Skip to main content
POST
Ingest a Vercel Drain delivery

Authorizations

Authorization
string
header
required

API keys generated via POST /api/v1/me/api-keys. Format: Authorization: Bearer fxa_<32-char-secret>. Only accepted on /api/public/v1/*. Cookie auth is rejected on that surface.

Headers

x-vercel-signature
string

Hex HMAC-SHA1 of the raw body using the drain's signing secret. Vercel makes the secret optional; verification is enforced only when a secret has been saved for the brand, and then a missing or mismatched signature is a 403.

Query Parameters

site_id
string<uuid>
required

The brand's public site id (the same value used by the JS tag). Ownership-checked against the API key's account. May also be sent as an X-FixAEO-Site header.

verify
string

Echoed back as x-vercel-verify on every response.

Body

id
string
source
enum<string>
Available options:
build,
edge,
lambda,
static,
external,
firewall,
redirect
host
string

Deployment hostname; prefer proxy.host

timestamp
integer<int64>

Unix MILLISECONDS

proxy
object

Present only for records describing a served HTTP request.

Response

Delivery handled. Also returned for unparseable bodies and for deliveries containing no request records.

accepted
integer

Crawler hits stored

scanned
integer

Records seen in the delivery

skipped
integer

Records that were not AI-crawler requests

monthly_used
integer
monthly_cap
integer