POST https://api.tracenow.io/identify
The /identify endpoint is called by the tracenow browser snippet. It accepts raw browser fingerprint components, computes a stable visitor_id, and returns a short-lived signed device token (dt_...) that you pass to /trace or /validate.
This endpoint uses a publishable key, not a secret key. It is safe to call from the browser.
Request
| Field | Type | Required | Description |
|---|---|---|---|
publishable_key | string | Yes | Publishable key from your dashboard (pk_live_...). |
components | object | Yes | Fingerprint components collected by the browser snippet. |
Response
| Field | Type | Description |
|---|---|---|
device_token | string | Signed JWT (dt_...). Pass this to /trace or /validate. Valid for expires_in seconds. |
visitor_id | string | Stable identifier for this browser/device combination. Consistent across sessions for the same device. |
expires_in | integer | Token lifetime in seconds (300 by default). |
Browser snippet
The easiest way to call/identify is via the tracenow snippet hosted at cdn.tracenow.io/trace.min.js. It collects components automatically and handles token lifecycle.
