curl --request POST \
  --url https://api.pramaan.dev/v1/capabilities/fraud.device.inspect \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "eventKey": "device-1",
  "subjectKey": "subject-1",
  "session": "synthetic-session"
}
'

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({eventKey: 'device-1', subjectKey: 'subject-1', session: 'synthetic-session'})
};

fetch('https://api.pramaan.dev/v1/capabilities/fraud.device.inspect', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.pramaan.dev/v1/capabilities/fraud.device.inspect"

payload = {
    "eventKey": "device-1",
    "subjectKey": "subject-1",
    "session": "synthetic-session"
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "os": "<string>",
  "browser": "<string>",
  "browserVersion": "<string>",
  "deviceType": "<string>",
  "platform": "<string>",
  "privateBrowsing": true,
  "automated": true,
  "remoteAccess": true,
  "tampered": true,
  "location": {
    "country": "<string>",
    "region": "<string>",
    "city": "<string>",
    "latitude": 0,
    "longitude": 0,
    "accuracy": 1
  },
  "ref": "<string>"
}

{
  "error": {
    "code": "addendum_required",
    "message": "<string>",
    "next": "<string>",
    "request_id": "<string>",
    "retryable": true,
    "effect": "none",
    "slot": "<string>",
    "required_micro": 123,
    "reason": "balance",
    "plan": "<string>",
    "needs": [
      {
        "kind": "approval",
        "detail": "<string>",
        "step": "<string>"
      }
    ]
  }
}