FingerprintIQ Sentinel Demo

This API classifies every request. Try hitting it with curl, Python, or your browser.

Live Test

        

      

    


    
    

      
Endpoints

      

        

          GET
          

            
/api/classify

            
Returns the Sentinel classification for the caller — type, confidence, fingerprint, and subcategory details.

          

        

        

          GET
          

            
/api/echo

            
Returns all request headers plus the Sentinel result. Useful for debugging what the server sees from your client.

          

        

      

    


    
    

      
Install

      

        
npm install @fingerprintiq/server

        
      

    


    
    

      

        
Code Examples

      

      

        
        
        
        
      


      
      

        

          
          
import { Hono } from 'hono';
import { sentinel } from '@fingerprintiq/server/hono';

const app = new Hono();

app.use('/api/*', sentinel({
  apiKey: 'YOUR_API_KEY',
}));

app.get('/api/data', (c) => {
  const caller = c.get('sentinel');
  console.log(caller.callerType);  // "AI_AGENT"
  console.log(caller.classification.framework); // "langchain"
  return c.json({ ok: true });
});

        

      


      
      

        

          
          
import { createSentinel } from '@fingerprintiq/server';

const sentinel = createSentinel({
  apiKey: 'YOUR_API_KEY'
});

const result = await sentinel.inspect(request);
console.log(result.callerType);       // "CLI_TOOL"
console.log(result.callerConfidence); // 0.85

        

      


      
      

        

          
          
curl https://sentinel-demo.fingerprintiq.com/api/classify
# Returns: { "callerType": "CLI_TOOL", "library": "curl" }

        

      


      
      

        

          
          
import httpx
r = httpx.get("https://sentinel-demo.fingerprintiq.com/api/classify")
print(r.json()["callerType"])  # "SDK_CLIENT"

        

      

    


    
    

      
Caller Types

      

        

          
          

            
Human Browser

            
Real user visiting in a standard browser — safe to serve.

          

        

        

          
          

            
Automated Browser

            
Headless Chrome / Playwright / Puppeteer — treat with caution.

          

        

        

          
          

            
AI Agent

            
LLM framework calling your API (LangChain, CrewAI, etc.).

          

        

        

          
          

            
CLI Tool

            
Developer hitting the API directly — curl, HTTPie, etc.

          

        

        

          
          

            
SDK Client

            
Legitimate server-to-server call via a known HTTP library.

          

        

        

          
          

            
Bot / Scraper

            
Known crawler or scraping tool — block or rate-limit.

          

        

        

          
          

            
Unknown

            
Signal insufficient to classify — inspect manually.