# Risk

Payments the fraud rules flagged or blocked.

## List flagged payments

`GET /v1/risk/flags`

Payments Mayarin's fraud rules flagged (`REVIEW`, went ahead) or blocked (`BLOCKED`, refused at confirm), newest first. Announced by the `payment.flagged` webhook. Needs `payments:read`.

### Query parameters

- `limit` `integer`: Default 50.

### Responses

#### `200`: The flagged payments.

Body (`application/json`):

- `flags` `object[]` _(required)_
  - `id` `string` _(required)_
  - `paymentIntentId` `string` _(required)_
  - `outcome` `string` _(required)_
  - `payer` `string | null` _(required)_
  - `signals` `object[]` _(required)_
    - `rule` `string` _(required)_
    - `detail` `string` _(required)_
  - `assessedAt` `string` _(required)_

#### `403`: The key lacks `payments:read`, or is publishable.

Body (`application/json`):

- `error` `object` _(required)_
  - `code` `string` _(required)_
  - `message` `string` _(required)_
  - `retryable` `boolean` _(required)_
  - `details` `object`

### Example request

```bash
curl 'https://api.mayarin.xyz/v1/risk/flags?limit=0'
```

```ts
fetch('https://api.mayarin.xyz/v1/risk/flags?limit=0')
```