Skip to main content
GET
curl
List fraud networks detected for your organization, newest activity first by default. Every filter available in the Console’s Networks list is exposed as a query parameter, including free-text q search and the same status, signal, pattern, and risk-band chips.
Sandbox applications never have networks. Clustering runs on production data only.

Authorizations

x-api-key
string
header
required

Path Parameters

organization_id
string<uuid>
required

Organization UUID.

application_id
string<uuid>
required

Application UUID.

Query Parameters

status
string

Comma-separated statuses to include: active,in_review,resolved,dismissed. Omit to exclude dismissed.

signal_type
string

Comma-separated signal types: ip_address,device,face,document_number,phone,email,address.

pattern_type
string

Comma-separated pattern types, e.g. exact_same_device,same_email.

risk_band
string

Comma-separated bands: low,medium,high.

min_size
integer

Minimum member count.

max_size
integer

Maximum member count.

date_from
string<date>

Lower bound on last_activity_at (ISO 8601 date or datetime).

date_to
string<date>

Upper bound on first_activity_at (ISO 8601 date or datetime).

q
string

Free-text search across network name, member names, the network_id (N-0001), and exact pattern_type tokens.

ordering
string

One of risk_score, -risk_score, last_activity_at, -last_activity_at, first_activity_at, -first_activity_at, network_number, -network_number. Defaults to -risk_score,-last_activity_at.

limit
integer
default:100

Page size, 1-500. Defaults to 100.

Required range: 1 <= x <= 500
offset
integer
default:0

Zero-based offset of the first record.

Required range: x >= 0

Response

200 - application/json

Paginated network list with console KPIs.

count
integer
next
integer | null

Offset of the next page, or null on the last page.

previous
integer | null
results
object[]
kpis
object

Each key is {value, delta} over the current filtered queryset.