Card Validation

async function assessRisk(cardBin, payerInfo, apiKey) {
  const response = await fetch(
    `https://api.orchestrasolutions.com/Tools/validate?iin=${cardBin}`,
    {
      method: 'POST',
      headers: {
        'X-Api-Key': apiKey,
        'Content-Type': 'application/json'
      },
      body: JSON.stringify({
        clientIPAddress: payerInfo.ip,
        countryCode: payerInfo.country,
        city: payerInfo.city,
        stateProvince: payerInfo.state
      })
    }
  );
  const result = await response.json();

  if (result.riskLevel === 'VeryHigh' || result.riskLevel === 'High') {
    console.warn(`High risk: ${result.description}`);
    console.warn(`Card from ${result.issuerCountry}, IP from ${result.countryByIP}, billing from ${result.countryFromBillingAddress}`);

    if (result.anonymousProxyUsed) {
      console.warn('Anonymous proxy detected');
    }
    return { approved: false, reason: result.description };
  }

  return { approved: true, riskLevel: result.riskLevel };
}

const risk = await assessRisk('411111', {
  ip: '203.0.113.42',
  country: 'US',
  city: 'New York',
  state: 'NY'
}, 'YOUR_API_KEY');

import requests

def assess_risk(card_bin, payer_ip, payer_country, api_key, city=None, state=None):
    """Assess transaction risk based on card origin vs payer location."""
    response = requests.post(
        'https://api.orchestrasolutions.com/Tools/validate',
        params={'iin': card_bin},
        headers={
            'X-Api-Key': api_key,
            'Content-Type': 'application/json'
        },
        json={
            'clientIPAddress': payer_ip,
            'countryCode': payer_country,
            'city': city,
            'stateProvince': state
        }
    )
    response.raise_for_status()
    result = response.json()

    if result['riskLevel'] in ('High', 'VeryHigh'):
        print(f"WARNING: {result['description']}")
        print(f"  Card issuer: {result['issuerCountry']}")
        print(f"  IP location: {result['countryByIP']}")
        print(f"  Billing:     {result['countryFromBillingAddress']}")
        print(f"  Proxy:       {result['anonymousProxyUsed']}")
        return False

    return True

is_safe = assess_risk('411111', '203.0.113.42', 'US', 'YOUR_API_KEY',
                       city='New York', state='NY')

curl -X POST "https://api.orchestrasolutions.com/Tools/validate?iin=411111" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "clientIPAddress": "203.0.113.42",
    "countryCode": "US",
    "city": "New York",
    "stateProvince": "NY"
  }'