Collect Intelligence
The Automation Intelligence API (in public preview) gives you the tools to determine whether traffic is legitimate and should be accepted by your application.
The API detects automation tools like AI Agents, AI Assistants and AI Browsers. Additionally it provides IP intelligence like geolocation and data center detection.
Authorizations
Add your Secret API Key to the Authorization header using the standard Bearer format: Authorization: Bearer <secret_api_key>
Body
HTTP request metadata (including the HTTP method, headers and IP address) sent by you (your server) to the Fingerprint API for IP and bot analysis. To improve accuracy, retain as much of the original semantics of the HTTP request as possible. For example, preserve the order of the request headers and their capitalization.
Ordered header entries from the request made to your server. Each entry represents one header line. If one header name appears as multiple lines, send each as a separate item in the array.
Headers that contain authentication details like Cookie or Authorization should be included with their value set to an empty string.
1[
{ "name": "host", "value": "example.com" },
{
"name": "user-agent",
"value": "Mozilla/5.0"
},
{
"name": "accept-language",
"value": "en-US,en;q=0.9"
}
]
[
{ "name": "host", "value": "example.com" },
{
"name": "user-agent",
"value": "Mozilla/5.0"
},
{
"name": "accept-encoding",
"value": "gzip"
},
{
"name": "accept-encoding",
"value": "deflate"
}
]
HTTP method of the request. Preserve the original HTTP method of the request, including casing.
"GET"
"POST"
"PUT"
"PATCH"
"DELETE"
Absolute URL of the request, without a #fragment suffix. Only HTTP and HTTPS schemes are supported.
"http://example.com"
"https://example.com/checkout?method=card"
Client IPv4 address observed by your server.
"34.162.244.71"
"3.208.0.3"
"173.56.0.4"
Client IPv6 address observed by your server.
"2001:4860:4801:10::1"
"2600:1f42:abcd:5678:9876:fedc:1357:2468"
"2001:4868:85f:1a2b:3c4d:5e6f:7890:abcd"
A customer-provided id that was sent with the request.
"somelinkedId"
A customer-provided value or an object that was sent with the identification request or updated later.
Response
OK.
IP and bot analysis for a request submitted through the Automation Intelligence API.
Unique identifier of the user's request. The first portion of the event_id is a unix epoch milliseconds timestamp.
"1708102555327.NLOjmg"
Timestamp of the event with millisecond precision in Unix time.
1708102555327
Details about the request IP address. Has separate fields for v4 and v6 IP address versions.
A customer-provided id that was sent with the request.
"somelinkedId"
A customer-provided value or an object that was sent with the identification request or updated later.
Page URL from which the request was sent.
"https://www.example.com/login"
Extended bot information.
IP address was used by a public proxy provider or belonged to a known recent residential proxy
Confidence level of the proxy detection. If a proxy is not detected, confidence is "high". If it's detected, can be "low", "medium", or "high".
low, medium, high Proxy detection details (present if proxy is true)
VPN or other anonymizing service has been used when sending the request.
A confidence rating for the VPN detection result — "low", "medium", or "high". Depends on the combination of results returned from all VPN detection methods.
low, medium, high