Domain name for API request: rce.intl.tencentcloudapi.com.
Used to obtain real-time risk information for events. It evaluates and returns risk decision results, risk scores, and risk tags based on device risk, environmental risk, account risk, behavioral risk, and historical reported event data for critical events in your business.
A maximum of 1000 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: AssessRisk. |
| Version | Yes | String | Common Params. The value used for this API: 2026-01-30. |
| Region | Yes | String | Common Params. For more information, please see the list of regions supported by the product. |
| EventCode | Yes | String | Event code. Used to specify the scenario node for business access. Standard events under the account protection product include:
Standard events under the payment protection product include:
Standard events under the promotion protection product include:
Custom events can be evaluated for risk based on an agreement with RCE |
| EventTime | Yes | String | The time when the event occurred Parameter format: Millisecond-level time with UTC time zone compliant with the ISO 8601 standard |
| SessionId | Yes | String | The user's current session ID used to associate with the actions before and after logging in. If UserId is not passed, SessionId is required. If missing, an empty string can be filled. |
| DeviceToken | Yes | String | Device fingerprint token, obtained after integration of the device fingerprint SDK into your website or application |
| UserIp | Yes | String | Client IP address (IPv4 or IPv6) |
| EventDetail | Yes | EventDetail | Event details. The event information is imported based on the event code you input. |
| UserId | No | String | The user's account ID in your system |
| UserEmail | No | String | Email of the user |
| UserPhone | No | String | Phone number of the user. Parameter format: Complies with the E.164 standard format, which includes "+", region code, and number |
| Browser | No | Browser | The details of the browser. If you've already integrated our device SDK, this field is not required |
| App | No | App | The details of the app, os and device.If you've already integrated our device SDK, this field is not required |
| Parameter Name | Type | Description |
|---|---|---|
| Data | AssessRiskRsp | The results of AssessRisk |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
POST / HTTP/1.1
Host: rce.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: AssessRisk
<Common request parameters>
{
"EventCode": "login",
"EventTime": "2026-07-08T15:56:31.000+08:00",
"SessionId": "se****************56",
"DeviceToken": "v3:******************************************************************bzxeC9FTtHon0Vq+zEB0iKhM5OGvG",
"UserIp": "192.***.*.100",
"EventDetail": {
"Login": {
"UserInfo": {
"UserLevel": "golden",
"UserPoint": {
"Point": 10,
"PointType": "credit_point"
},
"UserType": "person"
},
"UserLoginName": "u_dscv",
"LoginResult": {
"Status": "success"
},
"Cust": [
{
"Key": "registration_channel",
"Value": "web"
}
]
}
},
"UserId": "u********6",
"UserEmail": "u***********.com",
"UserPhone": "+86138********",
"Browser": {
"UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36",
"AcceptLanguage": "zh-CN,zh;q=0.9,en;q=0.8",
"ContentLanguage": "zh-CN"
},
"App": {
"OS": "iOS",
"OSVersion": "16.0",
"DeviceManufacturer": "Apple",
"DeviceModel": "iPhone 14 Pro",
"DeviceId": "de**************3",
"AppName": "MyShoppingApp",
"AppVersion": "3.2.1",
"ClientLanguage": "zh-CN"
}
}{
"Response": {
"Data": {
"Decision": {
"DecisionResult": "reject"
},
"ExtraInfo": [
{
"Key": "DeviceId",
"Value": "weffdsdffdff"
}
],
"Score": {
"RiskLabels": [],
"RiskScore": 20
}
},
"RequestId": "65af642d-f2df-4e03-b93d-8c7820f4deda"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
| Error Code | Description |
|---|---|
| InternalError.SystemException | System exception. |
| InvalidParameter | Invalid parameter. |
| InvalidParameter.FieldMissed | Field missed. |
| InvalidParameter.InvalidFormat | Invalid field format. |
| InvalidParameter.InvalidValue | Invalid field value. |
| InvalidParameter.LengthExceed | Field length exceeds the maximum limit. |
| InvalidParameterValue.DataUnauthorized | Data is unauthorized. Check the data authorization letter. |
| InvalidParameterValue.DuplicatedKey | Custom parameter keys cannot be duplicated. |
| InvalidParameterValue.EventNotExist | Event not exist. |
| InvalidParameterValue.InvalidEventTime | EventTime differs too much from the current system time |
| InvalidParameterValue.TenantNotExist | Tenant not exist. |
| MissingParameter | Missing parameter. |
| MissingParameter.FieldMissed | Missing required field. |
| UnauthorizedOperation | Unauthorized operation. |
フィードバック