Conure API

Bot check

Scores an IP and User-Agent pair. A risk score above 50 sets is_bot. The IP half is deterministic: a merged range table over published datacenter CIDRs, with no heuristics.

Endpoint

1 credit per call

POST https://conureapi.com/v1/bot-check

Request

FieldTypeRequiredDescription
ip string Required IPv4 address of the client.
user_agent string Optional Raw User-Agent header. Absent or empty is itself a signal.
headers object Optional Request headers, up to 64 entries. Missing browser headers add risk.

Response

{
  "is_bot": true,
  "risk_score": 100,
  "reasons": [
    "datacenter_ip",
    "missing_sec_ch_ua",
    "missing_accept_language",
    "missing_sec_fetch_site",
    "known_bot_user_agent"
  ]
}

Code examples

Try it

Runs against the live API from your browser. Your key stays in this tab and is sent nowhere but this endpoint.

Pricing

One credit per call. Your own 4xx and our 5xx are refunded, so you only pay for answers. Full pricing is on your billing page.

Rate limits

120 requests per minute per API key. Exceeding it returns 429 with a Retry-After header, and costs no credits. Rate limiting fails open: if the limiter itself is unavailable your request is served rather than rejected.

Need a higher limit? See errors and limits for how the limiter behaves under load.