Visitor fingerprints API

Use the Visitor fingerprints API to inspect visitor identifiers and their recent linked sessions.

Fingerprints endpoints require a secret key. Listing fingerprints requires the fingerprints:list scope, and reading one fingerprint requires the fingerprints:read scope. See Authentication.

You can access retained session observations from your secret key’s environment. Keys in the same organization and environment can access the same records.

seen_count counts distinct observed sessions.
First/last seen and latest request describe those observations.
Visitors without observations in your environment return 404 and do not appear in lists.

You receive null anchors, an empty component vector, and false storage flags because the identity store cannot attribute these fields to an environment. Treat the storage flags as unavailable, not as evidence that browser storage was absent. You can still view organization-wide identity details in the dashboard.

Endpoint summary

Method	Path	Purpose
`GET`	`/v1/fingerprints`	List visitor fingerprints for an organization. Requires the `fingerprints:list` scope.
`GET`	`/v1/fingerprints/:visitorId`	Retrieve one visitor fingerprint and its recent linked sessions. Requires the `fingerprints:read` scope.

`GET /v1/fingerprints`

Requires a secret key with the fingerprints:list scope. Supported query parameters:

Parameter	Type	Default	Notes
`limit`	integer	`50`	Page size from `1` to `200`.
`cursor`	string	-	The `pagination.next_cursor` from the previous page.
`search`	string	-	A value that starts with `vid_`, or a 32-character hexadecimal value, matches a visitor ID exactly. Any other value is a case-insensitive substring match against the visitor ID and the latest user agent and IP address.
`sort`	`seen_count` or `first_seen`	most recently seen	Orders results from the highest value to the lowest. `seen_count` puts the most frequently seen visitors first. `first_seen` puts the most recently first-seen visitors first.

Without sort, the list starts with the visitors seen most recently. A limit, sort, or cursor value that isn’t valid returns 422 with request.validation_failed. A cursor works only with the sort value of the request that returned it. See Pagination. Example response:

{
  "data": [
    {
      "object": "visitor_fingerprint",
      "id": "vid_7m2k9x4v8q1n5t3w6r0p2c4y8h",
      "lifecycle": {
        "first_seen_at": "2026-03-17T00:00:00.000Z",
        "last_seen_at": "2026-03-17T00:00:00.000Z",
        "seen_count": 1,
        "expires_at": "9999-12-31T00:00:00.000Z"
      },
      "latest_request": {
        "user_agent": "Mozilla/5.0 ...",
        "ip_address": "127.0.0.1"
      },
      "storage": {
        "cookies": false,
        "local_storage": false,
        "indexed_db": false,
        "service_worker": false,
        "window_name": false
      },
      "anchors": {
        "webgl_hash": null,
        "parameters_hash": null,
        "audio_hash": null
      }
    }
  ],
  "pagination": {
    "limit": 50,
    "has_more": false
  },
  "meta": {
    "request_id": "req_0123456789abcdef0123456789abcdef"
  }
}

lifecycle.expires_at is always 9999-12-31T00:00:00.000Z. This value is a sentinel that means the fingerprint doesn’t expire, so don’t treat it as a date to schedule against.

`GET /v1/fingerprints/:visitorId`

Returns the visitor fingerprint detail plus a recent linked-session summary. Requires a secret key with the fingerprints:read scope. activity.sessions lists up to 100 recent decisions for sessions linked to this visitor, newest first. Example response:

{
  "data": {
    "object": "visitor_fingerprint",
    "id": "vid_7m2k9x4v8q1n5t3w6r0p2c4y8h",
    "lifecycle": {
      "first_seen_at": "2026-03-17T00:00:00.000Z",
      "last_seen_at": "2026-03-17T00:00:00.000Z",
      "seen_count": 1,
      "expires_at": "9999-12-31T00:00:00.000Z"
    },
    "latest_request": {
      "user_agent": "Mozilla/5.0 ...",
      "ip_address": "127.0.0.1"
    },
    "storage": {
      "cookies": false,
      "local_storage": false,
      "indexed_db": false,
      "service_worker": false,
      "window_name": false
    },
    "anchors": {
      "webgl_hash": null,
      "parameters_hash": null,
      "audio_hash": null
    },
    "components": {
      "vector": []
    },
    "activity": {
      "sessions": [
        {
          "session_id": "sid_7m2k9x4v8q1n5t3w6r0p2c4y8h",
          "decision": {
            "event_id": "evt_7m2k9x4v8q1n5t3w6r0p2c4y8h",
            "verdict": "human",
            "risk_score": 12,
            "phase": "snapshot",
            "is_provisional": false,
            "manipulation": null,
            "evaluation_duration_ms": 17,
            "evaluated_at": "2026-03-17T00:00:03.000Z"
          },
          "request": {
            "url": "https://app.example.com/signup",
            "user_agent": "Mozilla/5.0 ...",
            "ip_address": "127.0.0.1",
            "screen_size": "1440x900",
            "is_touch_capable": false
          },
          "score_breakdown": {
            "categories": {
              "behavioral": 12
            }
          }
        }
      ]
    }
  },
  "meta": {
    "request_id": "req_0123456789abcdef0123456789abcdef"
  }
}

Get started

Detection

Agents

Webhooks

Management

Visitor fingerprints API

Endpoint summary

`GET /v1/fingerprints`

`GET /v1/fingerprints/:visitorId`

​Endpoint summary

​GET /v1/fingerprints

​GET /v1/fingerprints/:visitorId

Endpoint summary

`GET /v1/fingerprints`

`GET /v1/fingerprints/:visitorId`