Optional request authentication
Bot traffic tracking now supports a website-specific auth token. It is an optional extra check that lets DataFast reject submissions without your token; existing setups keep working unchanged unless you enable Reject unauthenticated requests.
To use it, update @datafast/ai-crawl, create a token in your Bot traffic settings, keep it in a server-side environment variable, and pass it as authToken. Enable rejection only after the updated integration is deployed.
Use the API from any backend
You can also send Bot traffic events directly from PHP or any other backend—no Node.js package required. Send a server-side POST request to https://datafa.st/api/ai-crawls with your website ID, requested URL, crawler user agent, and optional IP and status code. The token is optional unless you enabled request authentication.
See the Bot traffic tracking guide for the package and direct API examples.
