Vercel BotID

This flow applies when a site is protected by Kasada through Vercel BotID. You can identify this by the presence of the `x-is-human` header on requests to protected endpoints.

Overview

Vercel BotID is a bot detection system that can be used alongside Kasada protection. When enabled, protected endpoints require an x-is-human header containing a generated token. You can identify sites using Vercel BotID by observing the x-is-human header in browser requests to protected endpoints.

Step 1: Fetch the c.js Script

Make a GET request to the BotID script. The script path follows this pattern:

https://www.example.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/a-4-a/c.js?i=0&v=3&h=www.example.com

Critical requirements:

• Match browser headers exactly

• Maintain the same header order as Chrome

Save the JavaScript response body as you'll need it for the next step.

Step 2: Generate the x-is-human Header via API

Use the Hyper Solutions API to generate the x-is-human header value.

Refer to the botid.md and the SDK documentation for accurate fields.

Golang

header, err := session.GenerateBotIDHeader(ctx, &hyper.BotIDHeaderInput{
    Script:         scriptBody,
    UserAgent:      "your-user-agent",
    IP:             "your-proxy-ip",
    AcceptLanguage: "en-US,en;q=0.9",
})
if err != nil {
    // Handle the error
}
// header is ready to use as x-is-human value

Python

JS / TS

Step 3: Making Requests to Protected Endpoints

Include the generated token in the x-is-human header on requests to protected endpoints. Observe what headers the browser includes and match them exactly.

When to Re-generate the Header

You may need to generate a new x-is-human header if:

• You receive a 429 response on protected endpoints

• Your proxy IP address changes

Summary

The complete flow:

1. ✅ GET request to c.js script endpoint

2. ✅ Generate x-is-human header via Hyper Solutions API

3. ✅ Make requests to protected endpoints with the x-is-human header

You have now successfully integrated Vercel BotID!