Stop bots, fraud, and spam at every form and endpoint.

curl https://api.formshield.dev/v1/check \
  -H "Authorization: Bearer $FORMSHIELD_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "form_id": "signup",
    "form_data": { "email": "user@example.com" },
    "metadata": { "ip": "203.0.113.42" }
  }'

const res = await fetch("https://api.formshield.dev/v1/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.FORMSHIELD_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    form_id: "signup",
    form_data: { email },
    metadata: { ip },
  }),
});

const { action } = await res.json();
if (action === "block") return reject();

import { NextResponse } from "next/server";

export async function POST(req: Request) {
  const { email, message } = await req.json();

  const fs = await fetch("https://api.formshield.dev/v1/check", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.FORMSHIELD_KEY!}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      form_id: "contact",
      form_data: { message },
      metadata: { email, ip: req.headers.get("x-forwarded-for") },
    }),
  }).then((r) => r.json());

  if (fs.action === "block") return NextResponse.json({ ok: true }); // silent drop
  // ...persist the submission
  return NextResponse.json({ ok: true });
}

import os, requests

r = requests.post(
    "https://api.formshield.dev/v1/check",
    headers={"Authorization": f"Bearer {os.environ['FORMSHIELD_KEY']}"},
    json={
        "form_id": "signup",
        "form_data": {"email": email},
        "metadata": {"ip": ip},
    },
)

if r.json()["action"] == "block":
    abort(403)

<!-- Drop-in beacon: protects pageviews + forms, no backend code -->
<script
  async
  src="https://api.formshield.dev/js/formshield.js"
  data-fs-project-key="fs_pub_live_…"
  data-fs-action="pageview"
  data-fs-mode="pageload"
></script>

{
  "verdict": "spam",
  "score": 6.5,
  "confidence": 0.86,
  "action": "block",
  "signals": {
    "ip":      { "country_code": "RU", "is_datacenter": true, "is_vpn": false },
    "email":   { "is_disposable": true, "provider": "mailinator.com" },
    "content": { "spam_probability": 0.31, "language": "en" }
  },
  "rule_matches": ["datacenter_ip", "disposable_email"],
  "request_id": "req_abc123def456",
  "processing_time_ms": 41
}