Introduction
StaySignals is a booking-fraud trust layer for hotel OTAs.
StaySignals detects non-customer traffic — bookings that aren't real intent to stay — before you fulfill them. That includes automated bots and AI agents going through checkout, and it includes humans going through checkout with no genuine intent to stay at the property.
You integrate in two places.
- Browser SDK. A single
<script>tag loaded on every page of your site. The SDK observes session behavior across the whole booking flow and attaches a session identifier to each visitor. - Risk API. One server-to-server
POST /v1/riskcall right before you commit a reservation. StaySignals returns adecision— a risk score, a risk level, and a suggested action (allow,challenge, ordeny).
You decide what to do with the suggestion.
How it fits together
The SDK runs in the browser and collects device and behavior signals throughout the booking flow. When the user submits checkout, your server calls /v1/risk with the booking details plus the session ID, and you route the checkout based on suggested_action.
Start here
Quickstart
Paste one script tag and run one curl. Five minutes end-to-end.
Install the SDK
How to load staysignals.js across your site and forward the session ID to your server.
Risk API
Authenticate, call the endpoint, and handle the response.
Decisions
What a decision is and what you get back for each call.