composer require keverd/keverd

<?php

use Keverd\Keverd;

$keverd = new Keverd([
    'secretKey' => getenv('KEVERD_SECRET_KEY'), // kv_sk_…
]);

$result = $keverd->verify($eventId);

if (($result['action'] ?? null) === 'block') {
    // reject
} elseif (($result['action'] ?? null) === 'allow') {
    // continue
}

POST https://api.keverd.com/v2/verify
X-Secret-API-Key: kv_sk_…
Content-Type: application/json

{
  "event_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
}

{
  "event_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "fingerprint": "kvd_…",
  "visitor_id": "kvd_…",
  "risk_score": 42,
  "recommendation": "allow",
  "action": "allow",
  "reason": ["VPN_DETECTED"],
  "reasons": [
    {
      "code": "VPN_DETECTED",
      "explanation": "The connection appears to route through a VPN.",
      "evidence": {}
    }
  ],
  "score": 0.42,
  "trust_score": 70,
  "reputation_score": null,
  "signals": {},
  "smart_signals": {
    "vpn_detected": true,
    "action": "allow",
    "risk_score": 42
  },
  "created_at": "2026-07-25T12:00:00Z",
  "country_code": "KE",
  "country_name": "Kenya",
  "page_url": "https://example.com/login",
  "page_origin": "https://example.com",
  "location": { "ip": "203.0.113.10", "country_code": "KE" },
  "ip_info": { "asn": "13335", "asn_name": "Example ISP", "datacenter": false },
  "times_seen": 3,
  "first_seen": "2026-07-01T09:00:00Z",
  "last_seen": "2026-07-25T12:00:00Z",
  "is_new": false,
  "device_history": {
    "times_seen": 3,
    "first_seen": "2026-07-01T09:00:00Z",
    "last_seen": "2026-07-25T12:00:00Z",
    "is_new": false,
    "unique_ip_count": 2,
    "unique_country_count": 1,
    "last_seen_events": []
  }
}

{
  "eventId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "email": "user@example.com",
  "password": "…"
}

use Keverd\Keverd;
use Illuminate\Http\Request;

Route::post('/login', function (Request $request) {
    $keverd = new Keverd(['secretKey' => config('services.keverd.secret')]);
    $risk = $keverd->verify($request->input('eventId'));

    if (($risk['action'] ?? null) === 'block') {
        return response()->json([
            'error' => 'Blocked',
            'reasons' => $risk['reasons'] ?? [],
        ], 403);
    }

    return response()->json([
        'ok' => true,
        'visitorId' => $risk['visitor_id'] ?? null,
        'timesSeen' => $risk['times_seen'] ?? null,
        'isNew' => $risk['is_new'] ?? null,
    ]);
});

Route::post('/webhooks/keverd', function (Request $request) {
    $keverd = new Keverd(['secretKey' => config('services.keverd.secret')]);

    $event = $keverd->webhooks->constructEvent(
        $request->getContent(), // raw body
        $request->header('X-Keverd-Signature', ''),
        config('services.keverd.webhook_secret'),
    );

    if ($event['type'] === 'verification.completed') {
        $verification = $event['data']['object']; // same JSON as verify()
    }

    return response()->noContent();
});