Gates
A rule-based decision engine for your authentication flow. Block bots, allow humans, and dynamically challenge suspicious traffic via a single API call.
Trusted by thousands of developers
Features
Stop bad actors at the door with intelligent validation that adapts without code changes.
Watch traffic in real-time
Monitor decision velocity and catch sudden spikes in bot activity before they impact your infrastructure.
Identify risk patterns
View breakdowns of matched rules and high-risk signals to understand exactly who is targeting your app.
Debug issues instantly
Search any request to see the full "why" behind a decision. Perfect for resolving support tickets and auditing false positives.
Iterate without deploying
Create and update complex validation logic visually. Changes apply to new decisions within a few seconds, no deploy required.
Signals
Build powerful rules using comprehensive email, domain, and IP data
Rule engine
Build Gates for signups, password resets, high-value actions, or anywhere abuse starts. Mix email, domain, and IP signals with clear allow, challenge, and block outcomes.
Edit rules in the dashboard, or manage gates and rules from code with the Management API.
Integration
Send user data to your Gate and get a decision in milliseconds.
Offload complex validation logic without slowing down your UX.
curl --request POST \
--url https://api.usercheck.com/v1/gates/{gate_id}/decisions \
--header 'Authorization: Bearer V09XIFlPVSdSRSBBIEhBQ0tFUg==' \
--json '{
"email": "[email protected]",
"ip": "1.1.1.1"
}'{
"action": "block",
"rule": {
"name": "Block domains with no MX records",
"message": "This domain is invalid."
},
"signals": {
"email": { "disposable": false, "role_account": true },
"domain": { "mx": false, "age_days": 11367 },
"ip": { "geo": { "country": "Hong Kong" } }
}
}{
"id": "01k1skm0zdceees5qa9n3m5epx",
"gate_id": "01k2wjgq8rnv6t0aefy3s7xdhb",
"action": "block",
"rule": {
"id": "01k1hxr4m6a2q9w3ztc8gn5b7k",
"name": "Block domains with no MX records",
"message": "This domain is invalid."
},
"input": {
"email": "[email protected]",
"ip": "1.1.1.1"
},
"signals": {
"email": {
"address": "[email protected]",
"normalized": "[email protected]",
"domain": "example.com",
"local_part": "user",
"subaddress": null,
"disposable": false,
"role_account": true
},
"domain": {
"name": "example.com",
"authority": 94,
"tld_trust": 1,
"tld": "com",
"sld": "example",
"subdomain": null,
"age_days": 11367,
"mx": false,
"mx_records": [],
"mx_providers": [],
"spf": "strict",
"dmarc": "reject",
"disposable": false,
"public_domain": false,
"relay_domain": false,
"free_subdomain": false,
"spam": false,
"blocklisted": false
},
"ip": {
"address": "1.1.1.1",
"abuse": { "detected": false },
"anonymity": {
"proxy": { "detected": false },
"relay": { "detected": false },
"tor": { "detected": false },
"vpn": { "detected": false }
},
"geo": {
"city": "Hong Kong",
"country": "Hong Kong",
"country_code": "HK",
"continent": "Asia",
"continent_code": "AS"
},
"hosting": { "detected": true },
"network": {
"asn": 13335,
"aso": "Cloudflare, Inc.",
"domain": "cloudflare.com",
"type": "hosting"
}
}
},
"duration_ms": 52.62,
"created_at": "2026-09-27T03:57:18+00:00"
}Comparison
Gates is built on top of our email/domain signals and adds IP intelligence + handles the decision logic for you.
| Email/Domain API | Gates | |
|---|---|---|
| Email & domain signals | ||
| IP intelligence | ||
| Decision logic | You build it | Visual rule builder or API |
| Update rules | Requires deploy | Seconds, no deploy |
| Decision audit log | You build it | |
| Real-time analytics | You build it |
Gates is available on all Pro plans, starting at $50/month.
No extra fees.
If you have anything else you want to ask, reach out to us.
Gates is a rule-based decision engine that combines UserCheck's email and domain signals with built-in IP intelligence. Define rules in a visual builder and call a single API endpoint to get allow, block, or challenge decisions.
The Data API returns raw email and domain signals and leaves decision logic to you. Gates adds IP intelligence (VPN, proxy, Tor, geolocation), applies your rules server-side, and returns a single verdict. Update validation logic without deploying code, with built-in analytics and audit logs.
Gates has access to 30+ signals: Email (disposable, role account, subaddressing), Domain (MX records, spam, blocklisted), and IP (VPN, proxy, Tor, geolocation, ASN). Combine with AND/OR logic.
As many as you need. Create separate Gates for signups, password resets, and checkout, each with its own rules and analytics. The Management API creates up to 100 Gates per environment and adds up to 200 rules per Gate.
No. The /v0 decision endpoint stays available and its responses won't change. /v1 is now the stable, recommended version. Move whenever it suits you with the v0 to v1 migration guide.
Yes! Incrementally adopt Gates by recreating your existing logic in the rule builder, then swap out API calls one endpoint at a time. Check our migration guide.
No. Gates is included in every Pro plan. The Free plan covers the Data API only.
Yes. The Management API lets you create gates, sync rules from your repository or CI, and read decision logs over REST, with the same API key you use for decisions.
Create your first Gate today and start protecting your application with rule-based intelligence.
1,000 free credits each month. No credit card required.