The trust layer for everything that enters your stack.

// Score an inbound form submission

const res = await fetch(
  "https://api.inputgate.cloud/v1/check",
  {
    method:  "POST",
    headers: {
      "Authorization": `Bearer ${API_KEY}`,
      "Content-Type":  "application/json",
    },
    body: JSON.stringify({
      fields: {
        email:   req.body.email,
        message: req.body.message,
      },
      client_ip: req.ip,
      domain:    "myapp.com",
      context:   "Lead capture form on a real estate website",
      retention: "flagged_only", // GDPR-safe
    }),
  }
);

const { spam_score, is_spam, reason } = await res.json();
if (spam_score > 75) return reject(reason);

import requests

response = requests.post(
    "https://api.inputgate.cloud/v1/check",
    headers={
        "Authorization": "Bearer YOUR_KEY",
        "Content-Type":  "application/json",
    },
    json={
        "fields": {
            "email":   form_data["email"],
            "message": form_data["message"],
        },
        "client_ip": request.remote_addr,
        "domain":    "myapp.com",
        "context":   "Support ticket form for a SaaS product",
        "retention": "flagged_only", # GDPR-safe
    },
)

data = response.json()
if data["spam_score"] > 75:
    raise ValueError(data["reason"])

curl -X POST https://api.inputgate.cloud/v1/check \
  -H "Authorization: Bearer YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "fields": {
      "email":   "user@example.com",
      "message": "Hello, I need help with..."
    },
    "client_ip": "203.0.113.42",
    "domain":    "myapp.com",
    "context":   "Webhook intake for a no-code automation platform",
    "retention": "flagged_only"
  }'