Changelog
What's changed.
Changes that affect what you can call, what comes back, and what you pay for — newest first. Internal maintenance isn't listed.
November 2026
-
Multiple API keys per account
Create up to 20 API keys per account under Dashboard → API access, each with its own description. All keys share the account's daily allowance, and deleting a key stops it immediately.
-
Eight more AI and crawler operators
Eight additional first-party AI and crawler operator sources, refreshed automatically from their own publications.
-
AI and crawler flags
Pro responses gain risk.is_ai and risk.is_crawler, built only from IP ranges operators publish and from forward-confirmed reverse DNS.
October 2026
-
Source resilience
Better handling of failing data sources, and an unreliable source was retired after persistent errors.
-
First-party scanner attribution
risk.is_scanner is now based on scanning projects' own publications and verified reverse DNS, with background verification for newly seen addresses.
July 2026
-
Atomic quota enforcement
Daily request limits are now checked and counted in a single atomic step, which keeps concurrent requests from slipping past an account's allowance.
April 2026
-
Look up your own IP
New endpoint GET /api/lookup/self returns data for the address the request comes from.
March 2026
-
Higher Pro limit
The Pro plan's daily request limit was raised to 40 million requests.
February 2026
-
Another data source
One more independent source joins the set queried and merged for each uncached lookup.
-
country_code and normalised country names
Responses include a two-letter country_code, and country names are normalised to plain English names based on ISO 3166-1.
January 2026
-
Security fixes
Fixes for an open redirect and a timing side channel, and stricter IPv6 input validation.
-
Six new sources and circuit breakers
Six more independent data sources were added, and each source now sits behind a circuit breaker so failures fail over automatically.
December 2025
-
Pro limit raised to 1 million
The Pro plan's daily request limit was raised from 100,000 to 1,000,000 requests.
Looking for how something works today? The documentation always reflects the current API, and bot signals coverage lists every operator currently recognised.