

ruleMetadata.ruleMetadata.clientManagedLists

Container for the lists managed by the client that are needed for rules.

{}

 (Object)

exactMatchLists

ruleMetadata.ruleMetadata.clientManagedLists.exactMatchLists

Array of lists where exact matches are checked.

[]

 (Array)

listType

ruleMetadata.ruleMetadata.clientManagedLists.exactMatchLists[*].listType

The type of data in the managed list.

"PHYSICAL_ADDRESS"

requiredVelocities

ruleMetadata.ruleMetadata.requiredVelocities

Array of velocity metrics the rule engine needs to calculate for the request.

[]

 (Array)

field

ruleMetadata.ruleMetadata.requiredVelocities[*].field

The data field for which velocity is required.

"CUSTOMER_ID"

timeBucketMinutes

ruleMetadata.ruleMetadata.requiredVelocities[*].timeBucketMinutes

Array of time intervals for the required velocity.

["TIME_BUCKET_MINUTES_24_HOURS", ...]

Data Point

PATH

Definition

Sample Data

shipDataQuality

shipDataQuality

Container for quality and verification checks performed on shipping contact and address data.

{}

 (Object)

responseCode

shipDataQuality.responseCode

The status code for the data quality check.

"OK"

melissaData

shipDataQuality.melissaData

The container for validation results provided by the Melissa Data service.

{}

 (Object)

lookupAddress

shipDataQuality.melissaData.lookupAddress

Results from the address validation service.

{}

 (Object)

address1

shipDataQuality.melissaData.lookupAddress.address1

The verified or looked-up address line 1.

"123 EXAMPLE ST"

city

shipDataQuality.melissaData.lookupAddress.city

The verified or looked-up city.

"ANYTOWN"

countryCode

shipDataQuality.melissaData.lookupAddress.countryCode

The two-letter ISO country code.

"AU"

latitude

shipDataQuality.melissaData.lookupAddress.latitude

The geographical latitude of the address.

−33.7696

longitude

shipDataQuality.melissaData.lookupAddress.longitude

The geographical longitude of the address.

151.0025

postalCode

shipDataQuality.melissaData.lookupAddress.postalCode

The verified postal or ZIP code.

"2154"

state

shipDataQuality.melissaData.lookupAddress.state

The verified state or province.

"NEW SOUTH WALES"

lookupName

shipDataQuality.melissaData.lookupName

Results from the name validation service.

{}

 (Object)

fullName

shipDataQuality.melissaData.lookupName.fullName

The verified full name.

"JANE DOE"

gender

shipDataQuality.melissaData.lookupName.gender

The predicted gender (U for Unknown).

"U"

lookupPhone

shipDataQuality.melissaData.lookupPhone

Results from the phone validation service.

{}

 (Object)

phone

shipDataQuality.melissaData.lookupPhone.phone

The validated phone number.

"+1 (800) 555-0199"

isValidated

shipDataQuality.melissaData.lookupPhone.isValidated

A boolean indicating if the phone number validation was successful.

false

shipEmailData

shipEmailData

Historical email insight metrics for the shipping email address.

{}

 (Object)

responseCode

shipEmailData.responseCode

Status code for the shipping email insight service.

"MissingInput"

shippingEmailInsightV2

shippingEmailInsightV2

Status of the V2 shipping email insight service request.

{}

 (Object)

responseCode

shippingEmailInsightV2.responseCode

Status code for the V2 shipping email insight service.

"MissingInput"

Data Point

PATH

Definition

Sample Data

ekataData

ekataData

The top-level container for identity and verification data provided by Ekata.

{}

 (Object)

timestamp

ekataData.timestamp

The timestamp of when the Ekata data lookup was performed.

"2025-08-27T16:24:04Z"

identityCheckScore

ekataData.identityCheckScore

A proprietary score indicating the confidence level of the verified identity.

"439"

identityNetworkScore

ekataData.identityNetworkScore

A score based on the network risk associated with the identity data points.

0.934

ipAddressCheck

ekataData.ipAddressCheck

Verification and geolocation data for the user's IP address.

{}

 (Object)

cityName

ekataData.ipAddressCheck.cityName

The city associated with the geolocated IP address.

"Atlanta"

countryCode

ekataData.ipAddressCheck.countryCode

The two-letter country code of the geolocated IP.

"US"

postalCode

ekataData.ipAddressCheck.postalCode

The postal code associated with the geolocated IP address.

"49509"

proxyRisk

ekataData.ipAddressCheck.proxyRisk

Boolean indicating if the IP address is identified as a proxy or VPN.

false

primaryAddressCheck

ekataData.primaryAddressCheck

Verification results for the primary address provided in the request (e.g., billing address).

true

inputCompleteness

ekataData.primaryAddressCheck.inputCompleteness

Status of the completeness of the address input data.

"COMPLETE"

isValid

ekataData.primaryAddressCheck.isValid

Boolean indicating if the address was successfully verified as valid.

false

secondaryEmailCheck

ekataData.secondaryEmailCheck

Verification results for the secondary email address provided.

false

emailFirstSeenDays

ekataData.secondaryEmailCheck.emailFirstSeenDays

Age of the email record in days.

"3909"

isDisposable

ekataData.secondaryEmailCheck.isDisposable

Boolean indicating if the email domain is disposable.

true

matchToName

ekataData.secondaryEmailCheck.matchToName

Status of matching the email address to a person's name.

"NAME_NO_MATCH"

registeredOwnerName

ekataData.secondaryEmailCheck.registeredOwnerName

The registered owner's name associated with the email/identity record.

"Jane Doe"

primaryPhoneCheck

ekataData.primaryPhoneCheck

Verification result for the primary phone number.

false

secondaryPhoneCheck

ekataData.secondaryPhoneCheck

Verification result for the secondary phone number.

false

Data Point

PATH

Definition

Sample Data

ekataStatus

ekataStatus

The top-level container for categorical risk status codes from the Ekata service.

{}

 (Object)

identityCheckScore

ekataStatus.identityCheckScore

Status of the overall identity check score.

"WARNING"

identityNetworkScore

ekataStatus.identityNetworkScore

Status of the calculated score based on identity network data.

"WARNING"

distancePrimaryToSecondaryAddress

ekataStatus.distancePrimaryToSecondaryAddress

Status of the geographic distance check between the two provided addresses.

"NEUTRAL"

primaryAddressStatus

ekataStatus.primaryAddressStatus

Verification status of the primary address (e.g., billing address).

{}

 (Object)

inputCompleteness

ekataStatus.primaryAddressStatus.inputCompleteness

Status of whether the required address fields were complete.

"PASS"

isValid

ekataStatus.primaryAddressStatus.isValid

Status of the address validity check.

"WARNING"

primaryPhoneStatus

ekataStatus.primaryPhoneStatus

Verification status of the primary phone number.

{}

 (Object)

isPrepaid

ekataStatus.primaryPhoneStatus.isPrepaid

Status indicating if the phone number is a pre-paid mobile (a potential risk factor).

"PASS"

isValid

ekataStatus.primaryPhoneStatus.isValid

Status of the phone number validity check.

"WARNING"

ipAddressStatus

ekataStatus.ipAddressStatus

Verification status of the IP address and its geographical location.

{}

 (Object)

proxyRisk

ekataStatus.ipAddressStatus.proxyRisk

Status of the IP address being flagged as a proxy/VPN.

"PASS"

isValid

ekataStatus.ipAddressStatus.isValid

Status of the IP address verification.

"PASS"

distanceFromPrimaryAddress

ekataStatus.ipAddressStatus.distanceFromPrimaryAddress

Status of the IP address's geographic distance from the primary address.

"NEUTRAL"

secondaryEmailStatus

ekataStatus.secondaryEmailStatus

Verification status of the secondary email address.

{}

 (Object)

isDisposable

ekataStatus.secondaryEmailStatus.isDisposable

Status indicating if the secondary email domain is a disposable service.

"WARNING"

matchToName

ekataStatus.secondaryEmailStatus.matchToName

Status of matching the email to a registered name.

"WARNING"

secondaryAddressStatus

ekataStatus.secondaryAddressStatus

Verification status of the secondary address.

{}

 (Object)

secondaryPhoneStatus

ekataStatus.secondaryPhoneStatus

Verification status of the secondary phone number.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

ekataData

ekataData

The top-level container for identity and verification data provided by the Ekata service.

{}

 (Object)

timestamp

ekataData.timestamp

The timestamp of when the Ekata data lookup was performed.

"2025-08-20T17:19:21Z"

identityCheckScore

ekataData.identityCheckScore

A proprietary score quantifying the confidence level of the verified identity.

452

identityNetworkScore

ekataData.identityNetworkScore

A score based on the network risk associated with the identity data points.

0.971

ipAddressCheck

ekataData.ipAddressCheck

Verification and geolocation data for the user's IP address.

{}

 (Object)

cityName

ekataData.ipAddressCheck.cityName

The city associated with the geolocated IP address.

"Atlanta"

countryCode

ekataData.ipAddressCheck.countryCode

The two-letter country code of the geolocated IP.

"US"

distanceFromSecondaryAddress

ekataData.ipAddressCheck.distanceFromSecondaryAddress

The geographic distance (in miles or kilometers) from the IP location to the secondary address.

321

isValid

ekataData.ipAddressCheck.isValid

Boolean indicating if the IP address geolocation was successfully determined.

true

proxyRisk

ekataData.ipAddressCheck.proxyRisk

Boolean indicating if the IP address is flagged as a proxy or VPN.

false

primaryAddressCheck

ekataData.primaryAddressCheck

Verification results for the primary address (e.g., billing address).

{}

 (Object)

inputCompleteness

ekataData.primaryAddressCheck.inputCompleteness

Numerical representation of the completeness of the address input data.

4

isValid

ekataData.primaryAddressCheck.isValid

Boolean indicating if the primary address was successfully verified as valid.

false

secondaryAddressCheck

ekataData.secondaryAddressCheck

Verification results for the secondary address (e.g., shipping address).

{}

 (Object)

isValid

ekataData.secondaryAddressCheck.isValid

Boolean indicating if the secondary address was successfully verified as valid.

true

primaryEmailCheck

ekataData.primaryEmailCheck

Verification results for the primary email address.

{}

 (Object)

primaryPhoneCheck

ekataData.primaryPhoneCheck

Verification results for the primary phone number.

{}

 (Object)

secondaryEmailCheck

ekataData.secondaryEmailCheck

Verification results for the secondary email address.

{}

 (Object)

secondaryPhoneCheck

ekataData.secondaryPhoneCheck

Verification results for the secondary phone number.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

ekataStatus

ekataStatus

The top-level container for categorical risk status codes from the Ekata service.

{}

 (Object)

identityCheckScore

ekataStatus.identityCheckScore

Status of the overall identity check score.

2

identityNetworkScore

ekataStatus.identityNetworkScore

Status of the calculated score based on identity network data.

2

distancePrimaryToSecondaryAddress

ekataStatus.distancePrimaryToSecondaryAddress

Status of the geographic distance check between the two provided addresses.

3

ipAddressStatus

ekataStatus.ipAddressStatus

Verification status of the IP address and its geographical location.

{}

 (Object)

isValid

ekataStatus.ipAddressStatus.isValid

Status of the IP address validity check.

1

proxyRisk

ekataStatus.ipAddressStatus.proxyRisk

Status of the IP address being flagged as a proxy/VPN.

1

distanceFromSecondaryAddress

ekataStatus.ipAddressStatus.distanceFromSecondaryAddress

Status of the IP's geographic distance from the secondary address.

2

primaryAddressStatus

ekataStatus.primaryAddressStatus

Verification status of the primary address (for example, billing address).

{}

 (Object)

inputCompleteness

ekataStatus.primaryAddressStatus.inputCompleteness

Status of whether the required address fields were complete.

1

isValid

ekataStatus.primaryAddressStatus.isValid

Status of the primary address validity check.

1

primaryEmailStatus

ekataStatus.primaryEmailStatus

Verification status of the primary email address.

{}

 (Object)

emailDomainCreationDays

ekataStatus.primaryEmailStatus.emailDomainCreationDays

Status related to the domain's age.

2

isValid

ekataStatus.primaryEmailStatus.isValid

Status of the email validity check.

2

primaryPhoneStatus

ekataStatus.primaryPhoneStatus

Verification status of the primary phone number.

{}

 (Object)

isPrepaid

ekataStatus.primaryPhoneStatus.isPrepaid

Status indicating if the phone number is a pre-paid mobile.

3

isValid

ekataStatus.primaryPhoneStatus.isValid

Status of the phone number validity check.

1

secondaryAddressStatus

ekataStatus.secondaryAddressStatus

Verification status of the secondary address (for example, shipping address).

{}

 (Object)

isValid

ekataStatus.secondaryAddressStatus.isValid

Status of the secondary address validity check.

2

secondaryEmailStatus

ekataStatus.secondaryEmailStatus

Verification status of the secondary email address.

{}

 (Object)

secondaryPhoneStatus

ekataStatus.secondaryPhoneStatus

Verification status of the secondary phone number.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"CreateTag"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

request

request

Data fields provided in the initial request to perform the action.

{}

 (Object)

name

request.name

The requested name for the new tag.

"FailedAttemptDeviceID"

details

details

Container for detailed parameters of the tag being created.

{}

 (Object)

Tag

details.Tag

Nested container for tag object definition.

{}

 (Object)

tag

details.Tag.tag

The tag definition object.

{}

 (Object)

name

details.Tag.tag.name

The name of the tag being defined.

"FailedAttemptDeviceID"

description

details.Tag.tag.description

The description associated with the new tag.

""

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

response

response

The data returned by the system after successfully executing the action.

{}

 (Object)

tagId

response.tagId

The unique identifier assigned to the newly created tag.

"33dfbdc2-a963-4890-8757-d48mom8679f0"

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"DeleteDraft"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

request

request

Data fields provided in the initial request to perform the deletion.

{}

 (Object)

versionID

request.versionID

The unique identifier of the draft version being deleted.

"f572e6e8-8ae4-42a6-8f18-f8fd3a152f1f"

response

response

The data returned by the system after successfully executing the action.

{}

 (Object)

newDraftID

response.newDraftID

The unique identifier of the resulting new draft that replaces the deleted one.

"4e7a94c8-g256-42e4-9c24-bca4dcc15a5b"

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

listName

metadata.listName

Placeholder for the name of a managed list.

""

listType

metadata.listType

Placeholder for the type of a managed list.

""

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the system.

"ListCDFs"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

request

request

The parameters provided for the request (empty in this case).

{}

 (Object)

response

response

The data returned by the system containing the list of CDFs.

{}

 (Object)

cdfs

response.cdfs

An array containing details for each Custom Defined Field (CDF).

[]

 (Array)

cdfId

response.cdfs[*].cdfId

The unique identifier (GUID) for the specific CDF.

"00344e65-e7ac-4d55-86ab-379d59ea37e3"

cdfKey

response.cdfs[*].cdfKey

The key name for the CDF.

"typewriter"

cdfValueType

response.cdfs[*].cdfValueType

An integer code representing the data type of the CDF's value.

CDF value types:

1

lastSeen

response.cdfs[*].lastSeen

The timestamp of the last time this CDF was seen/used in an order.

1757993786

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed: deleting a risk policy.

"Delete policy"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

request

request

The parameters identifying the policy to be deleted and the user.

{}

 (Object)

author

request.author

The name of the user requesting the deletion.

"Jane Doe"

eventType

request.eventType

The numerical identifier for the type of event this policy applied to.

1

policyId

request.policyId

The unique ID of the policy being deleted.

"86c880fe-015a-4689-9bf1-7f8cc6004645"

response

response

The data returned by the system after executing the action (empty upon successful deletion).

{}

 (Object)

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"SaveSegment"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

response

response

The data returned by the system upon successfully saving the segment.

{}

 (Object)

ID

response.ID

The unique identifier assigned to the newly saved segment.

"17fe9ea0-de93-4763-9ac0-bc9b21195905"

request

request

The configuration object defining the new segment.

{}

 (Object)

active

request.active

Boolean indicating if the segment should be active immediately upon saving.

true

name

request.name

The name of the segment being saved.

"User Type AZN"

lastModifiedBy

request.lastModifiedBy

The name of the user who last modified the segment.

"Jane Doe"

versionID

request.versionID

The ID of the current version being saved.

"3ad46979-78fb-4eef-84cd-f72a936973cd"

mfaEnabled

request.mfaEnabled

Boolean flag indicating if Multi-Factor Authentication is enabled for the segment.

true

baseExpression

request.baseExpression

The root container for the segment's logical condition structure.

{}

 (Object)

operator

request.baseExpression.operator

The primary logical operator (AND/OR) linking groups of expressions (1 typically means AND).

1

groupExpressions

request.baseExpression.groupExpressions

An array of groups, each containing one or more conditions.

[]

 (Array)

englishTransFactName

request.baseExpression.groupExpressions[*].conditions[*].englishTransFactName

The title of the condition.

"User Type"

fieldName

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].fieldName

The type of comparison being performed.

"comparator"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].rawValue

The selected comparison type.

"EQUAL"

fieldName

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[1].fieldName

The field name for the value being checked.

"value"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[1].rawValue

The literal value required by the condition.

"AZN"

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"PublishVersion"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

request

request

The parameters identifying the version to be published and the author.

{}

 (Object)

author

request.author

The name of the user publishing the version.

"Jane Doe"

policySetID

request.policySetID

The unique ID of the policy set to which the version belongs.

"ca767727-040e-4031-8846-a9389c7cfc0b"

versionID

request.versionID

The ID of the specific draft version being promoted to production.

"a3be5ea9-da9e-4ade-afde-c2c6baaf1274"

response

response

The data returned by the system after successfully executing the action.

{}

 (Object)

newDraftVersionID

response.newDraftVersionID

The unique ID of the resulting new draft version created automatically after publication.

"571df0a8-3f35-4816-931b-8f7cca9743a7"

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed: setting a policy version as active/running.

"SetRunningPolicySet"

userId

userId

The generic internal unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The generic username or email of the user who initiated the request.

"user@example.com"

request

request

The parameters identifying the policy set and user performing the action.

{}

 (Object)

author

request.author

The name of the user setting the policy.

"Jane Doe"

eventType

request.eventType

The numerical identifier for the type of event this policy set applies to (e.g., 1 might mean "Login").

1

policySetID

request.policySetID

The unique ID of the specific policy set being activated.

"ca767727-040e-4031-8846-a9389c7cfc0b"

response

response

The data returned by the system after executing the action (empty in this case).

{}

 (Object)

metadata

metadata

Placeholder or generic metadata associated with the action.

{}

 (Object)

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"SavePolicyV2"

userId

userId

The internal unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@example.com"

response

response

The data returned by the system upon successfully saving the policy.

{}

 (Object)

ID

response.ID

The unique identifier assigned to the saved policy draft.

"a0ef9t68-4eb5-48e7-98fa-9fe4802ccedf"

request

request

The configuration object defining the new policy.

{}

 (Object)

name

request.name

The name of the policy being saved.

"Login Velocities Check - 3"

outcome

request.outcome

The default action to be taken if the rule conditions are met.

"Challenge"

lastModifiedBy

request.lastModifiedBy

The name of the user who last modified the policy.

"Jane Doe"

versionID

request.versionID

The unique ID of the version being saved.

"3ad43259-78fb-4eef-84cd-f72a936973cd"

baseExpression

request.baseExpression

The root container for the policy's logical condition structure.

{}

 (Object)

operator

request.baseExpression.operator

The logical operator (AND/OR) connecting groups of conditions.

1

groupExpressions

request.baseExpression.groupExpressions

An array of groups, each containing one or more conditions.

[]

 (Array)

name

request.baseExpression.groupExpressions[*].conditions[*].name

The internal technical name of the condition/fact being checked.

"deviceLoginAttempts"

englishTransFactName

request.baseExpression.groupExpressions[*].conditions[*].englishTransFactName

The title of the condition.

"Login Attempts per Device ID"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].rawValue

The configured value for a condition parameter (e.g., the threshold count).

"4"

fieldName

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].fieldName

The specific parameter name (e.g., threshold count or time bucket).

"value"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].rawValue

The configured time window for the velocity check (in minutes).

"1440"

selectedTags

request.selectedTags[*].name

The name of a pre-existing tag associated with the policy.

"FailedAttemptDeviceID"

tags

request.tags[*]

An array of tag IDs associated with the policy.

"33doiuc2-a963-4890-8757-d48dad8679f0"

Data Point

PATH

Definition

Sample Data

action

action

The operation being performed by the user or system.

"UpdatePolicyV2"

userId

userId

The unique identifier for the user who initiated the request.

"USER_ID_HASH"

username

username

The username or email of the user who initiated the request.

"user@generic-domain.com"

response

response

The data returned by the system upon successfully updating the policy.

{}

 (Object)

ID

response.ID

The unique identifier of the updated policy record.

"65724bf5-64d9-443e-826e-52451e985665"

request

request

The configuration object defining the policy update.

{}

 (Object)

ID

request.ID

The ID of the policy being updated.

"65724bf5-64d9-443e-826e-52451e985665"

name

request.name

The updated name of the policy.

"Login Velocities Check - 1"

outcome

request.outcome

The outcome action to be taken if the rule conditions are met.

"Challenge"

lastModifiedBy

request.lastModifiedBy

The name of the user who last modified the policy.

"Jane Doe"

baseExpression

request.baseExpression

The root container for the policy's logical condition structure.

{}

 (Object)

operator

request.baseExpression.operator

The primary logical operator (AND/OR) linking group expressions.

1

groupExpressions

request.baseExpression.groupExpressions

An array of condition groups.

[]

 (Array)

operator

request.baseExpression.groupExpressions[*].operator

The logical operator linking conditions within the group.

1

name

request.baseExpression.groupExpressions[*].conditions[*].name

The internal name of the condition being checked.

"ipOrgFailedAttempts"

englishTransFactName

request.baseExpression.groupExpressions[*].conditions[*].englishTransFactName

The title of the condition.

"Failed Attempts per IP Organization"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[*].rawValue

The configured threshold value (for example, the count of failed attempts).

"4"

rawValue

request.baseExpression.groupExpressions[*].conditions[*].fieldConfigs[1].rawValue

The configured time window for the velocity check (in minutes).

"1440"

selectedTags

request.selectedTags[*].name

The name of a pre-existing tag associated with the policy.

"FailedAttmptPerOrg"

tags

request.tags[*]

An array of tag IDs associated with the policy.

"adc6b933-bfd0-4826-b89f-3f11320e13d9"