Signals & API reference
Canonical technical documentation for integrators, researchers, and AI agents. For a compact site index see llms.txt; for the full machine-readable catalog see llms-full.txt.
REST API
Rate limits apply per client IP (default 5 requests/minute). OpenAPI schema when enabled:
- /openapi.json — OpenAPI 3 schema
- /docs — Swagger UI
| Method | Path | Notes |
|---|---|---|
| GET | /health | Liveness and subsystem readiness |
| GET | /api/v1/analyze/me | User-Agent + HTTP headers only |
| POST | /api/v1/analyze | Full analysis; optional client_signals and ?locale= |
| GET | /api/v1/stats/public | Anonymized benchmark aggregates (cacheable JSON) |
| GET | /stats/feed.xml | RSS daily stats rollup |
| GET | /stats/feed.json | JSON Feed daily rollup |
Repository API contract: see project doc/api.md on GitHub. Do not log full analysis responses in third-party systems.
Client signal probes
Collected in-browser and POSTed under client_signals (allowlisted server-side). Core tier: canvas, WebGL, audio, fonts. Extended: math, media queries, speech, WebRTC. Also: storage, automation, and protection bait probes.
Details: anti-fingerprinting guide · signal pages under /guides/signals/
Inference catalog
Each POST /api/v1/analyze response includes inferences[] with id, source (user_agent, http_headers, javascript, combined, ip_geolocation), category, title, summary, and confidence.
Full id list (no hashes or PII): llms-full.txt § Inference catalog. Deep-link to a card after analysis: /?highlight=<inference_id> (e.g. canvas_fingerprint).
Citation
- Tool:
Privacy analysis via How Private Am I? (https://howprivateami.com/) — free browser fingerprint check. - Stats:
Privacy statistics via How Private Am I? — https://howprivateami.com/stats
Run a live analysis with full signal breakdown.
Run privacy analysis