--spam=toxicity (and it reminds you to set the key).
https://commentanalyzer.googleapis.com/v1alpha1/comments:analyze with languages: ['en']. It takes the max summaryScore.value across requested attributes.
Timeouts and HTTP errors follow
spam.fail_mode (allow or review). Put heuristic before toxicity so cheap local denies skip the paid API.
English-only in this version (languages => ['en']). Tune thresholds on a staging thread before you roll out to production guests.
