Managing Custom Blocklists

Custom blocklists let you maintain a list of emails, domains, and IP addresses that should be automatically blocked. This feature is available on the Starter plan and above.

How blocklists work

When you add an entry to your blocklist, every future validation request checks against it. If the user's email, domain, or IP matches a blocklist entry, the custom_blocklist check fails and the risk score increases significantly.

Adding entries via the dashboard

1. Go to Blocklists in your dashboard
2. Click Create Entry
3. Choose the type: Email, Domain, or IP
4. Enter the value (e.g., spammer@example.com, shadydomain.com, or 203.0.113.50)
5. Add an optional reason (for your own reference)
6. Set a severity (1–10) — higher severity contributes more to the risk score
7. Save

Adding entries via the API

You can also manage blocklists programmatically:

# Add an entry
curl -X POST https://api.fidro.io/api/blocklist \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "email",
    "value": "spammer@example.com",
    "reason": "Repeated chargeback fraud",
    "severity": 8
  }'

# List entries
curl https://api.fidro.io/api/blocklist \
  -H "Authorization: Bearer YOUR_API_KEY"

# Delete an entry
curl -X DELETE https://api.fidro.io/api/blocklist/ENTRY_ID \
  -H "Authorization: Bearer YOUR_API_KEY"

Blocklist types

Severity levels

Severity controls how much the blocklist match contributes to the risk score:

Public vs private entries

When creating an entry, you can mark it as public. Public entries are shared with the wider Fidro community, helping protect all users. Private entries only apply to your account.