Skip to main content
13-factor risk scoring, dark fleet detection, STS transfers, loitering, identity changes, and draft anomalies.

​
Risk tiers

Every dark event is scored 0–100 across 13 weighted factors (gap duration, gap frequency, location proximity to STS hotspots, flag state, vessel age, vessel type, prior history, sanctions match, STS involvement, draft anomaly, loitering, identity manipulation, P&I coverage, and obfuscation). The numeric score is then bucketed into a risk_tier for filtering and alerting. These thresholds are calibrated against the real production score distribution, where most dark events are isolated AIS gaps with zero contribution from compounding factors like sanctions matches or STS involvement. Use risk_tier=high,critical to focus on the small subset of events that warrant active investigation, and use risk_score directly when you need finer-grained filtering than the tier boundaries provide. The tier value is stamped on every event returned by /api/v1/risk/events, /api/v1/risk/vessels, and the dark_event webhook payload — see the Webhooks API for the webhook envelope and Watchlist API for tier-aware notification rules.

​
GET /api/v1/risk/vessels

All risk-scored vessels. Filter by tier, type, or flag. Parameters Response
Example

​
GET /api/v1/risk/vessel/{imo}

Full risk profile for a single vessel including dark events. Parameters Response
Example

​
GET /api/v1/risk/events

Dark fleet AIS gap events. Filter by tier or vessel. Parameters Response
Example

​
GET /api/v1/risk/stats

Aggregate risk statistics: active gaps, critical vessels, hotspots, events by tier. Response
Example

​
GET /api/v1/risk/sts

Ship-to-ship transfer events with confidence and draft transfer data. Parameters Response
Example

​
GET /api/v1/risk/sts/stats

STS aggregate statistics: total events, by confidence, tonnage, active encounters. Response
Example

​
GET /api/v1/risk/loitering

Loitering events (stationary or slow-roll) with context zones. Parameters Response
Example

​
GET /api/v1/risk/identity

Vessel identity change events (flag, name, MMSI). Parameters Response
Example

​
GET /api/v1/risk/identity/history

Full identity history for a vessel. Parameters Response
Example

​
GET /api/v1/risk/mismatches

Draft mismatch events: directional, magnitude, or zero-change anomalies. Parameters Response
Example

​
GET /api/v1/risk/hotspots

STS hotspot zones (seeded and auto-discovered). Parameters Response
Example

​
GET /api/v1/risk/baselines

Port-level draft baselines used for anomaly detection. Response
Example