Skip to content
ProductArena

How Riskified’s scores are calculated

The full audit trail, recomputed from the verdict data at build time through the same code that produced the leaderboard: verdict × quality × story weight per cell, cells sum to dimension scores, dimensions blend into the PA Score. Every number on the product page is reproducible from this page alone; for why the formula looks like this, see the methodology.

verdict factors: full ×1.0 · partial ×0.6 · disputed ×0.3 · none ×0.0 · n/a excluded from both sides · cell points = weight × quality × factor · cell max = weight × 10

PA Score13/100

Agent-ready 36.3 × 0.30 = 10.89

API quality 0.0 × 0.20 = 0.00

Openness 0.0 × 0.20 = 0.00

Built-in AI 0.0 × 0.15 = 0.00

Automation 10.8 × 0.15 = 1.62

(10.89 + 0.00 + 0.00 + 0.00 + 1.62) ÷ (0.30 + 0.20 + 0.20 + 0.15 + 0.15) = 12.51 ÷ 1.00 = 12.5

Scores are stored to 1 decimal; the product page’s pills round to whole numbers for display. Each dimension below shows the stories, verdicts, and cited evidence behind its number.

Agent-ready36.3/100×0.30 of the PA blend

Outside-in: can YOUR agent reach and drive this product — API, MCP, CLI, headless runs, agent docs.

Point an agent at llms.txt or agent-oriented docsweight 2

2 (weight) × 8 (quality) × 1.0 (full) = 16.0 of 20 max

  • [probe] https://developers.riskified.com/llms.txt“PROBE llms.txt: HTTP 200 at https://developers.riskified.com/llms.txt # Riskified documentation Documentation > Riskified Documentation Append .md to any documentation page URL to get its”

Run the product headlessly / in CI for automationweight 2

2 (weight) × 4 (quality) × 0.6 (partial) = 4.8 of 20 max

  • [claimed-docs] https://developers.riskified.com/reference/pre-auth-flow-decide.md“The `/decide` endpoint is used to request that Riskified review an order for fraud after the customer has input their payment data and completed the purchase... Riskified's decision is returned synchronously”
  • [claimed-docs] https://developers.riskified.com/reference/post-auth-flow-submit.md“The `/submit` endpoint sends transaction data to Riskified after the gateway authorizes the transaction for fraud analysis... the fraud decision is returned via your pre-configured notification URL”
  • [claimed-docs] https://developers.riskified.com/reference/advise.md“For each order reviewed by advise we provide a synchronous decision if it is clear fraud... CVV/3DS recommendations can be provided... TRA/SCA exemption recommendation is added for the regulated markets”
  • [claimed-docs] https://developers.riskified.com/reference/sdks.md“Riskified provides SDKs for several languages to simplify API integration. SDK usage is optional, and all API endpoints can also be accessed directly using HTTP requests.”
  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined... If the endpoint responds with a non-2xx HTTP status code, Riskified retries delivery”

Plug MCP servers into this product so it can use their toolsweight 3

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Connect an agent via an official MCP serverweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Use an official CLIweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Drive the product through a documented public APIweight 3

3 (weight) × 8 (quality) × 1.0 (full) = 24.0 of 30 max

  • [claimed-docs] https://developers.riskified.com/reference/pre-auth-flow-decide.md“The `/decide` endpoint is used to request that Riskified review an order for fraud after the customer has input their payment data and completed the purchase... Riskified's decision is returned synchronously”
  • [claimed-docs] https://developers.riskified.com/reference/post-auth-flow-submit.md“The `/submit` endpoint sends transaction data to Riskified after the gateway authorizes the transaction for fraud analysis... the fraud decision is returned via your pre-configured notification URL”
  • [claimed-docs] https://developers.riskified.com/reference/advise.md“For each order reviewed by advise we provide a synchronous decision if it is clear fraud... CVV/3DS recommendations can be provided... TRA/SCA exemption recommendation is added for the regulated markets”
  • [claimed-docs] https://developers.riskified.com/reference/sdks.md“Riskified provides SDKs for several languages to simplify API integration. SDK usage is optional, and all API endpoints can also be accessed directly using HTTP requests.”
  • [claimed-docs] https://developers.riskified.com/reference/api-authentication.md“X-RISKIFIED-HMAC-SHA256 | Verification hash for the Request. Generated by performing an SHA256 encryption on the request's POST body and calculating the HMAC hash of the result using your Riskified authentication token.”
  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined... If the endpoint responds with a non-2xx HTTP status code, Riskified retries delivery”
  • [claimed-docs] https://developers.riskified.com/reference/pre-auth-flow-decide.md“Riskified supports different integration types:\n- **Pre-authorization Synchronous**: Review orders before payment authorization\n- **Post-authorization Synchronous**: Review orders after payment authorization with synchronous response\n- **Post-authorization Asynchronous**: Review orders after payment authorization with asynchronous response”
  • [probe] https://developers.riskified.com/llms.txt“PROBE llms.txt: HTTP 200 at https://developers.riskified.com/llms.txt # Riskified documentation Documentation > Riskified Documentation Append .md to any documentation page URL to get its”
  • [probe] https://developers.riskified.com/openapi.json“PROBE openapi: all candidate paths 404 (https://developers.riskified.com/openapi.json, https://developers.riskified.com/swagger.json, https://developers.riskified.com/api/openapi.json, https://developers.riskified.com/.well-known/openapi.json)”

Issue scoped/least-privilege API credentials for an agentweight 2

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Build against official SDKsweight 2

2 (weight) × 5 (quality) × 0.6 (partial) = 6.0 of 20 max

  • [claimed-docs] https://developers.riskified.com/reference/sdks.md“Riskified provides SDKs for several languages to simplify API integration. SDK usage is optional, and all API endpoints can also be accessed directly using HTTP requests.”

Subscribe to events via webhooksweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined... If the endpoint responds with a non-2xx HTTP status code, Riskified retries delivery”
  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined.”
  • [claimed-docs] https://developers.riskified.com/reference/api-authentication.md“X-RISKIFIED-HMAC-SHA256 | Verification hash for the Request. Generated by performing an SHA256 encryption on the request's POST body and calculating the HMAC hash of the result using your Riskified authentication token.”
  • [claimed-docs] https://developers.riskified.com/reference/post-auth-flow-submit.md“The `/submit` endpoint sends transaction data to Riskified after the gateway authorizes the transaction for fraud analysis... the fraud decision is returned via your pre-configured notification URL”
  • [claimed-docs] https://developers.riskified.com/reference/chargeback.md“Notifies Riskified that a chargeback has been submitted for a specific order.”

Agent-ready = 58.0 ÷ 160 × 100 = 36.3

API quality0.0/100×0.20 of the PA blend

The programmable surface once an agent is there — machine-readable spec, interactive docs, sandbox, versioning discipline.

Explore an interactive API reference with runnable examplesweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [probe] https://developers.riskified.com/openapi.json“PROBE openapi: all candidate paths 404 (https://developers.riskified.com/openapi.json, https://developers.riskified.com/swagger.json, https://developers.riskified.com/api/openapi.json, https://developers.riskified.com/.well-known/openapi.json)”
  • [claimed-docs] https://developers.riskified.com/reference/pre-auth-flow-decide.md“The `/decide` endpoint is used to request that Riskified review an order for fraud after the customer has input their payment data and completed the purchase... Riskified's decision is returned synchronously”
  • [claimed-docs] https://developers.riskified.com/reference/pre-auth-flow-decide.md“Riskified supports different integration types:\n- **Pre-authorization Synchronous**: Review orders before payment authorization\n- **Post-authorization Synchronous**: Review orders after payment authorization with synchronous response\n- **Post-authorization Asynchronous**: Review orders after payment authorization with asynchronous response”

Download a machine-readable API spec (OpenAPI or equivalent)weight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [probe] https://developers.riskified.com/openapi.json“PROBE openapi: all candidate paths 404 (https://developers.riskified.com/openapi.json, https://developers.riskified.com/swagger.json, https://developers.riskified.com/api/openapi.json, https://developers.riskified.com/.well-known/openapi.json)”
  • [probe] https://developers.riskified.com/llms.txt“PROBE llms.txt: HTTP 200 at https://developers.riskified.com/llms.txt # Riskified documentation Documentation > Riskified Documentation Append .md to any documentation page URL to get its”

Test against a sandbox environment without touching production dataweight 1

1 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 10 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Rely on versioned APIs with a documented deprecation policyweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [probe] https://developers.riskified.com/openapi.json“PROBE openapi: all candidate paths 404 (https://developers.riskified.com/openapi.json, https://developers.riskified.com/swagger.json, https://developers.riskified.com/api/openapi.json, https://developers.riskified.com/.well-known/openapi.json)”

API quality = 0.0 ÷ 70 × 100 = 0.0

Openness0.0/100×0.20 of the PA blend

Can you leave, inspect, or self-host — data export, open source, portability.

Do everything through the API that I can do in the UIweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Export all of my data in open formats and leaveweight 3

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Read the product's source under an open licenseweight 2

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Self-host the core productweight 3

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Openness = 0.0 ÷ 20 × 100 = 0.0

Built-in AI0.0/100×0.15 of the PA blend

Inside-out: how agentic the product itself is for its users — built-in assistants, autonomous features.

Get AI-generated insights and suggestions from my data inside the productweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Set up automations that run autonomously in the backgroundweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Delegate tasks to a built-in AI assistant inside the productweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Operate the product with natural-language commandsweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Built-in AI = 0.0 ÷ 90 × 100 = 0.0

Automation10.8/100×0.15 of the PA blend

Depth of automation primitives — rules, scheduling, bulk operations, webhooks.

Perform bulk operations across many items at onceweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Define rules that trigger actions automatically on eventsweight 3

3 (weight) × 3 (quality) × 0.6 (partial) = 5.4 of 30 max

  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined... If the endpoint responds with a non-2xx HTTP status code, Riskified retries delivery”
  • [claimed-docs] https://developers.riskified.com/reference/notifications.md“Riskified can send automated decision notifications to a merchant-defined endpoint when an order is approved or declined.”
  • [claimed-docs] https://developers.riskified.com/docs/shopify-integration.md“Voids authorization on orders declined by Riskified. Enables automatic restocking of orders declined by Riskified. Captures funds for orders approved by Riskified.”
  • [claimed-docs] https://developers.riskified.com/docs/shopify-integration.md“Voids authorization on orders declined by Riskified. Enables automatic restocking of orders declined by Riskified. Captures funds for orders approved by Riskified. Triggers cancellation emails to customers when an order is declined by Riskified.”

Schedule recurring jobs or workflowsweight 2

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Version, review, and roll back my automationsweight 1

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Automation = 5.4 ÷ 50 × 100 = 10.8