# Identity & Access Security API

> Analyze abnormal authentication patterns, impossible travel, session-hijacking signals, MFA fatigue, account sharing, access-policy conflicts, dormant-account risk, and service-account anomalies—using caller-supplied auth logs, access events, and policy exports with local time/geo/behavioural rules only.

- Product: https://www.brainiac.software/api/identity-security
- Docs: https://www.brainiac.software/api/identity-security/docs
- OpenAPI: https://www.brainiac.software/api/identity-security/openapi.json
- Contact: support@brainiac.software (https://www.brainiac.software/contact)

## Operations

- POST /api/v1/identity-security/authentication-pattern-analyze — $0.04 USDC — Analyze authentication patterns: Identify abnormal authentication patterns from caller-supplied logs using local time-window correlation. VPN/proxy/shared-network labels reduce confidence. Never proof of compromise from a single login. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-authentication-pattern-analyze
- POST /api/v1/identity-security/impossible-travel-detect — $0.05 USDC — Detect impossible travel: Detect geographically inconsistent logins from supplied timestamps and locations. Accounts for VPN/proxy/shared networks and legitimate-travel labels; a single unusual pair is not proof of compromise. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-impossible-travel-detect
- POST /api/v1/identity-security/session-hijacking-signal-detect — $0.04 USDC — Detect session-hijacking signals: Identify suspicious session changes and reuse patterns from caller-supplied session, device, IP, and user-agent fields. Indicators only—not confirmed hijacking. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-session-hijacking-signal-detect
- POST /api/v1/identity-security/mfa-fatigue-detect — $0.04 USDC — Detect MFA fatigue: Detect repeated MFA push/challenge patterns from caller-supplied MFA events that may indicate an MFA fatigue attack. Not confirmation of account takeover. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-mfa-fatigue-detect
- POST /api/v1/identity-security/account-sharing-detect — $0.04 USDC — Detect account sharing: Identify suspicious account-sharing patterns from multi-device, multi-location, and near-simultaneous authentications. Shared-network context is treated as a mitigating factor. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-account-sharing-detect
- POST /api/v1/identity-security/access-policy-conflict-detect — $0.03 USDC — Detect access-policy conflicts: Detect conflicting allow/deny access rules from caller-supplied policy exports for the same principal, resource, and action. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-access-policy-conflict-detect
- POST /api/v1/identity-security/dormant-account-risk-detect — $0.03 USDC — Detect dormant-account risk: Identify risks from inactive but enabled accounts using caller-supplied account inventory and optional recent auth events. Hygiene signal only—not confirmed compromise. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-dormant-account-risk-detect
- POST /api/v1/identity-security/service-account-anomaly-detect — $0.04 USDC — Detect service-account anomalies: Analyze unusual service-account activity such as interactive logins, off-hours use, and high application/IP diversity from caller-supplied events. Docs: https://www.brainiac.software/api/identity-security/docs#identity-security-service-account-anomaly-detect