Skip to navigation

Pixalate APIs

Pick the right API, find its base URL, and make your first authenticated request.

Pixalate’s APIs give you invalid traffic (IVT) signals, risk and reputation data for apps and websites, your Pixalate Analytics data, and supply chain checks. Every REST API uses the same authentication: your API key in the x-api-key header.

Which API to use

Hosts and base URLs

Add the endpoint path from the API reference to the base URL.

APIBase URLVersionReference
Fraud API v3https://fraud-api.pixalate.com/api/v33.0.0GET /fraud
Fraud API v2 (legacy)https://fraud-api.pixalate.com/api/v22.0.1GET /fraud
Enrichment API: Mobile Appshttps://api.pixalate.com/api/v22.0.0/mrt/apps
Enrichment API: CTV Appshttps://api.pixalate.com/api/v22.0.0/mrt/ctv
Enrichment API: Domainshttps://api.pixalate.com/api/v22.0.0/mrt/domains
Analytics Reports APIhttps://api.pixalate.com/api/v22.0.0/analytics/reports
SCO Validation & Verification APIhttps://api.pixalate.com/api/v21.0.0/sco
OpenEPG Enrichment API (preview)https://epg-api.pixalate.com/v11.0.0-draft/enrich and /lookup

Pixalate’s MCP connectors aren’t REST APIs. You add them to your AI assistant; see MCPs and agents.

Authentication

Send your API key in the x-api-key request header on every call. The same header works for every API in the table above.

curl "https://fraud-api.pixalate.com/api/v3/fraud?ip=192.0.2.10" \
-H "x-api-key: $PIXALATE_API_KEY"

To get a key, see Authentication and API keys. Pixalate’s MCP connectors usually use a browser sign-in, or you can send this API key instead; see Access and limits.

Quotas and errors

Usage of most APIs counts against a quota set by your plan, and each of those APIs has a free call that reports your quota status. All of them use standard HTTP status codes. See Quotas, limits and errors.

Guides

Questions? Contact support@pixalate.com.