Migrating from Spur to Synthient
This guide contains information to help migrate from the Spur context API to Synthient. It includes the key differences between the fields and how to transition your application.
The Synthient API has several overlapping fields with Spur; however, the Spur API misses a number of nuances aimed at reducing noise and adding additional information.
Synthient API endpoint for IP lookups is https://v3v3api.synthient.com/v3/lookup/:ip
Spur IP Lookup
GET /v2/context/ :ip
curl https://api.spur.us/v2/context/ $IP \ -H " Token: $SPUR_TOKEN "
Synthient IP Lookup
GET /v3/lookup/ip/ :ip
curl -G https://v3api.synthient.com/v3/lookup/ip/ $IP \ -H " Authorization: $API_KEY " Main Object
Spur Field Synthient Field Description ip ip The IP address being queried. as network An object containing details about the Autonomous System and network provider. location location An object with geographical information for the IP address. infrastructure network.type The classification of the network the IP address belongs to (e.g., DATACENTER, RESIDENTIAL). client ip_data An object containing client, device, and behavioral data.
Network / AS
Spur Field Synthient Field Description number asn The unique number assigned to the Autonomous System. organization isp The name of the organization or ISP that owns the AS. - org The organization associated with the IP, which can differ from the ISP. - abuse_email The designated email address for reporting network abuse. - abuse_phone The designated phone number for reporting network abuse. - domain The primary domain associated with the network provider.
Location
Spur Field Synthient Field Description country country The two-letter ISO 3166-1 alpha-2 country code. state state The state, region, or province associated with the IP. city city The city associated with the IP. - timezone The IANA time zone identifier (e.g., Pacific/Auckland). - longitude The geographic longitude coordinate. - latitude The geographic latitude coordinate. - geo_hash A geohash string representing the geographic coordinates.
Client, Risk & Proxy Details
Behavior & Classification Spur Field Synthient Field Description risks behavior A list of observed behaviors or risk classifications. services categories A list of service classifications or detected protocols . - ip_risk A numerical score from 0-100 indicating the overall risk level of the IP.
Device & Client Attributes Spur Field client Synthient Field ip_data Description types devices The types of devices observed from the IP (e.g., MOBILE, DESKTOP). count device_count A count of distinct client signatures or devices seen from the IP.
Proxy / Tunnel Provider Spur Field tunnels Synthient Field enriched Description operator provider The commercial name of the VPN or proxy provider. type type The classification of the service, such as VPN or RESIDENTIAL_PROXY. - last_seen The date the IP was last confirmed to be associated with this provider.
