Skip to main content

Bot Detection

When you add the script to your site, it runs in the visitor’s browser and sends traffic signals (e.g. behavior, fingerprint) to our API. We use that to classify traffic as bot or human and to power the metrics in your dashboard. This detection alone does not block anyone; it only observes and reports.

Basic implementation​

<script 
  async 
  src="https://api.trustedaccounts.org/js-sdk.js" 
  onload="new TrustedTraffic({publishableKey:'YOUR_PUBLISHABLE_KEY'}).init()">
</script>

Next step: Bot Protection — To actually enforce decisions (allow, challenge, or block) on each request, call the check-request API (POST with a hybrid JSON body: required ip, optional trustedId, headers, and cookies) from your server or CDN before serving the page. That flow is described in Bot Protection.