A rule-based decision engine for your authentication flow. Block bots, allow humans, and dynamically challenge suspicious traffic via a single API call.
Trusted by thousands of developers
Features
Stop bad actors at the door with intelligent validation that adapts without code changes.
Watch traffic in real-time
Monitor decision velocity and catch sudden spikes in bot activity before they impact your infrastructure.
Identify risk patterns
View breakdowns of matched rules and high-risk signals to understand exactly who is targeting your app.
Debug issues instantly
Search any request to see the full "why" behind a decision. Perfect for resolving support tickets and auditing false positives.
Iterate without deploying
Create and update complex validation logic visually. Push new rules to production immediately, no code required.
Signals
Build powerful rules using comprehensive email, domain, and IP data
Rule Engine
Build Gates for signups, password resets, high-value actions, or anywhere abuse starts. Mix email, domain, and IP signals with clear allow, challenge, and block outcomes.
Integration
Send user data to your Gate and get a decision in milliseconds.
Offload complex validation logic without slowing down your UX.
curl --request POST \
--url https://api.usercheck.com/v0/gates/{gate_id}/decisions \
--header 'Authorization: Bearer V09XIFlPVSdSRSBBIEhBQ0tFUg==' \
--json '{
"email": "[email protected]",
"ip": "1.1.1.1"
}'{
"decision": {
"action": "block",
"matched_rule": {
"name": "Block domains with no MX records",
"message": "This domain is invalid."
}
},
"signals": {
"email": { "disposable": false, "role_account": true },
"domain": { "mx": false, "age_days": 10948 },
"ip": { "geo": { "country": "Hong Kong" } }
}
}{
"input": {
"email": "[email protected]",
"ip": "1.1.1.1"
},
"decision": {
"action": "block",
"matched_rule": {
"id": "01k1hxqrn2f7xfreq20y0p012d",
"name": "Block domains with no MX records",
"message": "This domain is invalid."
}
},
"signals": {
"email": {
"address": "[email protected]",
"normalized": "[email protected]",
"domain": "example.com",
"local_part": "user",
"local_part_length": 5,
"subaddress": null,
"disposable": false,
"role_account": true
},
"domain": {
"name": "example.com",
"tld": "com",
"sld": "example",
"subdomain": null,
"age_days": 10948,
"mx": false,
"mx_records": [],
"disposable": false,
"public_domain": false,
"relay_domain": false,
"spam": false,
"blocklisted": false
},
"ip": {
"address": "1.1.1.1",
"abuse": { "detected": false },
"anonymity": {
"proxy": { "detected": false },
"relay": { "detected": false },
"tor": { "detected": false },
"vpn": { "detected": false }
},
"geo": {
"city": "Hong Kong",
"country": "Hong Kong",
"country_code": "HK",
"continent": "Asia",
"continent_code": "AS"
},
"hosting": { "detected": true },
"network": {
"asn": 13335,
"aso": "Cloudflare, Inc.",
"domain": "cloudflare.com",
"type": "hosting"
}
}
},
"meta": {
"version": "0.1",
"request_id": "01K1SKM0ZDCEEES5QA9N3M5EPX",
"duration_ms": 52.62,
"created_at": "2025-08-04T03:57:18+00:00"
}
}Comparison
Gates is built on top of our email/domain signals and adds IP intelligence + handles the decision logic for you.
| Email/Domain API | Gates | |
|---|---|---|
| Email & domain signals | ||
| IP intelligence | ||
| Decision logic | You build it | Visual rule builder |
| Update rules | Requires deploy | Instant, no code |
| Decision audit log | You build it | |
| Real-time analytics | You build it |
Gates is available on all Pro plans, starting at $50/month.
No extra fees, unlimited rules.
If you have anything else you want to ask, reach out to us.
Gates is a rule-based decision engine that combines UserCheck's email and domain signals with built-in IP intelligence. Define rules in a visual builder and call a single API endpoint to get allow, block, or challenge decisions.
The Data API returns raw email and domain signals and leaves decision logic to you. Gates adds IP intelligence (VPN, proxy, Tor, geolocation), applies your rules server-side, and returns a single verdict. Update validation logic without deploying code, with built-in analytics and audit logs.
Gates has access to 30+ signals: Email (disposable, role account, subaddressing), Domain (MX records, spam, blocklisted), and IP (VPN, proxy, Tor, geolocation, ASN). Combine with AND/OR logic.
Pro plans include unlimited Gates. Create separate Gates for signups, password resets, checkout, each with their own rules and analytics to tune protection based on risk profile.
Yes! Incrementally adopt Gates by recreating your existing logic in the rule builder, then swap out API calls one endpoint at a time. Check our migration guide.
No, Gates is only available in our Pro plans.
Create your first Gate today and start protecting your application with rule-based intelligence.
1,000 free requests each month. No credit card required.