One API Call. Spam Solved.
Send a POST request with the content, email, and IP. Get back a spam verdict with confidence score and detection signals in milliseconds. Works with any language, any framework, any platform. No CAPTCHAs. No SDKs required.
→ { “is_spam”: true, “total_score”: 98 }
Built by the Same Team Whose Software is Trusted by
30,000,000+ Websites Worldwide.
Everything You Need to Stop Spam via REST API
Single REST Endpoint
One POST to `https://api.activelayer.com/api/v1/check`. Send JSON, receive JSON. Works with cURL, fetch, requests, HttpClient, or any HTTP library in any language.
Bearer Token Authentication
Secure API key authentication via standard Authorization header. Generate keys from your dashboard. Rotate them anytime. No OAuth complexity. No session management.
Aggregate Spam Score
The response includes total_score, threshold, and is_spam. Use the verdict in your submission flow and keep the detection ID for feedback.
Detection ID
Every check returns a detection_id you can use to send feedback about a false positive or false negative.
Single Submission Check
Send one submission to POST /api/v1/check and receive a spam verdict with a detection ID.
Feedback API
Report false positives and false negatives with `POST /v1/feedback`. Your corrections train the model for your specific use case. The more feedback you send, the smarter your detection gets.
Check Your Usage
Use GET /api/v1/stats to review your plan status and usage.
Usage Statistics
Use GET /api/v1/stats to review your plan status and remaining checks.
12ms Average Response
Spam verdicts return faster than most database queries. Your users never notice the check. Your API stays fast. Your throughput stays high.
Three Steps. One Endpoint. Any Language.
Get Your API Key
Create a free ActiveLayer account. Copy your API key from the dashboard. No credit card required. No approval process. Your key works immediately with full API access.
Send a POST Request
Send the required message field and any available sender fields to POST /api/v1/check. See the API reference for a copy-paste cURL request.
Get Your Verdict
ActiveLayer returns a JSON response with a clear spam/not-spam verdict, a confidence score, human-readable detection signals, and the response time. Use these fields to block, flag, or allow the submission.
Why Developers Choose a REST API Over CAPTCHAs
The spam protection approach that fits how you already build.
You Pick the Stack. ActiveLayer Works With It.
Every other spam protection tool locks you into a specific ecosystem — reCAPTCHA needs a JavaScript widget, Akismet has SDKs for only a handful of languages. ActiveLayer is a single REST endpoint: if your language can send an HTTP POST and parse JSON, you’re integrated. No SDK versioning issues, no framework-specific adapters. You make an HTTP request; you get a JSON response.
Get Started for Free
Node.js
PHP
Python
Ruby
.NET
Java
Nothing for Bots to Bypass.
CAPTCHAs live in the browser, which means bots can study them, farms can solve them, and your users have to suffer through them. Bots can’t bypass what they can’t see.
Get Started for Free
Know Exactly Why Every Submission Was Flagged.
Most spam filters give you a binary yes or no. ActiveLayer gives you the full picture: every response includes a confidence score from 0 to 1 and an array of detection signals explaining exactly what triggered the verdict — “promotional_content,” “disposable_email,” “tor_exit_node.” Set different thresholds for different endpoints: block at 0.95 for signups, flag for review at 0.7 for comments. Your API, your logic, your thresholds.
Get Started for FreeA Simple API for Spam Checks and Feedback.
The public API provides individual spam checks, comment checks, feedback, credential verification, and usage statistics. See the API reference for supported requests and responses.
Get Started for Free
Frequently Asked Questions
Free plan includes 200 checks in total. Pro plan ($19/month) includes 25,000 checks per month. Every API response includes `X-RateLimit-Remaining` and `X-RateLimit-Reset` headers so you can monitor usage in real time. If you exceed your limit, the API returns a 429 status code. No surprise charges.
Check the service status for current availability. Design your form handler to distinguish unchecked submissions from successful checks when the API is unavailable.
Standard Bearer token authentication. Include your API key in the Authorization header: `Authorization: Bearer YOUR_API_KEY`. Generate and rotate keys from your dashboard. Each key has full API access. No OAuth flows, no token refresh, no session management.
The public API currently accepts one submission per check request. Batch processing is not available.
The public API does not document webhook notifications. Use GET /api/v1/stats to check plan status and usage.
No. ActiveLayer is a standard REST API. Use any HTTP client in any programming language. cURL, fetch, requests, HttpClient, Faraday, http.Client — whatever you already use. The API accepts JSON and returns JSON. No SDK to install, maintain, or update. No dependency to audit.
ActiveLayer logs submitted content, sender IP address, user agent, and the verdict for up to 90 days, configurable per account, to support feedback and audits. See our Privacy Policy and Data Processing Agreement.
The API reference documents POST /api/v1/check, POST /api/v1/check-comment, POST /api/v1/feedback, GET /api/v1/verify, and GET /api/v1/stats. See the API reference for request and response examples.
Other spam problems we solve
One API key covers every use case on your account.
Eliminate Spam. Protect Every Lead.
It’s That Simple.
Join the thousands of website owners, agencies, and developers who use ActiveLayer to stop spam and protect every real submission.
Get Started for Free