Bulk Identity Risk Scorer (Enterprise)

Use this endpoint when you need to score multiple organizational domains in a single API call, especially for enterprise AI-governance platforms, MSSPs, or identity-posture tools that process many customers at once. It is the most cost-efficient entry point when you have 2–10 domains to evaluate simultaneously, combining breach, infostealer, session, and CVE signals in one pass. Prefer single-domain endpoints if you only need to check one organization, or specialized endpoints (e.g. phishing lookalike, ransomware, SIM-swap) if you need a specific signal type rather than a composite score.

• Exceeds 10 domains per call — API rejects with validation error
• Exceeds 5 agent emails per domain — excess emails may be ignored or rejected
• Missing required 'targets' array — returns 400 bad request
• Invalid email format in agents list — may cause partial scoring or error
• Unknown or unregistered domain — may return null score or low-confidence result
• Network timeout on large batches — retry recommended
• Insufficient USDC balance or x402 payment failure — call blocked before execution