The scenario: “CloudNote” is a fictional note-taking SaaS — one of our customers. Bots keep creating fake free-trial accounts. CloudNote added one API call to their signup backend. Their visitors never see us — try the presets and watch both sides.
👁 What the visitor sees — CloudNote's website
CCloudNote
Start your free trial
No credit card required
Simulated visitor IP: — in production this comes from the request automatically.
⚙️ What CloudNote's backend does — invisible to the visitor
their code (runs on every signup)
const check = await fetch("https://api.layercall.com/v1/score/user", {
method: "POST",
headers: { "X-Api-Key": process.env.LAYERCALL_API_KEY },
body: JSON.stringify({ ip: visitorIp, email, phone }),
}).then(r => r.json());
if (check.verdict === "block") return reject();
if (check.verdict === "review") return requireEmailVerification();
createAccount(); // allowour JSON response to CloudNote
// submit the form (or pick a preset) to see the live response…
Why CloudNote pays for this: every fake trial account costs them real money (hosting, email sends, support time, polluted analytics, card-testing chargebacks). At $0.002 per check, blocking one bot wave pays for years of lookups.