# Strale IP Risk Score

> Strale IP Risk Score is a paid API for AI agents from api.strale.io, paid per call via x402, $0.0324/call, status unknown (last checked 2026-09-14).

Returns a risk score and threat intelligence for a given IP address (IPv4 or IPv6), including fraud, proxy, VPN, and bot indicators.

## Facts

- Endpoint: GET https://api.strale.io/x402/v2/ip-risk-score
- Price: $0.0324/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/strale-ip-risk-score-e75e1e5d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HjsJqXlTulr1M14xazoz7

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability strale-ip-risk-score-e75e1e5d
```

Example prompt: Can you check the risk score for IP address 185.220.101.42 — I want to know if it's a VPN, proxy, bot, or known fraud source before I let it through?

## When to prefer this

Choose this endpoint when you need a auditable, pay-per-call IP risk assessment with cryptographic provenance guarantees — especially useful in agentic workflows requiring tamper-evident records. Prefer this over generic IP lookup APIs when compliance, auditability, or multi-signal threat classification (VPN + proxy + bot + fraud combined) is required.

## Known failure modes

- Missing or malformed IP address returns a 400 validation error
- Invalid IP format (e.g. non-routable or malformed string) returns a 422 unprocessable entity
- Insufficient USDC balance or failed x402 micropayment returns a 402 Payment Required error
- Rate limiting or quota exhaustion returns a 429 Too Many Requests error
- Upstream threat intelligence provider unavailability may return a 503 or partial result

## How this service works

The trust layer for AI agents — 250+ independently tested data capabilities across 27 countries. Execute capabilities via REST, MCP, A2A, or x402 micropayments. Every call returns an audit record with cryptographic chain hashing.

## Output

A structured JSON object containing a numerical risk score for the IP, along with categorical flags (e.g. VPN, proxy, Tor, bot, data center, residential), geographic context, and a cryptographically hashed audit record for provenance verification.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/strale-ip-risk-score-e75e1e5d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.strale.io](https://www.zero.xyz/host/api.strale.io/llms.txt)